Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier: z6HLbLJVwgPlcge3A+w0OJcVHrl/LUAFASfUcrpeS5M=
Subject key identifier: C6:5E:3F:AD:4E:E9:CF:E3:7D:BE:77:08:65:DD:DB:81:6B:11:D8:90
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 019CE6DB1E0B565F9BF6E8940A4626EA8E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number: 11D4
Signing time: Fri 13 Mar 2026 11:00:45 +0000
Manifest this update: Fri 13 Mar 2026 11:00:45 +0000
Manifest next update: Sat 14 Mar 2026 11:00:45 +0000
Files and hashes: 1: 3JNSQLDSVjMCAeXDdRfs56ArU_A.roa (hash: rZTM/BDsvJUHVVJdlV2ux5RuYfvV5Fs0/F1F4geykB8=)
2: maD4ZOo_rUs8z8qAY9Uyjs0wQzk.roa (hash: +0Yc2a4Hcin9UDFGbH7GTi45lPLvJT0qe8vgESqSU1M=)
3: sFtpmEwf8BZ7WD7WnZcVk65ZP4c.roa (hash: m7H1o/4M+RauJJ9zEivTYaIxQJNTjYvvSZKIkxe1inE=)
4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: Lg6jUbGnv+9dgmjDtx7snfFWF1uoeCPBzK0Bu7pplnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:db:1e:0b:56:5f:9b:f6:e8:94:0a:46:26:ea:8e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Mar 13 11:00:45 2026 GMT
Not After : Mar 14 11:00:45 2026 GMT
Subject: CN=c65e3fad4ee9cfe37dbe770865dddb816b11d890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:71:01:00:d0:08:83:e4:cc:98:0b:23:d0:
23:81:b7:32:87:ae:b6:9a:96:34:88:9f:aa:ba:74:
d1:dc:73:20:ee:76:07:41:14:f8:fc:33:af:12:ba:
1a:0c:00:d6:e4:e1:77:f3:3b:31:f7:da:b9:fe:c9:
5b:af:05:7f:2f:89:29:e7:af:de:2c:2c:08:70:a0:
64:10:a7:9d:6b:a6:8f:81:96:f5:d4:52:1a:39:c9:
e4:d4:8f:b7:fb:62:20:9b:53:a2:1b:5f:91:17:8a:
06:d5:c8:79:1f:1a:01:4b:0a:d8:62:00:cf:9c:32:
25:83:56:2f:4c:c6:1f:27:18:cb:71:22:88:22:f7:
3c:67:8f:69:4a:3a:0b:fd:80:cb:41:45:07:d2:9c:
96:80:75:44:9b:f0:00:fa:f1:c8:cc:9d:3b:1b:f1:
3d:c3:cf:4f:52:d7:92:72:96:d1:18:63:39:f6:b2:
93:15:be:80:fd:da:40:b9:e2:6e:cc:fd:e5:65:a0:
5c:28:96:af:fb:2c:85:74:4d:18:d5:d7:93:50:cf:
79:9d:44:78:f7:6d:a6:f1:90:9e:76:da:58:10:60:
5d:ef:c3:11:a2:2d:39:ae:a2:39:2a:16:07:a1:b7:
49:b4:46:85:dd:29:cd:18:74:88:0d:2e:54:2f:28:
37:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5E:3F:AD:4E:E9:CF:E3:7D:BE:77:08:65:DD:DB:81:6B:11:D8:90
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e2:0d:73:7b:91:c1:6b:d7:69:01:ce:31:d1:17:89:45:f8:
3b:82:21:e1:b8:a3:bb:d2:8d:73:fe:60:07:c7:5c:82:f1:28:
15:de:1d:17:b1:dd:50:82:f4:02:bd:55:31:15:c7:d4:ba:66:
b3:31:05:e8:0a:58:0a:49:cc:b6:e8:5e:36:23:ac:51:d3:06:
62:00:e6:34:9e:81:c0:7a:78:67:24:5d:53:2a:1a:93:c4:5c:
ab:e4:f9:82:96:10:d6:6f:47:28:79:80:ac:9c:8f:f5:5a:41:
c0:dd:1c:5f:94:ba:4a:b1:3f:1b:fe:99:40:b6:3f:2f:d9:46:
4a:81:d0:98:55:75:9b:e1:0d:c0:1c:40:de:22:b2:a6:c9:ea:
ae:70:b9:7a:a5:ca:d2:47:66:64:20:13:cf:fc:5a:aa:b0:06:
ec:44:0a:90:90:ed:0f:a1:57:ef:ce:52:98:0d:36:08:66:b9:
61:b5:09:c6:37:68:77:03:a4:36:55:51:4d:bc:56:10:fc:71:
9e:0c:0b:24:37:9a:dc:cc:71:e8:48:84:a2:3d:1d:98:e0:ba:
99:d2:fd:3c:38:f2:d0:4a:bb:a6:fa:dd:86:da:3c:44:99:bb:
1f:43:2a:4f:47:e8:03:d1:eb:fa:62:59:dd:50:91:79:c0:05:
76:72:a5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:12:06 2026 by rpki-client