Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json)
Hash identifier: w0kRUNj2oP1z1zDbsaJfvQGgeE1hqiR7mkH5HdvJxn4=
Subject key identifier: 87:FC:F5:E8:DA:44:FD:A3:77:53:B3:EA:87:33:A1:17:76:49:7F:11
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 01A06EA7D12ED1707E35B3042CBA947EB9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
Manifest number: 111B
Signing time: Fri 04 Sep 2026 23:01:26 +0000
Manifest this update: Fri 04 Sep 2026 23:01:26 +0000
Manifest next update: Sat 05 Sep 2026 23:01:26 +0000
Files and hashes: 1: 6JsGG8yxKzcDoQMwZR2x3KoCb00.roa (hash: 6wxEu7HqJEfHfAXKDDmYgs76ZayF6+azKu/sKGA3exs=)
2: FENuxoqFjunqAylfU_74pUn9r9w.roa (hash: MH7ftTgYFM0jAg20wF24Y7UB/Kl4HvysaZ+BlD0+dTM=)
3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: WJeJU+9jXjz40HedLojTEHep0Ny0m8azGyitQ2Tc4Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:d1:2e:d1:70:7e:35:b3:04:2c:ba:94:7e:b9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Sep 4 23:01:26 2026 GMT
Not After : Sep 5 23:01:26 2026 GMT
Subject: CN=87fcf5e8da44fda37753b3ea8733a11776497f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f1:f4:12:43:fb:75:7a:7f:c9:e1:f0:7f:a5:
52:01:de:7d:d2:72:1a:62:ae:82:b1:ff:66:5c:31:
3c:a6:55:11:37:08:48:22:b3:d7:14:29:fb:73:ab:
36:ea:96:86:47:cd:7b:46:0d:13:0e:45:bb:5b:5a:
6d:3b:f3:e7:7f:45:be:06:3e:ec:34:00:16:8b:2e:
1f:86:c7:6f:f9:e0:3f:84:52:32:32:45:5d:b5:00:
78:af:5a:be:c9:97:9d:ce:98:33:2a:c2:89:b7:cb:
13:b0:ac:84:b4:5f:63:3c:d6:5f:c5:91:38:b1:fa:
99:21:35:12:41:7b:25:af:93:b5:30:dc:ca:96:42:
5e:e4:3b:b2:e4:5d:1d:1e:ca:62:dc:4a:c4:8e:cb:
1d:d4:8c:2b:83:5e:4f:5a:7d:3a:70:13:5a:1e:f2:
d8:ed:7f:f5:0f:5b:ee:b0:94:6a:e0:90:39:9d:a2:
8d:d3:7f:d3:d8:8d:41:4d:7f:e0:3a:52:85:8f:8b:
8e:3c:d7:29:aa:f0:8f:0e:60:41:e5:4f:5d:8c:d1:
45:2b:8d:f6:d3:b9:39:02:d2:94:30:99:85:d7:5d:
99:fe:62:39:3c:ac:22:6f:39:56:fd:19:e7:cd:1e:
a1:7d:ca:f8:b6:d2:f6:73:6f:2b:87:26:37:99:23:
11:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FC:F5:E8:DA:44:FD:A3:77:53:B3:EA:87:33:A1:17:76:49:7F:11
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f4:2f:e1:6e:6e:24:12:c6:bf:c9:7c:e6:1b:a4:41:ff:59:
bc:13:ca:4c:2d:04:92:83:bd:71:0f:c9:8d:d4:35:3f:00:08:
5e:7f:90:aa:d0:39:46:35:e3:1d:32:75:ac:e1:82:c6:f6:f1:
6d:5b:7f:18:60:4e:30:1d:d7:bd:59:75:cb:25:91:bc:dd:fa:
0e:50:27:03:6f:be:ca:11:7e:3d:50:07:75:c4:97:05:21:ff:
6d:24:dc:a9:f2:0f:d7:a1:41:10:6d:e1:4e:d1:9b:6c:41:e2:
2e:7a:39:35:0a:f3:00:25:a1:52:26:1f:ef:55:26:12:53:10:
4c:0b:54:d8:0a:73:6f:b2:f8:fb:d1:47:f2:f3:06:c5:ba:b9:
8e:f3:75:cd:2c:23:66:24:99:07:56:70:14:46:39:3a:b0:5a:
ff:ff:c1:a4:73:9b:e1:50:64:0e:d8:24:70:6e:fc:a4:0c:02:
4f:57:8b:57:50:2a:52:9d:9a:71:87:6b:ad:ec:5a:8e:1c:a0:
99:56:d0:34:50:3f:3a:ce:a4:57:a2:2c:e9:03:7f:73:4b:14:
99:28:93:40:55:49:6a:e3:ec:24:2c:73:fe:c2:b8:76:36:a9:
67:d1:91:a8:8a:5e:2c:23:ef:b5:46:9b:59:63:e9:83:c8:d9:
54:48:b4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:45:02 2026 by rpki-client