Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: qZI+7r9Z060nU24K5O9NhbBSKx3B1pk3NT5sxGN4nxU=
Subject key identifier: BD:F6:07:80:07:94:D7:CA:1C:E0:F8:D9:30:84:D2:0A:D7:C6:4D:83
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 01A183AC81C436E6B3E5B64C241033BF9686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 1ACA
Signing time: Wed 28 Oct 2026 18:01:23 +0000
Manifest this update: Wed 28 Oct 2026 18:01:23 +0000
Manifest next update: Thu 29 Oct 2026 18:01:23 +0000
Files and hashes: 1: FXM0lZ9RW8MVyeNhLRa0gA27Yz8.roa (hash: AOWqH2G8p3eNy+r9FYww+1k4v48/EVkof2UT4jbdqII=)
2: ScbfsojaaHjN1VPlqjt62kAyKyQ.roa (hash: lQ50zLidvT+ypigEP+SJVNAGB7dMGWzSVTcP7sdJtfU=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: /WAHAjFUUfymk9DqxFbVUHiXiKKdLb1UUS5yH/wHYqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:81:c4:36:e6:b3:e5:b6:4c:24:10:33:bf:96:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Oct 28 18:01:23 2026 GMT
Not After : Oct 29 18:01:23 2026 GMT
Subject: CN=bdf607800794d7ca1ce0f8d93084d20ad7c64d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:36:fd:ac:af:6a:16:eb:90:18:bb:c5:6d:
f9:f7:e5:48:bb:95:48:09:04:a0:55:d2:9e:e1:c5:
9d:c0:ba:58:0e:09:f4:9d:c1:33:38:4d:f4:12:52:
8a:a0:8a:9e:5b:e3:3e:32:d6:f2:fe:11:23:78:8b:
b0:de:65:7f:42:78:a1:18:4a:eb:0b:8a:0d:65:64:
dc:f1:57:d4:bc:62:1c:b4:20:f9:3a:f7:64:8c:9e:
f9:9b:d9:81:e0:97:11:ca:65:14:63:c3:ca:bd:45:
c8:f4:3f:09:d9:8c:42:90:04:3d:4c:cf:11:85:89:
78:cf:28:ec:65:1b:9b:e5:a4:89:a8:7c:35:d0:89:
e9:12:cd:03:7f:20:7e:10:70:71:b4:b6:a1:b3:94:
50:f3:93:6d:a5:06:cb:d3:9b:c4:31:bd:ad:ff:83:
23:e4:89:b2:14:da:e5:39:c8:ad:98:3d:94:be:bd:
1c:d4:a0:cb:9f:35:34:8c:01:cf:d8:7e:ba:ae:af:
e2:04:11:9f:eb:33:9d:c8:6c:6b:b2:46:12:ca:c7:
46:b6:6c:24:c6:8c:9f:66:ed:fb:b1:0a:ef:05:25:
ee:e5:de:cf:dd:b4:62:e9:7c:1f:d9:45:4f:b5:8e:
d1:91:a1:87:3d:4d:e2:aa:12:9f:28:c5:97:af:68:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F6:07:80:07:94:D7:CA:1C:E0:F8:D9:30:84:D2:0A:D7:C6:4D:83
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:72:d7:2d:c2:f2:a3:0d:99:e9:ec:7b:8c:02:97:f1:9c:94:
7c:8c:28:71:58:79:a9:27:fe:31:b5:e5:43:f3:51:7a:c0:8e:
d9:4d:07:14:7a:2a:55:e0:d1:2a:02:a8:22:9c:6d:8d:21:cc:
42:74:ab:a5:bb:8b:61:af:6c:7f:c2:1e:62:c6:0d:fd:93:e6:
71:6a:07:61:36:e2:f6:ec:63:19:64:01:37:9c:3d:9f:37:d0:
3b:60:72:3e:f0:e3:82:ef:72:67:5e:dd:29:ad:83:0c:4e:23:
09:34:05:fe:1a:75:09:bc:ee:7d:c6:e4:9f:7e:db:ba:a6:77:
e0:4c:c6:df:fb:14:ec:3e:0c:99:a8:85:b1:9e:52:09:24:ff:
b8:e1:f2:9a:8d:e6:5d:73:d8:2a:7c:5d:02:26:21:b2:7a:98:
23:4d:5d:26:3d:ef:c5:d6:f1:79:4c:aa:42:96:47:55:d5:ee:
d8:dc:3e:3b:bb:31:33:e2:01:2d:db:ae:72:c7:39:04:a3:db:
06:75:35:64:0a:ad:5a:ca:48:02:07:2c:42:e3:0b:62:55:2c:
ca:2f:aa:66:cf:07:56:9e:5b:ea:90:88:db:dd:4f:2e:ce:48:
5c:88:8b:95:dd:bc:b9:e0:96:51:39:f4:97:3f:6d:f6:bd:41:
9a:ef:56:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:43:21 2026 by rpki-client