Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
File: sszaHFSHy5ONV-phzC1i0xBw21E.mft (raw, json)
Hash identifier: dXij+7Ejf+QhycHUU8Hsu+PGaVzLznFIrkCsDEH58FY=
Subject key identifier: F0:01:8D:B2:60:B9:2C:33:AB:BF:44:E5:D8:B8:0C:71:27:E6:DB:FD
Authority key identifier: B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51
Certificate issuer: /CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51
Certificate serial: 01A09B11CD6A6FE1710278B38B7289339411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
Manifest number: 1057
Signing time: Sun 13 Sep 2026 14:00:30 +0000
Manifest this update: Sun 13 Sep 2026 14:00:30 +0000
Manifest next update: Mon 14 Sep 2026 14:00:30 +0000
Files and hashes: 1: 5WXSL9wWB5JNwpdm1UP4ejoSsRw.roa (hash: 2CKZu3jOCHO6Fw6CJElWpqf72yG47yIKnLWAvdNr280=)
2: sszaHFSHy5ONV-phzC1i0xBw21E.crl (hash: gMJIjrIuvytyHxsBSJ29Spo7jR3AKHo/Mla+CB+Mvgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9b:11:cd:6a:6f:e1:71:02:78:b3:8b:72:89:33:94:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51
Validity
Not Before: Sep 13 14:00:30 2026 GMT
Not After : Sep 14 14:00:30 2026 GMT
Subject: CN=f0018db260b92c33abbf44e5d8b80c7127e6dbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:4f:9d:95:03:43:be:26:a2:33:1b:8a:f3:
57:38:85:1a:c2:42:d9:94:a2:81:26:ad:49:af:ef:
2b:91:9d:a5:59:3d:4c:07:62:92:6a:53:67:c1:60:
4e:dd:f4:6d:00:76:c0:d9:3a:3c:d8:65:f0:0a:ea:
b0:d3:c4:5b:1a:f8:dd:d2:76:af:a6:70:4f:90:12:
14:e5:3b:d9:e7:d2:e4:b1:38:26:68:df:87:93:09:
81:79:30:36:f5:16:72:31:33:d6:d8:fd:4c:d2:61:
aa:03:39:5c:0b:d6:62:d1:ca:52:f6:ac:e6:14:88:
2c:15:b6:c9:ee:5f:ed:ad:9a:7e:6a:71:22:6a:f3:
ef:1c:17:1d:67:4f:a3:50:ba:ad:72:87:30:b7:59:
46:1e:73:ea:2f:f7:2f:00:37:09:67:05:9c:c3:1a:
09:74:7a:13:1d:d5:e1:13:0d:7c:fc:c1:ca:3c:c8:
aa:fc:5e:31:0d:00:f7:26:0d:e7:7f:57:77:86:1f:
42:82:c0:77:59:49:71:3c:2b:60:be:99:a7:6b:16:
a4:b1:06:0d:ad:4b:6e:97:fa:40:c4:c2:d6:c2:7a:
b9:98:5d:f6:4c:2c:21:d3:a8:f7:70:4b:cd:b7:78:
fc:d6:6d:7f:38:22:4c:2c:8f:44:af:00:6d:15:65:
b3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:01:8D:B2:60:B9:2C:33:AB:BF:44:E5:D8:B8:0C:71:27:E6:DB:FD
X509v3 Authority Key Identifier:
keyid:B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:85:61:34:83:e9:cf:3a:85:1a:ef:46:d6:fb:1c:16:61:fc:
93:55:b8:63:38:64:7f:c2:36:59:45:73:98:23:58:17:23:27:
a9:4a:3b:b0:bc:0b:f2:21:e9:58:91:ac:ce:4b:08:57:d6:a8:
90:2d:31:58:44:d1:55:2b:3f:55:f1:68:96:68:24:5b:9e:76:
e3:7c:90:5f:13:01:c2:d5:66:f5:85:bb:9d:dc:b4:51:2c:86:
d2:8b:8c:4c:18:f0:35:58:fa:9a:d8:35:76:3d:be:57:60:82:
4a:32:74:01:d0:19:1b:5b:8a:8e:9b:0a:b7:bc:7c:46:1b:4d:
c9:57:fd:dc:32:47:db:80:58:5e:f2:0d:b9:8b:10:24:37:ba:
87:2a:b5:e9:ef:8c:5d:f5:96:1e:a7:eb:a4:b4:0c:2b:5a:a0:
46:05:bc:5b:28:fc:4a:97:d4:7f:07:25:a0:83:62:ec:ea:92:
96:c8:cc:e6:ef:59:e0:94:03:cd:26:4b:b9:70:45:b7:57:e9:
0b:ee:ee:4d:9c:df:e4:4b:1c:83:ed:a2:62:88:f3:e3:5c:ca:
08:e7:22:4a:26:57:55:1c:3e:e9:71:44:c3:5f:26:10:ad:2e:
10:02:f1:b8:08:3d:47:83:de:52:38:d6:19:25:86:68:44:63:
de:fd:d7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 00:40:12 2026 by rpki-client