Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
File: SS0kreN6IjOTKECddX1H-XlDt6A.mft (raw, json)
Hash identifier: IysFTToTu+ghsvGWybhC9cG7Cop1jWsYQ9uHk7fmPao=
Subject key identifier: B0:3B:0F:97:13:2B:3F:5F:13:F4:46:28:97:5A:F7:4C:8B:9B:D1:C5
Authority key identifier: 49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
Certificate issuer: /CN=492d24ade37a22339328409d757d47f97943b7a0
Certificate serial: 019D38D2C10D7725F57F7D9B23758BE0EE5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
Manifest number: 0F8B
Signing time: Sun 29 Mar 2026 09:00:29 +0000
Manifest this update: Sun 29 Mar 2026 09:00:29 +0000
Manifest next update: Mon 30 Mar 2026 09:00:29 +0000
Files and hashes: 1: NFYt2GuSWXtuOwlW6Nq8CMWtovs.roa (hash: puZ/+ztmFMeMmQqgSFGKCmQg2VYFRDLAAcv+aC1rqdo=)
2: SS0kreN6IjOTKECddX1H-XlDt6A.crl (hash: rRWhny9prqkWCKdJrYdM1gh7Htcnb7H9fIiYWcvMj5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c1:0d:77:25:f5:7f:7d:9b:23:75:8b:e0:ee:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492d24ade37a22339328409d757d47f97943b7a0
Validity
Not Before: Mar 29 09:00:29 2026 GMT
Not After : Mar 30 09:00:29 2026 GMT
Subject: CN=b03b0f97132b3f5f13f44628975af74c8b9bd1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dc:d2:29:06:13:5f:34:66:b9:c3:43:7c:eb:
37:3a:e7:cb:ce:bf:ec:9f:8b:25:24:5a:f6:a3:05:
e6:f4:af:e5:1f:df:98:c8:06:47:d1:99:b2:f1:cd:
50:2a:fa:b5:62:f0:91:e0:31:bc:38:f4:60:1c:20:
36:3a:49:5c:57:69:e5:9c:20:55:b9:1c:25:1c:22:
3d:77:2e:b7:ff:26:12:db:92:0c:68:24:bc:70:97:
73:90:45:5c:bd:34:a2:b3:64:d3:b8:9d:9d:60:38:
5b:15:93:3a:b8:54:8c:df:fc:c7:78:d1:42:69:b2:
6f:5f:b7:79:a7:56:5d:f6:9a:2d:87:06:1a:c0:63:
77:dd:90:19:0a:a6:5a:b6:a9:a2:9a:d7:09:a8:5c:
57:16:91:c5:34:50:0c:22:85:f7:88:d0:f7:09:2a:
cb:19:54:8c:4e:f2:b8:8d:91:07:74:73:88:cb:9b:
d0:fd:b2:4b:5f:53:97:e0:78:f5:fc:f1:5c:ae:c8:
16:5c:bd:a9:4e:7f:d2:ed:88:db:a2:a9:98:f5:4f:
eb:a2:4c:37:95:90:43:24:1d:aa:0d:7c:a9:6b:30:
ce:e3:ac:71:5c:dc:c7:45:56:9e:b3:c8:ff:51:bc:
4c:01:b7:5e:de:4e:45:20:c2:7d:18:55:b8:a9:fa:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3B:0F:97:13:2B:3F:5F:13:F4:46:28:97:5A:F7:4C:8B:9B:D1:C5
X509v3 Authority Key Identifier:
keyid:49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:31:77:ac:cf:47:98:20:2d:a5:29:e2:f3:74:3e:6f:cc:10:
a3:cf:f6:43:4e:75:7d:ac:00:8e:f5:72:5f:6f:02:ad:7b:71:
40:15:c1:a1:c9:73:63:d5:f3:86:29:ff:a5:bc:db:5a:f9:22:
4e:85:97:89:87:10:bd:c6:20:46:de:35:8d:4f:d2:e3:d0:fa:
ed:bf:71:db:fa:5f:6c:65:b6:35:b0:88:b3:16:ae:2a:11:fe:
82:e1:72:5d:61:d3:60:8c:23:f5:8b:a9:b3:5a:b3:8e:4f:42:
e0:17:9a:09:ac:0d:bc:ec:90:6d:cd:23:a1:dd:99:c4:9f:ec:
01:0f:1d:02:89:8a:d5:f0:38:46:ce:d1:09:c2:ca:b3:eb:f7:
4f:60:06:05:f4:1e:ac:1d:3f:de:4b:e8:f4:1d:fe:84:2d:fd:
59:67:80:dd:5b:9d:51:c9:df:59:af:35:eb:19:ea:de:d7:ea:
2a:f3:d5:39:a4:40:67:1a:0f:8e:fc:26:28:0a:9d:99:d8:99:
11:ad:e4:90:43:ff:83:07:3a:86:d2:09:0d:aa:dd:de:30:5e:
00:e9:2e:5b:38:aa:5e:8b:12:47:b6:03:a9:76:88:8d:d7:73:
83:b3:a8:87:e2:d4:3f:e7:33:b4:14:14:0b:5f:5d:5c:2f:ee:
16:ed:cf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:49 2026 by rpki-client