Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: y4ahtfoupsUDNPJamDmbhN8NZmIyw5CCHatajCXRhms=
Subject key identifier: 94:8F:FA:DC:1F:2F:BB:4F:D8:FE:6D:8B:86:4D:47:FD:39:C1:82:25
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 019E2A02BEF196DC3EB280DF22171927521F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 0CDD
Signing time: Fri 15 May 2026 05:01:23 +0000
Manifest this update: Fri 15 May 2026 05:01:23 +0000
Manifest next update: Sat 16 May 2026 05:01:23 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: 1Igb5WFyQIZ+21cn4Mil+l/ruopEIrUA3yHk31XDDew=)
2: qYLGAcvtEuF5PRAuWurjHsIKzqA.roa (hash: 5iM7z0Ocb30XgRdkW4wQqrCmbwJLHsRTyj2e6RtK/do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:02:be:f1:96:dc:3e:b2:80:df:22:17:19:27:52:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: May 15 05:01:23 2026 GMT
Not After : May 16 05:01:23 2026 GMT
Subject: CN=948ffadc1f2fbb4fd8fe6d8b864d47fd39c18225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:73:21:7c:59:61:7d:40:7e:5c:20:4d:ae:
eb:b6:ed:c2:83:ae:a8:31:56:4a:a4:84:5c:f1:d1:
27:a1:5a:9b:5b:01:16:fc:e5:f6:78:80:22:a9:44:
ec:6d:73:0b:a8:45:86:10:d3:cb:9d:f5:1a:44:b2:
a7:21:64:df:be:8a:bd:61:f0:78:bb:b7:db:2e:fc:
cf:fe:c8:1c:86:0e:75:5d:a8:3e:d3:c8:4e:91:d6:
e6:a7:89:8e:a0:e3:10:42:77:f5:27:5c:bc:e1:7e:
23:85:1a:8a:99:e4:6e:99:9c:a5:bc:ac:57:5e:f8:
2c:7a:86:f9:61:a1:39:0b:bd:67:57:02:29:c0:a2:
5e:c6:f7:8e:44:4b:9d:8a:99:ce:87:23:07:d4:1f:
8a:92:23:b7:5e:76:5f:ed:40:c6:99:8e:a6:20:b8:
2f:8e:99:95:70:8e:d9:d6:c7:45:c3:19:9c:3f:df:
d4:4e:b1:1f:93:7e:f5:23:ac:d7:a6:f0:d6:eb:02:
92:44:db:2e:85:8f:4a:d7:49:4c:bc:9d:85:4f:c4:
97:9d:88:d5:00:02:11:b6:40:db:3a:5f:61:03:92:
42:61:b3:29:84:fd:f4:a0:92:40:42:6a:c7:64:5e:
65:db:ca:81:43:1d:ec:a9:b6:1c:87:59:7b:f2:36:
bb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8F:FA:DC:1F:2F:BB:4F:D8:FE:6D:8B:86:4D:47:FD:39:C1:82:25
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:17:57:71:b4:b6:17:73:30:02:50:f7:11:62:5e:40:bd:3e:
4e:ec:18:12:25:97:b6:7b:03:cf:d7:f4:4e:85:a0:47:6d:6a:
a2:86:6e:d2:ca:25:4f:4d:22:3e:61:31:ae:44:a0:1d:61:c4:
e2:e1:b5:93:bc:11:91:33:51:39:14:0e:cc:38:38:62:24:33:
c8:d3:33:d9:9e:07:8e:b8:29:7d:ab:1a:52:e7:65:82:92:97:
c1:62:a3:cc:c4:ec:6d:a6:26:6d:a2:c2:19:ee:2c:6f:41:01:
9b:c9:8d:fa:56:73:d8:64:1c:90:d6:a1:fb:4d:2d:1b:88:34:
90:9a:68:ba:ac:1a:7b:cc:cd:d5:3c:12:0e:78:a5:c6:49:7d:
a2:85:d5:1b:3c:d9:e3:75:57:56:a9:66:41:c3:82:09:f9:93:
72:15:80:d4:88:a2:42:2a:2f:9d:93:96:c0:b2:b4:2b:9b:e0:
dd:06:27:83:9f:51:53:43:2a:6e:38:7b:ff:ec:af:c9:50:d0:
ea:d1:75:c7:6f:1e:ab:14:c8:a9:a0:bd:74:a3:60:a0:cd:5f:
0f:76:2b:e2:ba:16:25:d6:68:9b:11:86:6c:cf:01:d8:bc:b2:
f6:89:97:77:92:94:a6:8f:7a:63:bf:95:36:99:38:35:ff:21:
9f:e6:b3:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qAr7xltw+soDfIhcZJ1IfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhY2EwNDU4NmE4NWVkMTJlOWNkYTgzNGRmZGZhMTE5YzFh
NTg5NzUwHhcNMjYwNTE1MDUwMTIzWhcNMjYwNTE2MDUwMTIzWjAzMTEwLwYDVQQD
Eyg5NDhmZmFkYzFmMmZiYjRmZDhmZTZkOGI4NjRkNDdmZDM5YzE4MjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAontzIXxZYX1AflwgTa7rtu3Cg66o
MVZKpIRc8dEnoVqbWwEW/OX2eIAiqUTsbXMLqEWGENPLnfUaRLKnIWTfvoq9YfB4
u7fbLvzP/sgchg51Xag+08hOkdbmp4mOoOMQQnf1J1y84X4jhRqKmeRumZylvKxX
Xvgseob5YaE5C71nVwIpwKJexveOREudipnOhyMH1B+KkiO3XnZf7UDGmY6mILgv
jpmVcI7Z1sdFwxmcP9/UTrEfk371I6zXpvDW6wKSRNsuhY9K10lMvJ2FT8SXnYjV
AAIRtkDbOl9hA5JCYbMphP30oJJAQmrHZF5l28qBQx3sqbYch1l78ja7lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSP+twfL7tP2P5ti4ZNR/05wYIlMB8GA1UdIwQY
MBaAFErKBFhqhe0S6c2oNN/foRnBpYl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3NvRVdHcUY3UkxwemFnMDM5LWhHY0dsaVhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kMmUxMzctY2ViYi00Nzk0LTlhY2Ut
MWI1ZGU1Yjc2MDYyLzEvU3NvRVdHcUY3UkxwemFnMDM5LWhHY0dsaVhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9kMmUxMzctY2ViYi00Nzk0LTlhY2UtMWI1ZGU1Yjc2MDYy
LzEvU3NvRVdHcUY3UkxwemFnMDM5LWhHY0dsaVhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThdXcbS2
F3MwAlD3EWJeQL0+TuwYEiWXtnsDz9f0ToWgR21qooZu0solT00iPmExrkSgHWHE
4uG1k7wRkTNRORQOzDg4YiQzyNMz2Z4HjrgpfasaUudlgpKXwWKjzMTsbaYmbaLC
Ge4sb0EBm8mN+lZz2GQckNah+00tG4g0kJpouqwae8zN1TwSDnilxkl9ooXVGzzZ
43VXVqlmQcOCCfmTchWA1IiiQiovnZOWwLK0K5vg3QYng59RU0Mqbjh7/+yvyVDQ
6tF1x28eqxTIqaC9dKNgoM1fD3Yr4roWJdZomxGGbM8B2Lyy9omXd5KUpo96Y7+V
Npk4Nf8hn+azMQ==
-----END CERTIFICATE-----
Generated at Fri May 15 09:51:45 2026 by rpki-client