Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
File: SSqOSCqB2QxFxNkKxmij8iRcDW0.mft (raw, json)
Hash identifier: 1nsCaJJWURNYJltpIlioFohOY/tX5saOg89MLTpoqaM=
Subject key identifier: F8:3B:39:F0:A2:B2:7A:A6:6A:29:94:0E:4F:92:4C:22:91:C6:BD:E4
Authority key identifier: 49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D
Certificate issuer: /CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d
Certificate serial: 019D38660D582B1440994020FC1E55710245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 07:01:45 +0000
Manifest this update: Sun 29 Mar 2026 07:01:45 +0000
Manifest next update: Mon 30 Mar 2026 07:01:45 +0000
Files and hashes: 1: SSqOSCqB2QxFxNkKxmij8iRcDW0.crl (hash: UGuKZ4lYA36wDFtVxFJLLxGGZwIav0h56B0Nm8BYB/w=)
2: Zly76sR93xiLWK-6z00JINgQw0s.roa (hash: Cwnf2YJcr7xtYOcQAYO59i1uM8hPOiSg7BcnRFcg/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0d:58:2b:14:40:99:40:20:fc:1e:55:71:02:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d
Validity
Not Before: Mar 29 07:01:45 2026 GMT
Not After : Mar 30 07:01:45 2026 GMT
Subject: CN=f83b39f0a2b27aa66a29940e4f924c2291c6bde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:93:94:bf:0e:02:86:27:90:be:51:7e:8b:
5d:38:2f:f5:7f:89:92:fb:a2:18:7c:83:e9:6a:26:
78:f8:87:56:44:7a:5c:06:56:6b:b5:ae:6a:02:5a:
f3:32:12:bc:36:a2:3f:8a:e8:15:e9:20:dc:c1:31:
fa:14:a4:0c:12:4e:bf:17:78:2e:24:ba:a8:35:69:
e8:99:e2:85:2d:ba:97:56:f5:c3:fe:0d:d9:e6:7e:
71:84:36:b9:1a:f3:dc:c4:d0:c4:b9:22:26:23:bf:
d1:77:17:cc:24:1d:ab:10:96:3b:b5:16:85:37:7e:
18:9a:0f:a3:05:ad:b5:a7:17:e7:fb:35:e1:b3:59:
0e:12:c3:2b:9c:b9:61:6e:f3:bb:d4:93:7b:15:4b:
55:b1:7f:b8:d8:4c:c3:b7:c0:c6:d1:51:b6:7e:f3:
d4:47:ec:30:d1:33:27:20:b5:c6:75:53:f1:cd:c2:
c6:86:c0:36:6f:d8:9f:ab:99:13:22:c0:df:c7:41:
10:ff:ee:87:69:6d:8f:10:24:81:74:75:f5:c6:60:
a5:dd:95:2a:eb:53:af:c3:72:2d:08:44:cb:f1:93:
30:16:7d:bc:c2:bc:e7:e1:bd:cb:dc:40:e8:5c:02:
ff:9d:71:9b:a8:5e:60:cf:b7:67:a9:f4:a5:c8:ce:
5e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3B:39:F0:A2:B2:7A:A6:6A:29:94:0E:4F:92:4C:22:91:C6:BD:E4
X509v3 Authority Key Identifier:
keyid:49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cb:59:02:7e:32:25:54:9e:6a:47:dd:4b:e2:97:3c:70:c8:
69:68:97:cb:a9:87:1f:ec:04:bf:13:ca:99:ff:40:8b:9c:d9:
8f:44:1b:1d:ed:e1:94:e3:3d:8d:eb:5c:ec:17:7e:2f:67:5e:
6a:1f:ea:54:9b:fd:0d:26:81:48:84:8f:3a:eb:77:10:4c:c3:
af:9c:09:07:fc:07:e3:1c:b3:4c:ee:b0:10:7d:b7:28:fa:f1:
34:3c:5b:e5:63:04:f3:37:57:64:be:4c:6c:b4:84:e8:a5:56:
ca:1e:6a:5b:0f:1a:00:c2:b4:41:b5:57:54:33:32:ce:7d:da:
07:4a:9f:d0:70:ed:13:28:72:01:cb:f5:ac:d8:0f:1c:50:d8:
14:5f:03:b0:b7:db:7c:f6:85:02:37:d9:fe:bd:20:35:72:5f:
8e:37:60:f8:67:d8:48:f3:47:80:27:11:10:06:49:7a:ae:d2:
d0:58:ee:e3:a1:1b:5d:3e:18:0d:cf:0e:d0:e7:20:be:45:da:
65:93:3b:3c:80:74:4c:a5:a1:97:d9:4d:ad:7d:e3:41:e8:a0:
4f:dc:69:7a:13:9b:d7:e3:48:01:ff:82:67:e2:87:05:14:b4:
cc:ef:f2:f1:eb:0a:62:72:c8:7e:65:b7:89:62:7f:74:58:b6:
92:ca:b6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:59 2026 by rpki-client