Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json)
Hash identifier: EQscW267XN3nWqsR7urGusN2Zlj2tLl6XqpBWeoDHp4=
Subject key identifier: 84:2A:A1:E8:65:D3:A7:D4:F2:26:C1:6E:F6:D7:57:5D:FE:1B:EA:07
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 019CC229AB19C02840FFEB7E9D03AE1BF478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
Manifest number: 0F34
Signing time: Fri 06 Mar 2026 08:00:36 +0000
Manifest this update: Fri 06 Mar 2026 08:00:36 +0000
Manifest next update: Sat 07 Mar 2026 08:00:36 +0000
Files and hashes: 1: 6JsGG8yxKzcDoQMwZR2x3KoCb00.roa (hash: 6wxEu7HqJEfHfAXKDDmYgs76ZayF6+azKu/sKGA3exs=)
2: FENuxoqFjunqAylfU_74pUn9r9w.roa (hash: MH7ftTgYFM0jAg20wF24Y7UB/Kl4HvysaZ+BlD0+dTM=)
3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: 90vK9ovMLR6qbQFot5diU5OwiV3AaqGBudY9dGYP6dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:29:ab:19:c0:28:40:ff:eb:7e:9d:03:ae:1b:f4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Mar 6 08:00:36 2026 GMT
Not After : Mar 7 08:00:36 2026 GMT
Subject: CN=842aa1e865d3a7d4f226c16ef6d7575dfe1bea07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:e6:fb:7c:48:59:6e:30:d2:ed:00:24:3f:
4a:01:b1:ee:9a:ab:c9:ca:49:10:35:a9:f7:a4:61:
fd:ff:14:3c:08:ad:03:4c:bf:18:89:ab:bb:be:5d:
a5:8c:00:c1:93:21:a3:3f:62:dc:95:d1:e2:a4:19:
f8:5d:3e:c9:35:a8:95:04:f9:bd:ad:d2:be:99:ba:
28:52:e3:6f:68:62:f0:16:5a:d0:0d:c6:74:89:54:
95:8a:29:db:57:6f:eb:75:b0:f1:8d:c1:b2:91:b6:
9f:91:23:12:da:58:77:0c:40:21:5c:ca:35:15:f2:
04:43:ab:f2:df:b1:c0:4e:2a:9e:24:b6:f9:29:94:
04:2d:8e:c3:0b:cc:cb:f9:89:26:43:32:60:7c:79:
96:8b:97:8b:14:be:7f:be:82:72:75:51:fe:6a:6c:
6f:66:db:d8:a4:f6:21:1c:4c:86:9c:69:23:d9:24:
56:c2:46:29:5d:8b:41:e8:5c:3b:c5:c5:4c:e8:da:
c5:90:0f:a5:97:36:43:af:59:db:f8:67:46:34:91:
fb:62:61:9b:37:c5:1b:92:92:62:23:5c:c2:7c:21:
04:3d:2b:e4:29:ce:06:3f:29:ed:ed:16:4e:51:3e:
d2:fd:47:96:07:f7:5c:e4:a8:ca:eb:af:1e:44:29:
6e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2A:A1:E8:65:D3:A7:D4:F2:26:C1:6E:F6:D7:57:5D:FE:1B:EA:07
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:de:7e:a5:9d:0e:f6:73:fe:ea:e9:d8:9c:61:28:6f:b8:48:
43:9e:77:79:f7:63:39:2e:91:1e:43:1a:fd:a7:f7:db:e3:ba:
cf:b9:13:8c:76:cd:f4:44:20:fd:84:6e:a7:1b:ee:7d:43:cf:
22:c1:9b:05:67:c7:bb:32:97:17:51:b3:cc:3c:22:8b:14:b3:
81:d2:56:d5:f4:87:5a:a5:ba:19:a6:95:93:40:b0:6e:dd:06:
a0:58:03:79:51:e1:77:18:c7:24:7a:70:9c:76:69:0e:30:6e:
e9:be:ae:cf:57:39:b2:ef:e4:4a:9f:55:3b:fc:ce:2b:cc:1a:
11:51:96:e6:51:0b:db:77:d3:9b:51:5a:98:9e:45:e1:ed:78:
f3:95:82:36:1d:b0:99:89:3c:33:cb:5a:c0:23:01:83:d8:1a:
77:aa:4a:50:63:8d:00:7f:9e:98:3b:30:82:90:b1:1e:b3:99:
e2:ba:df:f9:1d:ad:1d:7c:5f:e9:f9:da:f9:0f:e8:74:c9:1a:
6d:9a:3b:6b:1d:1b:12:c5:89:7f:93:a3:54:c0:47:a8:af:9d:
d9:82:1b:af:0b:fa:86:4e:cf:67:9a:12:39:22:c3:a1:9f:65:
4b:e0:ff:09:a8:47:5f:b2:35:30:24:d9:a7:2c:b5:14:ca:28:
e5:2b:6f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 18:21:03 2026 by rpki-client