Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json)
Hash identifier: aGtpFQdm6XrRJX7g1mpyi68KA7fvizL14npaGXJK8rg=
Subject key identifier: 0D:17:76:E3:A0:F0:B3:BB:27:87:B4:65:AE:16:14:8F:3E:73:E4:F7
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 019E91A5DD885EE8F3BF6264DF01011BBB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
Manifest number: 1024
Signing time: Thu 04 Jun 2026 08:00:26 +0000
Manifest this update: Thu 04 Jun 2026 08:00:26 +0000
Manifest next update: Fri 05 Jun 2026 08:00:26 +0000
Files and hashes: 1: 6JsGG8yxKzcDoQMwZR2x3KoCb00.roa (hash: 6wxEu7HqJEfHfAXKDDmYgs76ZayF6+azKu/sKGA3exs=)
2: FENuxoqFjunqAylfU_74pUn9r9w.roa (hash: MH7ftTgYFM0jAg20wF24Y7UB/Kl4HvysaZ+BlD0+dTM=)
3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: qc+KS579iVFbGEovsa91dmJsE7FLxHT0suH04nciDcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:a5:dd:88:5e:e8:f3:bf:62:64:df:01:01:1b:bb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Jun 4 08:00:26 2026 GMT
Not After : Jun 5 08:00:26 2026 GMT
Subject: CN=0d1776e3a0f0b3bb2787b465ae16148f3e73e4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:09:01:66:21:9b:7a:fd:6d:97:a3:dc:c5:
fa:a6:ee:ad:fc:be:c6:67:0b:db:55:e2:ae:3c:d4:
c2:dd:59:e2:eb:04:7f:f0:dd:15:a1:ab:a2:70:1b:
98:c3:07:b3:f1:44:a0:79:96:8b:91:a6:6f:cf:82:
84:a4:98:3b:62:95:fd:57:d3:9d:34:3b:6f:d9:53:
78:99:34:04:18:2b:f1:31:68:dd:da:af:d8:1b:9c:
06:6e:b1:d0:19:58:e2:84:b4:bd:fe:f6:aa:5d:96:
b7:15:72:0b:76:92:6a:6e:64:51:c2:83:fb:a6:4a:
08:20:ad:bc:59:76:44:b0:51:c2:e7:e4:64:6f:2b:
a7:37:91:d2:27:b2:4b:d5:8f:66:e9:f7:b5:f9:ad:
58:83:db:66:b4:e2:79:58:61:58:02:29:30:7d:93:
fc:99:25:d9:1f:71:56:9f:d7:ad:22:61:84:d4:c1:
6f:f6:5c:b4:32:d2:cc:fd:95:7f:17:a3:d7:da:4c:
80:9f:45:25:17:4a:d6:0a:c9:f4:70:a3:08:26:e8:
af:54:32:55:42:21:27:be:be:06:ec:76:b0:28:f9:
25:90:8a:fd:6b:3d:67:80:cb:2e:3e:a4:d9:42:0f:
ba:31:07:f8:3d:a7:4e:f7:05:75:c3:8e:e1:42:41:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:17:76:E3:A0:F0:B3:BB:27:87:B4:65:AE:16:14:8F:3E:73:E4:F7
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7a:cf:cd:f0:13:92:99:ec:6d:aa:d0:b8:c8:7d:42:7c:b4:
e3:cf:fa:0a:2e:3b:af:b1:a1:60:84:22:2a:72:72:c2:27:c0:
f5:7c:86:28:a2:a9:96:e2:b7:76:61:da:ca:f2:58:a4:89:c9:
c7:b0:9e:11:7f:ae:dc:6d:31:8e:54:50:41:09:1e:6d:14:d8:
73:93:71:d6:38:c1:e2:71:b3:04:b5:83:85:cd:38:df:b6:a3:
88:cc:ec:03:da:1f:a9:6d:8e:47:4e:18:d7:a6:4f:8d:2b:b6:
fe:05:de:00:2a:f5:83:6b:45:dc:45:1e:fc:a2:3c:59:c5:57:
06:69:57:45:75:5f:3a:69:13:98:f2:54:bd:5b:af:2f:eb:62:
45:41:dd:b4:ac:d6:b3:f7:d7:6e:ee:f8:5d:dc:0e:b5:ea:e6:
b0:30:d1:95:58:90:cc:6a:ac:ff:a9:65:44:c5:b6:62:c6:9c:
be:18:a8:3d:1d:4b:d7:94:f0:4f:af:93:3f:27:f3:e4:3a:31:
4f:3c:2d:64:d2:88:4b:71:ba:f5:3e:08:b4:fc:f4:df:9f:d7:
0f:1a:f5:94:42:00:4f:d0:f8:12:8d:5e:a1:e7:d8:fa:03:d7:
ee:1d:db:09:77:69:4c:14:20:21:a9:38:10:02:2e:d3:17:8f:
4d:eb:5a:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6Rpd2IXujzv2Jk3wEBG7ucMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYzVmNzRkZjQ1MjBkMzQxZGEzNDhhNzAwYTAzYjk3Y2Fm
MDc3MzUwHhcNMjYwNjA0MDgwMDI2WhcNMjYwNjA1MDgwMDI2WjAzMTEwLwYDVQQD
EygwZDE3NzZlM2EwZjBiM2JiMjc4N2I0NjVhZTE2MTQ4ZjNlNzNlNGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuygJAWYhm3r9bZej3MX6pu6t/L7G
ZwvbVeKuPNTC3Vni6wR/8N0VoauicBuYwwez8USgeZaLkaZvz4KEpJg7YpX9V9Od
NDtv2VN4mTQEGCvxMWjd2q/YG5wGbrHQGVjihLS9/vaqXZa3FXILdpJqbmRRwoP7
pkoIIK28WXZEsFHC5+RkbyunN5HSJ7JL1Y9m6fe1+a1Yg9tmtOJ5WGFYAikwfZP8
mSXZH3FWn9etImGE1MFv9ly0MtLM/ZV/F6PX2kyAn0UlF0rWCsn0cKMIJuivVDJV
QiEnvr4G7HawKPklkIr9az1ngMsuPqTZQg+6MQf4PadO9wV1w47hQkF3BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0XduOg8LO7J4e0Za4WFI8+c+T3MB8GA1UdIwQY
MBaAFLLF9030Ug00HaNIpwCgO5fK8Hc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzIt
Nzc3ZWU5NTU2MjEwLzEvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzItNzc3ZWU5NTU2MjEw
LzEvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnrPzfAT
kpnsbarQuMh9Qny048/6Ci47r7GhYIQiKnJywifA9XyGKKKpluK3dmHayvJYpInJ
x7CeEX+u3G0xjlRQQQkebRTYc5Nx1jjB4nGzBLWDhc0437ajiMzsA9ofqW2OR04Y
16ZPjSu2/gXeACr1g2tF3EUe/KI8WcVXBmlXRXVfOmkTmPJUvVuvL+tiRUHdtKzW
s/fXbu74XdwOtermsDDRlViQzGqs/6llRMW2YsacvhioPR1L15TwT6+TPyfz5Dox
TzwtZNKIS3G69T4ItPz035/XDxr1lEIAT9D4Eo1eoefY+gPX7h3bCXdpTBQgIak4
EAIu0xePTetaOw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 17:24:15 2026 by rpki-client