
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: X6r+xA1+/iYHDXxYMGlr5f0eHkXnVc8kc87dAZ8b4qI=
Subject key identifier: 0F:F0:2E:EE:1B:70:06:10:1C:2E:1A:84:09:FB:3B:C9:50:56:8F:80
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 019F11C0CFD2F2D70B5B0D350FE5C2B51661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 0D55
Signing time: Mon 29 Jun 2026 05:01:16 +0000
Manifest this update: Mon 29 Jun 2026 05:01:16 +0000
Manifest next update: Tue 30 Jun 2026 05:01:16 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: f1dSZJICWZqvD/iRRNwvFpe1Vb1GlYhsxHYuqyU0zMg=)
2: qYLGAcvtEuF5PRAuWurjHsIKzqA.roa (hash: 5iM7z0Ocb30XgRdkW4wQqrCmbwJLHsRTyj2e6RtK/do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:c0:cf:d2:f2:d7:0b:5b:0d:35:0f:e5:c2:b5:16:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Jun 29 05:01:16 2026 GMT
Not After : Jun 30 05:01:16 2026 GMT
Subject: CN=0ff02eee1b7006101c2e1a8409fb3bc950568f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:50:15:a6:0b:77:2f:9f:73:2d:30:08:3d:b4:
32:ee:23:74:4b:89:7b:49:da:87:19:c8:ef:fb:1a:
d7:fb:fd:c9:b7:6d:92:de:c8:90:86:36:6a:54:5d:
fd:59:e3:ab:91:8a:46:1a:12:d6:2b:71:b5:5c:41:
de:e3:04:35:05:8a:53:15:98:31:9b:f6:3f:38:37:
16:85:b2:c5:b5:69:31:18:b4:e3:04:cc:09:da:29:
41:c2:80:99:e6:42:9d:4a:46:c1:9c:90:ab:6b:ba:
6d:18:ea:ef:5d:c3:84:78:3a:5c:29:80:73:26:f0:
06:06:13:c8:08:d1:f8:ab:3e:ab:35:ca:07:35:74:
30:5e:fe:c9:3c:fd:26:7c:05:93:ce:34:05:39:41:
02:69:91:d6:8f:1d:54:cb:fc:ed:92:28:44:ab:af:
93:e0:b4:ae:8f:ee:51:08:77:3a:71:cf:17:70:a9:
0d:5d:2f:de:8e:24:68:ba:75:01:a8:69:4d:a4:b4:
e8:70:02:bc:b3:cd:71:5e:f2:9c:8e:8f:22:05:13:
7a:31:63:9f:0d:25:5b:69:7f:65:12:21:1c:c4:8f:
b2:15:70:1e:4c:6e:a7:f1:a0:33:fa:73:f7:d2:0b:
c4:d2:15:b3:3d:d3:a1:8d:43:13:58:3e:4e:fa:0b:
b8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F0:2E:EE:1B:70:06:10:1C:2E:1A:84:09:FB:3B:C9:50:56:8F:80
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a5:f5:6a:fc:0d:1c:5d:f0:a2:dd:ea:63:52:85:40:0f:12:
ac:37:83:94:58:b1:16:44:f6:02:25:c3:d8:38:88:82:1a:7c:
e4:ba:35:ff:3d:e4:fa:b6:75:19:65:df:54:a1:6b:ba:74:58:
06:05:d1:a8:f1:59:da:50:6c:8c:74:44:19:a2:76:43:b9:11:
0c:d3:83:68:35:ac:19:e7:e2:2e:57:da:9b:5c:c1:aa:df:09:
de:d0:d3:52:96:11:07:81:ab:fd:11:fc:01:ff:67:54:99:dd:
8f:53:ce:e7:83:65:f9:ec:04:0e:58:59:a5:7b:59:e8:d4:5a:
91:4f:7e:5d:94:e4:06:77:6e:8c:e4:01:34:f1:2c:d2:44:20:
24:ed:54:18:1c:24:1a:fc:aa:73:e6:e9:58:1e:93:85:96:d7:
a0:39:5c:ab:69:08:a1:2d:25:a3:56:2a:f3:85:bb:79:97:ab:
dc:2f:2e:66:68:fc:da:1d:16:2a:ab:57:48:9f:8f:fe:8e:26:
e5:4d:8e:93:0a:e3:6d:e4:02:c6:48:96:ff:ad:d4:a7:b2:62:
5f:1b:8e:f9:7c:21:84:20:6f:4d:b0:78:44:48:90:a6:5c:5a:
de:1b:e6:57:20:9f:cf:b6:d6:25:7e:0f:b4:f3:02:d5:57:e5:
da:e2:1d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:46:23 2026 by rpki-client