Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier: 4wRiVeihjMRw/JAwVt7zqXd6C+Uss6jZtJnQv+ZW5+o=
Subject key identifier: 8E:3A:3A:7E:9D:AB:6C:0A:1B:F8:1F:9D:FF:FA:A4:C4:00:EC:96:4E
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 019FA673AB97EAD2D6EDC9C81C59EE21A468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number: 1341
Signing time: Tue 28 Jul 2026 02:00:26 +0000
Manifest this update: Tue 28 Jul 2026 02:00:26 +0000
Manifest next update: Wed 29 Jul 2026 02:00:26 +0000
Files and hashes: 1: 3JNSQLDSVjMCAeXDdRfs56ArU_A.roa (hash: rZTM/BDsvJUHVVJdlV2ux5RuYfvV5Fs0/F1F4geykB8=)
2: VTknZ-I_GU8r0qWqKMpUO2ZewjE.roa (hash: 3hD9W96lP9a4vkoDA7OXWeZO5moSVt18MKLKHlgk0dU=)
3: sFtpmEwf8BZ7WD7WnZcVk65ZP4c.roa (hash: m7H1o/4M+RauJJ9zEivTYaIxQJNTjYvvSZKIkxe1inE=)
4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: IaUa0xdQjLrjj7P4rfRM3YN7sTDjpNtNJL6rombVRsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 21:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:73:ab:97:ea:d2:d6:ed:c9:c8:1c:59:ee:21:a4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jul 28 02:00:26 2026 GMT
Not After : Jul 29 02:00:26 2026 GMT
Subject: CN=8e3a3a7e9dab6c0a1bf81f9dfffaa4c400ec964e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:85:0e:84:dc:cf:07:d5:d5:aa:c9:25:54:df:
16:de:23:c7:27:0d:7e:c9:ad:39:78:3f:35:23:58:
a7:33:01:72:94:cf:09:24:12:98:99:1b:1f:8a:06:
ed:4e:47:58:91:8a:ff:e6:5a:b6:b6:ac:59:b5:3d:
f7:eb:d9:c9:39:fd:17:95:7f:a2:63:84:84:93:b0:
99:da:80:f0:f4:f7:85:34:34:df:1f:36:7c:59:12:
e1:f5:b3:db:93:21:97:fa:f0:97:71:3c:65:6a:bc:
17:0e:94:e2:d2:ee:da:d4:7d:42:74:b3:7a:e1:e7:
f4:30:06:d0:e0:fa:e7:85:99:f3:64:3b:a4:e7:32:
59:d2:0c:84:3d:4b:69:c9:54:77:24:5d:67:d0:e0:
e6:34:35:a1:e9:cc:cd:fd:fd:9b:0d:0f:58:2f:0b:
44:cb:ad:14:72:43:ff:23:b5:88:da:1e:c1:53:c9:
bd:7e:e5:20:21:56:0b:50:ab:57:8b:e8:9f:5f:c0:
32:80:37:d5:2a:5a:18:4a:97:31:0d:23:59:51:b0:
99:9b:f5:f3:4a:e4:8d:d7:de:5b:2f:b5:db:9a:16:
55:45:8d:f5:2e:88:f0:c9:e3:a9:71:d1:f3:d8:44:
a5:71:41:55:db:98:27:37:3a:df:3e:aa:65:bd:d3:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3A:3A:7E:9D:AB:6C:0A:1B:F8:1F:9D:FF:FA:A4:C4:00:EC:96:4E
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1c:a2:35:a2:58:9a:e0:07:64:6d:09:ac:6f:fd:0c:90:17:
56:62:4c:50:1f:d2:56:ce:78:f0:7f:67:34:ab:3e:ab:db:98:
de:dd:07:70:87:66:bc:21:3a:26:f1:46:18:fb:8f:bd:9e:c1:
bb:9a:7b:75:69:88:70:f0:6d:a3:2b:25:ff:38:75:ca:ad:50:
bd:90:be:9c:77:24:50:7a:b7:a6:34:32:c9:29:51:8d:21:e8:
53:57:99:e8:a9:a3:17:e5:d6:3f:05:39:34:07:ad:aa:f4:35:
2c:cf:e4:0c:c5:51:eb:64:64:e2:25:e4:d1:58:fc:f8:db:90:
19:d1:17:29:06:e5:5b:ee:db:98:ae:eb:11:c3:fb:4e:02:7b:
ac:8b:62:81:09:44:18:e3:76:eb:67:e6:07:83:89:df:c9:84:
bb:84:4a:91:60:72:f7:8d:bb:33:65:35:99:05:ca:e2:5e:68:
ac:65:94:e6:8e:7f:dc:4d:a4:70:98:5e:07:c6:68:bf:4e:a6:
2a:af:11:11:03:4e:36:06:7f:c6:6e:c5:72:94:0d:64:e4:1c:
6c:49:7a:c1:df:77:5c:ee:1b:d8:f2:86:4e:e6:de:02:d0:1e:
32:c2:d7:56:ce:be:a9:02:fa:ff:c2:50:88:3c:b7:6f:c7:01:
bc:3e:90:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 04:24:31 2026 by rpki-client