Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: s9cuEjdSpKT1cVLwhhbdLP72qKipbadHOvfb9mGJ1SE=
Subject key identifier: ED:96:CA:91:AA:9A:25:04:74:56:AF:B3:AD:06:C4:4A:5D:24:54:CC
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 019FA0E0E9DE7E31B7CA5FEFB0D5867B3CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 00:02:02 +0000
Manifest this update: Mon 27 Jul 2026 00:02:02 +0000
Manifest next update: Tue 28 Jul 2026 00:02:02 +0000
Files and hashes: 1: FXM0lZ9RW8MVyeNhLRa0gA27Yz8.roa (hash: AOWqH2G8p3eNy+r9FYww+1k4v48/EVkof2UT4jbdqII=)
2: ScbfsojaaHjN1VPlqjt62kAyKyQ.roa (hash: lQ50zLidvT+ypigEP+SJVNAGB7dMGWzSVTcP7sdJtfU=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: C+7IJ8NPAttXPn5crzdBwQ5h1p5fCS3oBuNKFcSQAjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:e9:de:7e:31:b7:ca:5f:ef:b0:d5:86:7b:3c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Jul 27 00:02:02 2026 GMT
Not After : Jul 28 00:02:02 2026 GMT
Subject: CN=ed96ca91aa9a25047456afb3ad06c44a5d2454cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bb:58:7c:e9:34:dc:dc:05:ba:09:2e:d7:9e:
15:06:b9:fc:3a:40:54:f3:87:1a:48:a7:bc:51:25:
53:cc:e1:10:52:7d:62:a9:99:aa:3a:dc:18:57:49:
bb:83:b2:a5:f9:0e:b2:e3:8e:57:80:bc:7b:6c:96:
d7:34:e0:e0:5c:d0:ec:1e:34:f2:ed:c7:8b:e9:01:
00:ce:02:94:00:42:52:b3:2b:a3:6a:1b:1e:a6:b3:
70:a4:ed:4d:8a:fe:f5:7c:66:18:15:f2:c5:a2:0b:
8f:a3:7d:d4:18:3e:73:a6:09:88:48:f3:f5:94:8b:
0e:16:fa:00:41:d6:af:19:44:90:07:8a:4a:3d:6c:
72:c3:c7:51:81:c2:8e:a5:b9:d5:a9:5b:31:9e:8a:
59:64:21:c7:48:91:bd:7e:53:74:7d:11:f4:9d:99:
b8:a9:a4:0a:93:79:65:ea:70:bf:b3:6a:74:be:68:
4c:45:d9:17:fd:ba:c5:3e:b3:73:0d:22:9b:6a:27:
7b:0d:56:ef:8e:a0:b0:49:56:bb:63:b3:f9:32:7b:
fa:4f:3f:b3:f1:aa:79:f0:b5:90:a1:e2:e0:e4:59:
22:4f:7e:a1:e8:4a:76:eb:27:83:93:26:08:32:81:
f2:57:87:9c:8d:ad:7c:f0:da:d9:08:98:69:95:12:
75:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:96:CA:91:AA:9A:25:04:74:56:AF:B3:AD:06:C4:4A:5D:24:54:CC
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bc:2e:cb:13:21:78:9b:26:96:71:cd:2a:14:2c:9d:0f:d1:
48:b4:66:8d:ab:61:55:d1:fa:1c:a7:e3:db:0d:9c:ac:a0:ac:
c0:c9:46:f5:99:d2:b0:85:28:f3:65:a6:15:f5:b2:3a:fe:77:
23:6a:7e:b4:40:62:0f:9a:3c:da:5d:4b:df:7a:06:98:20:1d:
30:a6:8e:43:4c:75:fb:33:c0:83:be:9e:41:1e:9a:ba:8a:64:
80:63:99:b9:0f:f8:5c:10:ac:47:b1:b3:8c:ec:75:b4:43:a7:
ec:e9:e2:b1:c9:74:56:88:dd:45:4e:25:c0:fe:db:49:48:a4:
65:ba:c3:c3:30:6d:8a:41:bb:20:7c:25:8e:e6:be:64:86:d5:
52:97:0c:fe:c8:8e:13:63:54:be:69:e6:b4:26:f2:53:81:d5:
bf:d5:92:62:67:78:65:4c:7f:2c:ad:79:a8:87:7f:25:8c:4c:
5c:f1:1d:34:5b:95:30:32:67:d4:bf:8e:05:b0:01:10:5d:4d:
41:71:81:84:da:55:f3:f7:c4:2f:d3:06:c1:15:6f:d0:16:6d:
6d:b9:3f:0b:0f:c0:69:5e:7b:d8:2f:24:92:89:44:b8:94:8b:
d4:68:c4:b0:59:82:39:29:b8:09:70:86:90:09:71:b9:7e:90:
34:5d:15:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:41:37 2026 by rpki-client