Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier: fwUTQTvMFOBRJT5ymq0KTR8GtPlnM75H8IrdSoa6wGU=
Subject key identifier: A3:EE:6B:AD:91:F8:49:BB:40:D2:70:32:1F:7F:6F:97:DF:55:B5:BE
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 01A08E329CE4945CF74DF869100FFF000C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number: 13B9
Signing time: Fri 11 Sep 2026 02:01:16 +0000
Manifest this update: Fri 11 Sep 2026 02:01:16 +0000
Manifest next update: Sat 12 Sep 2026 02:01:16 +0000
Files and hashes: 1: 3JNSQLDSVjMCAeXDdRfs56ArU_A.roa (hash: rZTM/BDsvJUHVVJdlV2ux5RuYfvV5Fs0/F1F4geykB8=)
2: VTknZ-I_GU8r0qWqKMpUO2ZewjE.roa (hash: 3hD9W96lP9a4vkoDA7OXWeZO5moSVt18MKLKHlgk0dU=)
3: sFtpmEwf8BZ7WD7WnZcVk65ZP4c.roa (hash: m7H1o/4M+RauJJ9zEivTYaIxQJNTjYvvSZKIkxe1inE=)
4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: /oVezWrqpdYy6nS7gU7xLpsrEXk//SBrm/yGairo17U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:32:9c:e4:94:5c:f7:4d:f8:69:10:0f:ff:00:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Sep 11 02:01:16 2026 GMT
Not After : Sep 12 02:01:16 2026 GMT
Subject: CN=a3ee6bad91f849bb40d270321f7f6f97df55b5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:83:92:af:b6:52:76:70:7e:a3:7c:ef:b7:
64:a1:5e:4f:51:ac:58:08:d5:34:7c:d4:35:38:80:
9b:3b:37:47:b6:37:f0:00:1b:13:05:7e:2d:60:0e:
d2:6b:f8:bb:ff:82:6c:b7:94:66:e7:f0:d3:f9:52:
68:e8:aa:9f:09:dd:97:3b:f4:74:db:1d:ab:ca:a6:
d4:5e:ce:ee:b8:b3:09:8e:2a:bf:7b:1c:a2:6b:d6:
0a:cc:bd:17:d4:b6:e5:82:64:39:7d:16:d8:37:52:
be:e7:c8:97:cf:09:f9:a9:6d:9b:9e:4b:43:d4:cb:
e0:90:01:3f:ae:9f:dc:27:2e:70:0d:d5:f5:a1:4a:
d3:9d:9e:37:50:40:8b:f3:5c:d8:95:c1:5a:a0:3f:
6a:d3:44:ce:2b:cd:7a:62:f7:74:0a:74:a9:8e:f4:
92:40:77:af:50:8c:b7:2e:ad:bf:70:2f:0a:94:bc:
74:66:95:17:9f:ea:98:0a:b9:69:4a:e8:f8:0a:32:
94:00:34:c0:27:03:f7:e2:a2:bb:6e:fe:02:92:ab:
12:cc:d8:95:57:b9:02:66:bf:39:bf:60:7d:2f:75:
45:c0:42:b8:92:06:52:fd:8e:92:97:0f:94:dc:0e:
31:9a:01:21:5c:d9:45:61:a3:c2:72:49:0d:2d:80:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EE:6B:AD:91:F8:49:BB:40:D2:70:32:1F:7F:6F:97:DF:55:B5:BE
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9f:6a:bc:8c:1a:d2:96:3c:f6:36:0a:6b:3e:30:4b:32:94:
11:92:ce:d1:45:04:2d:c8:f6:e4:82:c9:bf:19:13:32:50:60:
d4:ea:2f:a3:d1:e9:7f:7c:ca:4c:8d:56:1f:bc:75:65:04:bb:
47:72:b2:88:72:d3:36:b3:9a:28:cf:3d:c1:40:90:31:21:24:
1c:3b:a4:97:6f:99:9f:79:7d:88:6a:3f:e5:8c:33:6a:87:ae:
4c:44:d0:df:3d:10:32:e6:4d:72:04:c6:bf:d3:3b:40:d2:ea:
69:3b:37:1f:c1:50:ce:8a:79:5a:c0:a4:d9:d9:a4:ae:5a:de:
d7:c8:8e:df:76:14:a2:56:e7:5c:61:8c:e2:eb:ff:de:ca:06:
a1:4b:53:26:e2:24:b8:cf:8f:b1:f1:3d:de:7f:a7:c7:42:5e:
62:1b:56:e0:ba:30:a6:8c:44:94:36:40:85:92:ba:a7:d2:c4:
57:e4:8c:7a:db:75:32:9b:43:1e:19:07:e4:34:10:a5:6d:0a:
c7:91:ea:24:07:35:14:c5:c9:a6:78:78:36:95:36:a3:7d:5a:
c4:97:62:b5:67:b5:e5:16:1f:e9:b5:26:1d:2e:60:81:53:1c:
10:0d:07:03:19:7a:35:a5:e1:ad:d2:86:36:7c:a8:79:8f:1e:
4d:44:20:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:07:13 2026 by rpki-client