Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier: QUElDjwRy9b+nU6cw9luYZppLSb1ihGrdTbMEN3Fd2Q=
Subject key identifier: CA:FC:56:19:3F:4D:F9:D0:A8:AF:F2:72:CE:21:37:5B:53:EB:AA:EE
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 019DCF3DFF0536D85915B347CF6BC6D441C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number: 124D
Signing time: Mon 27 Apr 2026 14:00:39 +0000
Manifest this update: Mon 27 Apr 2026 14:00:39 +0000
Manifest next update: Tue 28 Apr 2026 14:00:39 +0000
Files and hashes: 1: 3JNSQLDSVjMCAeXDdRfs56ArU_A.roa (hash: rZTM/BDsvJUHVVJdlV2ux5RuYfvV5Fs0/F1F4geykB8=)
2: VTknZ-I_GU8r0qWqKMpUO2ZewjE.roa (hash: 3hD9W96lP9a4vkoDA7OXWeZO5moSVt18MKLKHlgk0dU=)
3: sFtpmEwf8BZ7WD7WnZcVk65ZP4c.roa (hash: m7H1o/4M+RauJJ9zEivTYaIxQJNTjYvvSZKIkxe1inE=)
4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: NApo314702ZrpsGxy8PUM8crTpaVw/z+VoHF6O3wWAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3d:ff:05:36:d8:59:15:b3:47:cf:6b:c6:d4:41:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Apr 27 14:00:39 2026 GMT
Not After : Apr 28 14:00:39 2026 GMT
Subject: CN=cafc56193f4df9d0a8aff272ce21375b53ebaaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:11:a1:d6:ae:8a:ed:cd:eb:ce:97:88:b6:9b:
fa:96:cb:a5:e1:2c:c0:eb:e1:59:29:6f:27:96:ed:
18:44:7c:e0:cb:e0:82:65:35:3d:6d:9b:ab:60:88:
d0:30:f5:d2:fb:fb:f8:0e:bf:b2:4f:7f:cf:da:ec:
9a:a3:31:57:43:54:69:0c:ac:eb:8d:57:18:96:4c:
21:6d:ef:9a:5e:92:1d:f0:2f:43:b8:2e:6b:66:0c:
b6:05:c2:69:1d:07:99:dc:b7:49:7e:7f:69:66:b0:
c4:cc:c3:e1:2c:a5:63:7d:71:03:12:bb:7e:19:24:
6b:47:21:17:d1:e8:0f:af:d9:f3:a1:ff:a3:a9:5d:
d8:7b:f3:aa:e0:d5:9a:fb:96:88:26:bd:ed:df:cf:
17:cf:23:bd:ac:c6:74:75:28:89:60:54:75:27:72:
ad:cc:52:c2:fb:95:1d:52:d0:e6:c0:e9:49:94:8f:
84:4f:bb:3d:9c:45:c3:80:76:ad:54:31:61:94:ba:
d0:22:1a:68:76:93:91:f2:36:e3:45:07:8d:1c:38:
56:69:f9:24:63:d3:f6:ea:3a:9b:be:98:c8:71:68:
38:b7:1c:3b:06:6f:2d:be:dc:8c:06:68:be:11:46:
53:9b:1c:b9:34:b1:eb:e0:d8:64:64:fa:14:8f:bf:
ab:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FC:56:19:3F:4D:F9:D0:A8:AF:F2:72:CE:21:37:5B:53:EB:AA:EE
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d5:ec:af:f5:a5:3e:ab:93:be:83:23:65:7c:19:47:05:15:
7c:a7:03:50:ea:05:d2:5b:81:fc:0e:fb:55:2c:02:98:d5:ea:
c5:45:92:f5:d8:c7:d2:df:a8:61:60:ef:64:70:2d:83:0f:05:
f8:12:ef:87:bb:7d:e4:67:37:34:e8:ec:cb:80:ae:3e:e9:21:
7c:f1:6f:a0:bf:6f:2f:33:d0:5c:71:da:2a:6c:7a:48:6d:49:
7f:a9:20:7a:05:ad:83:73:7e:b9:9f:cf:de:22:fa:2f:ee:1d:
b8:ce:39:99:03:06:d9:0e:92:4a:8e:83:d9:b7:67:3d:42:73:
a9:de:8b:c6:c5:69:de:f8:9d:43:e2:3e:97:06:54:9c:25:55:
1a:a2:53:d9:d7:16:64:6d:70:b6:39:be:ee:59:f0:b8:43:3d:
0d:f4:5a:77:f4:2d:50:99:24:44:7d:7c:0a:44:43:6e:98:97:
98:61:03:44:cd:82:25:7f:94:f0:80:b6:18:26:a3:40:77:2e:
77:bb:86:b4:69:be:6b:8a:c6:d1:8f:5d:2e:17:b7:36:57:75:
4a:a9:cf:62:0e:2d:72:0b:98:0c:39:40:dd:26:d2:0c:17:8a:
a1:de:b0:e6:31:83:99:62:20:ec:72:02:e4:d3:02:b2:c0:1c:
a0:62:c4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:46:12 2026 by rpki-client