Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
File: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json)
Hash identifier: jdkqVPeB+uiFcDPDjhZnX3WIz0SYii8efbJ5z+KwfT4=
Subject key identifier: D4:DF:BE:9F:6B:2D:10:64:16:28:65:CD:14:E3:7E:FC:3C:9D:06:CC
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Certificate issuer: /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial: 019D389BF1216BAB43FC833C5B04F136E62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
Manifest number: 1018
Signing time: Sun 29 Mar 2026 08:00:36 +0000
Manifest this update: Sun 29 Mar 2026 08:00:36 +0000
Manifest next update: Mon 30 Mar 2026 08:00:36 +0000
Files and hashes: 1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: BMdC4rIhAWJxotq8mEYren3OvorazW85nagy2V7Uqzw=)
2: KFS9AT9Dh5IYqtvylPcHNAxeD1Q.roa (hash: aPsZ9SwAfwr9bP1Lvnapo0qJgXtXh+rAUimtLCb9z5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f1:21:6b:ab:43:fc:83:3c:5b:04:f1:36:e6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Validity
Not Before: Mar 29 08:00:36 2026 GMT
Not After : Mar 30 08:00:36 2026 GMT
Subject: CN=d4dfbe9f6b2d1064162865cd14e37efc3c9d06cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:7e:b1:fc:4f:cb:ba:bf:1d:29:a7:54:a7:
50:62:bf:a3:13:77:25:53:cd:d7:1c:b3:2b:30:e7:
69:12:0f:d4:3b:e8:36:48:5e:eb:9f:ec:e6:39:a9:
0a:87:ea:05:8f:9f:5c:9c:1e:30:25:12:26:26:b1:
ef:62:5e:07:38:ad:05:06:1e:24:e9:00:51:1e:36:
7f:7a:dd:c8:c3:36:29:20:b5:14:a9:e2:f6:53:0d:
62:37:be:b5:36:58:9a:fb:be:c3:bb:4c:a6:72:e0:
32:25:63:62:52:26:7e:5a:03:54:8a:d5:5f:b8:d3:
94:a6:49:26:93:2c:da:b7:25:5f:47:3b:e1:ce:3a:
d0:e6:9a:6a:d8:d1:0a:93:8a:ec:e0:e6:55:36:91:
85:e7:6c:9a:11:b2:7e:23:3b:51:bb:d9:45:74:4a:
70:dd:7b:54:38:42:b3:2f:6e:58:87:41:07:a2:2d:
2c:89:46:40:2b:d2:be:f8:c8:2a:e7:f3:e7:a6:2e:
83:02:c7:cf:b5:81:e7:ac:f4:81:01:89:da:43:35:
2f:77:2d:5b:62:05:cd:65:83:ea:f6:21:8f:13:24:
3a:1f:bc:f7:00:96:f4:2e:d9:cb:81:c8:44:f2:21:
4d:75:a7:72:de:70:69:a0:11:e3:89:8b:d6:c7:c7:
29:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DF:BE:9F:6B:2D:10:64:16:28:65:CD:14:E3:7E:FC:3C:9D:06:CC
X509v3 Authority Key Identifier:
keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:01:a9:a6:30:c4:75:07:1f:31:18:46:6f:ce:6a:0b:ce:c3:
9b:55:29:1e:72:48:63:e2:ab:23:47:4a:c4:d7:96:05:55:98:
5c:95:0e:f3:83:2b:db:6e:df:e1:59:5e:27:cd:49:02:87:dd:
f0:9c:90:80:dd:63:86:fd:f6:6b:b1:33:bc:2e:57:bc:0c:48:
81:83:b9:43:d5:da:71:f4:f0:b4:33:34:90:9a:dd:e9:e1:98:
35:1c:e6:e2:6e:19:f0:62:cd:51:9f:75:ce:f6:d6:c8:87:39:
2b:cc:bd:44:ee:ca:4e:ec:52:22:78:00:93:75:f0:3b:1a:f9:
2c:2f:d3:06:89:74:f8:b9:38:0d:ac:19:9e:be:d1:8f:47:f4:
b6:6a:d6:c1:8f:e6:12:68:a2:d4:3c:d7:56:81:62:c4:6e:1b:
9d:fa:0e:21:da:ed:61:36:d9:71:a6:aa:19:43:3d:57:22:df:
ea:d1:8f:32:c4:3f:b0:aa:50:a0:26:b1:c9:b5:28:f6:73:f9:
83:95:6f:90:61:8c:d3:c5:eb:54:1d:10:7d:68:9a:b4:17:70:
b0:d3:ba:02:19:22:32:8a:4e:c7:09:c1:60:17:10:80:d3:91:
13:94:9f:2a:10:20:29:32:37:61:87:7b:c4:f5:6c:2e:81:a6:
6c:9f:30:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:09 2026 by rpki-client