Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: ChXumsiEFG9tCNGq0d6unqMevasid4Wr4vdoPlVqfeQ=
Subject key identifier: 1F:A8:76:EA:82:E2:4D:12:6D:14:E8:02:75:7D:94:AB:2A:FD:40:6D
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 01A08A8D86A4F199EFA2D21EC08B6EBCAC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 09:02:05 +0000
Manifest this update: Thu 10 Sep 2026 09:02:05 +0000
Manifest next update: Fri 11 Sep 2026 09:02:05 +0000
Files and hashes: 1: FXM0lZ9RW8MVyeNhLRa0gA27Yz8.roa (hash: AOWqH2G8p3eNy+r9FYww+1k4v48/EVkof2UT4jbdqII=)
2: ScbfsojaaHjN1VPlqjt62kAyKyQ.roa (hash: lQ50zLidvT+ypigEP+SJVNAGB7dMGWzSVTcP7sdJtfU=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: e6AZHSkNpf7ZGV6ZAjsFTr1LgP4YXDRyM+UxG0j30gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:86:a4:f1:99:ef:a2:d2:1e:c0:8b:6e:bc:ac:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Sep 10 09:02:05 2026 GMT
Not After : Sep 11 09:02:05 2026 GMT
Subject: CN=1fa876ea82e24d126d14e802757d94ab2afd406d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:8c:62:91:67:38:49:f0:ec:21:82:ab:f4:
bc:f3:77:0c:ae:53:06:15:97:b0:07:80:4c:5b:71:
86:0a:3b:a9:a4:28:59:ad:bd:17:36:ca:77:83:3e:
40:d5:44:e2:86:3d:b8:e2:d4:d3:cc:62:39:bd:72:
83:b1:b3:7a:de:71:4e:90:3a:02:e6:f0:e4:d8:b0:
d6:47:12:a2:83:4a:2c:20:a1:04:bf:20:65:ab:10:
8b:2a:f8:ef:88:7d:ae:f0:67:24:48:04:e4:68:67:
2c:39:e5:f1:dd:cc:ff:46:d3:2f:6e:18:0d:5b:9d:
ea:95:d6:31:c7:80:e2:b5:d7:c1:38:9d:11:0f:af:
8f:3b:dc:70:d2:ff:b5:ca:83:f1:8e:bf:d5:90:2c:
3d:69:42:6f:58:3b:2b:ad:3e:d4:24:9e:47:bd:4b:
16:4e:59:8c:ae:71:42:14:4b:10:82:5a:86:0d:ea:
d1:15:1b:36:23:80:7c:43:84:b5:cc:65:d9:89:bb:
0b:ba:f3:9b:0b:1a:6f:77:b6:8c:4b:c3:70:03:9e:
94:ee:b4:19:09:70:7e:d0:d4:4a:07:df:8f:35:14:
5b:0e:69:66:89:cb:bf:f2:e0:6f:b9:83:72:44:1f:
e8:ca:ed:d2:ec:cc:fb:3b:20:99:e7:c3:3a:ad:fe:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A8:76:EA:82:E2:4D:12:6D:14:E8:02:75:7D:94:AB:2A:FD:40:6D
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:95:dc:cc:21:b2:c1:c4:01:ca:9f:94:ac:90:57:9a:f2:32:
da:b6:54:bf:44:d7:6f:48:af:b7:f4:c6:3d:76:19:b3:b5:26:
69:d1:9e:74:b7:ea:40:9d:32:4f:3b:c0:2a:f3:84:5d:1b:f9:
67:75:b4:77:58:ff:6f:76:9c:84:67:e6:58:9c:e1:81:05:84:
67:f1:84:35:d6:d4:d6:6e:49:c5:bc:61:f1:34:bd:3e:cb:e3:
ce:04:7e:18:9e:8d:84:9d:49:a6:34:08:c9:6a:75:43:80:e9:
41:8e:8b:59:cd:a8:fb:68:5d:fc:8e:a0:03:60:08:25:1f:2f:
c1:7c:0e:cb:e4:1b:e5:5b:0f:e0:32:22:f5:66:30:37:bb:d1:
cf:0f:ff:ec:f6:0a:27:14:bf:a3:d4:60:78:bf:53:2b:19:5c:
a9:70:bd:57:88:e8:75:12:17:ae:e8:a9:59:b4:9c:c5:db:20:
81:db:d0:ef:e7:64:28:77:04:24:88:f7:b4:76:ff:76:1c:bb:
5f:da:cf:05:c2:e1:5a:ba:f6:e0:27:37:a5:29:4c:31:7d:8d:
be:07:a5:b7:98:aa:19:44:76:75:29:84:c8:13:f1:07:79:ce:
fb:1b:7b:9a:a1:48:6c:24:84:6b:43:c7:a5:c3:70:d0:08:b9:
2c:fd:b2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:05:39 2026 by rpki-client