Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json)
Hash identifier: upEOc7nphGwURapH4yz5Yd+XaGWutvxqio0wMJCYdnA=
Subject key identifier: A7:35:27:0C:6D:1A:84:4C:08:83:AE:75:27:EA:6A:1B:09:21:62:EB
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 01A16BA3961ADB0ECCAD7E4317DBE22D2BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
Manifest number: 119E
Signing time: Sat 24 Oct 2026 02:00:45 +0000
Manifest this update: Sat 24 Oct 2026 02:00:45 +0000
Manifest next update: Sun 25 Oct 2026 02:00:45 +0000
Files and hashes: 1: 6JsGG8yxKzcDoQMwZR2x3KoCb00.roa (hash: 6wxEu7HqJEfHfAXKDDmYgs76ZayF6+azKu/sKGA3exs=)
2: FENuxoqFjunqAylfU_74pUn9r9w.roa (hash: MH7ftTgYFM0jAg20wF24Y7UB/Kl4HvysaZ+BlD0+dTM=)
3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: 7tPUXxF0vv5tyj4rHGelZPGOPMpbY/iZEZFpCS5yuF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:a3:96:1a:db:0e:cc:ad:7e:43:17:db:e2:2d:2b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Oct 24 02:00:45 2026 GMT
Not After : Oct 25 02:00:45 2026 GMT
Subject: CN=a735270c6d1a844c0883ae7527ea6a1b092162eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1a:9d:ce:75:5f:70:01:b5:dd:90:77:c0:ef:
77:0f:ec:09:fb:38:63:a1:42:c2:cd:6e:25:ec:ca:
37:3f:d8:c0:51:d1:4d:2f:2a:21:6c:fb:99:70:47:
a2:33:66:07:6b:df:db:7b:db:b2:35:67:45:f0:cd:
61:b0:f8:26:eb:bd:30:22:7c:72:79:79:47:ce:e9:
85:28:a1:2c:8e:96:cd:49:0d:64:ab:a0:18:37:34:
50:5b:29:ab:0c:1c:c4:54:ba:c0:b2:8c:17:38:cf:
06:60:e5:74:1e:7e:9e:f9:5d:80:5f:8d:ae:fb:e5:
0d:ff:67:d5:b3:0b:3e:43:c8:20:47:dd:82:84:2b:
a7:78:a4:56:33:15:7e:3d:2b:07:5a:9d:7d:80:35:
d9:31:8d:79:f3:ce:3a:4a:45:39:ea:52:6c:76:65:
4f:8d:5a:06:d2:1a:c1:33:47:68:51:04:0b:9c:6e:
ba:4f:35:4d:f6:6b:c2:3c:05:cb:07:a9:dc:ef:d1:
fd:35:f6:90:09:a6:2f:cf:52:65:fd:50:95:e1:2b:
4e:db:b1:b9:aa:35:fe:f2:51:b5:04:b7:a3:98:1d:
35:a3:24:c9:35:b8:11:ef:a4:f2:eb:87:13:f4:31:
80:99:88:d9:e1:18:ab:cc:df:57:69:ef:ed:1d:9a:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:35:27:0C:6D:1A:84:4C:08:83:AE:75:27:EA:6A:1B:09:21:62:EB
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:13:f9:38:e0:2c:61:d5:ad:55:61:84:a2:61:2c:14:d1:77:
b3:ce:72:33:d4:86:cb:3f:bd:7c:f7:18:ab:c4:be:40:1b:ef:
4e:b3:49:ab:4b:5f:d1:b2:2a:a7:5b:c9:36:5c:29:8c:50:2e:
0f:29:43:61:68:e1:82:7f:ef:1d:79:2a:99:39:79:c5:50:bf:
18:f3:ab:fc:82:3e:aa:29:d0:9b:29:2a:c5:d2:b1:44:20:86:
a7:15:ae:30:c9:c7:e0:f9:7c:9a:80:e9:1a:5e:37:53:55:3e:
8a:b9:57:36:ca:4d:d5:a0:8a:2d:23:c8:fd:5b:8f:a0:1e:5b:
20:7c:50:8f:fc:8d:25:27:6f:0f:94:40:c1:3b:9d:45:ba:72:
53:22:50:b9:9d:53:a1:80:e5:72:2b:7e:42:dc:b6:62:4c:42:
69:d3:79:dd:46:76:66:af:cc:1b:ea:96:64:35:46:79:77:f6:
b1:5a:0d:9f:9b:72:27:0d:c8:db:00:c2:39:91:46:fd:1b:87:
54:0d:e2:46:41:a6:af:b9:0a:9c:c2:22:f4:ff:9f:0b:3f:6b:
99:b3:03:bf:98:c5:ed:d5:5e:5f:43:a0:7c:2c:34:54:c8:f8:
85:d7:7c:43:fb:6c:ab:ad:53:1d:e4:57:e7:ba:ac:6a:f3:ca:
af:b1:1d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:36:57 2026 by rpki-client