Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
File: SoCVkn7lfM7iVqpDnxY2hrWMVww.mft (raw, json)
Hash identifier: hBSLzb949zDL7xjzQlh59CVwo+wZREGi9s9iKpywxzo=
Subject key identifier: CF:87:57:A7:64:B1:39:51:35:AF:8C:D2:8B:69:2D:A8:8D:08:8D:C5
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial: 019D2772850ED6725C35BDC735951E8B38E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 00:01:49 +0000
Manifest this update: Thu 26 Mar 2026 00:01:49 +0000
Manifest next update: Fri 27 Mar 2026 00:01:49 +0000
Files and hashes: 1: SoCVkn7lfM7iVqpDnxY2hrWMVww.crl (hash: jHVtw54TIxJAZAB9G9IhqA/xs8v0Ld4NgfuBbx2GoaE=)
2: pth9nCfBOVCefSZjAlug7noCoiE.roa (hash: KUjSylzqEOQCJFtk+as86jaCnLWzKEeHrEArRWzUT98=)
3: ukI_HPYNJmvBtX0I8YnAqCqHIKc.roa (hash: V4VFe3RvbqJ8JaD1mJXWX5JH1StQafZpQ0cqoqd+N6E=)
4: z8VOUiSLPVMno5KoGBbOODeDDys.roa (hash: ReCSqOhvRxYoHh6okc3nEFEolgVxGfoS2RfPgFeXDJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:85:0e:d6:72:5c:35:bd:c7:35:95:1e:8b:38:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
Validity
Not Before: Mar 26 00:01:49 2026 GMT
Not After : Mar 27 00:01:49 2026 GMT
Subject: CN=cf8757a764b1395135af8cd28b692da88d088dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:9e:04:4d:8f:15:83:e4:01:19:f5:a1:0a:
49:7a:f3:86:31:3f:51:63:0a:9a:f0:97:71:c3:a4:
24:db:b2:c1:a4:b2:09:70:2a:7f:0d:fa:38:ad:b9:
fd:1d:98:a5:ca:ca:9a:ba:cd:9b:fe:f8:bd:db:a8:
ec:4c:95:f0:fb:57:fd:78:b2:fc:87:d0:68:ef:ce:
f2:3f:78:e8:e3:68:48:53:5e:91:54:20:06:54:3d:
34:7f:ea:ec:55:04:fa:73:14:24:77:35:e4:bd:0d:
54:d6:48:1f:da:55:fd:75:ea:c6:8f:a4:75:c6:fc:
9f:c2:15:5d:37:85:b6:24:a2:c6:b6:27:c1:9f:71:
86:97:b8:97:19:ed:25:96:e3:77:e0:9f:47:1b:97:
6e:80:40:62:69:75:1e:d3:3a:de:93:3a:4f:3d:d8:
17:a8:c5:4b:30:aa:ee:12:06:1c:73:64:0b:1e:fb:
81:bd:4b:8e:dd:7f:c4:22:f4:01:25:d6:23:f6:03:
4b:a8:ac:6e:60:a0:8a:75:19:4c:70:29:bf:30:fd:
ea:e0:79:d7:46:c9:df:62:ed:6a:fb:af:ad:c2:b2:
ae:2e:e3:49:7c:92:da:f6:63:c3:e9:ca:02:2b:e1:
8e:94:ed:65:7d:8c:e7:82:1c:2e:c3:14:d1:56:f4:
92:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:87:57:A7:64:B1:39:51:35:AF:8C:D2:8B:69:2D:A8:8D:08:8D:C5
X509v3 Authority Key Identifier:
keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ca:db:74:65:0d:15:01:45:a0:45:52:d6:13:75:0f:8f:41:
6a:d0:a4:bb:df:77:13:32:a1:d9:8f:79:2d:80:39:45:48:5a:
c4:b1:52:04:fe:c8:cb:ee:43:3a:77:0d:6f:7c:9d:57:b4:b1:
86:90:e5:c6:89:65:3d:ab:cb:59:b8:e5:5b:ff:2a:b3:06:26:
52:b3:57:33:17:2f:b7:5b:b5:f0:70:c5:90:a2:5d:3e:92:fe:
58:74:53:64:89:03:7c:b9:0d:10:74:83:b4:68:73:33:b5:23:
f8:66:43:33:ce:19:e6:4a:39:03:be:3e:f7:1d:64:aa:4f:9c:
26:21:77:ff:26:d6:e2:6e:f7:62:5c:7b:19:69:28:2e:8b:11:
8d:f9:66:5d:21:23:c7:b9:fc:66:44:a4:68:c0:e8:1b:1f:d8:
61:ee:77:f3:3e:2b:2c:bf:1b:d2:7c:39:a0:6d:fd:7b:3a:c2:
b2:45:27:17:fe:46:35:da:51:bd:47:10:43:44:e4:66:60:b1:
45:2e:6f:83:ea:31:29:d9:98:b1:0a:e3:73:df:18:d2:18:74:
04:f0:27:70:21:b4:0d:c6:58:a5:e0:c2:97:b2:66:63:20:6b:
49:c7:ef:15:be:20:de:21:bf:05:9c:80:78:9e:6e:1c:09:e0:
53:e6:83:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:10 2026 by rpki-client