
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier: /Mzq/+EGxEJ2wbqcCwRqhU8dtwIJuE9H9iB+sVHXHWo=
Subject key identifier: A0:6C:A7:F6:D0:9B:AA:4D:E5:64:FA:0D:E0:AC:06:74:43:B5:2C:3C
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 019FAC3ED0F7647CE76A2A27A42B18BD6600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number: 1344
Signing time: Wed 29 Jul 2026 05:00:25 +0000
Manifest this update: Wed 29 Jul 2026 05:00:25 +0000
Manifest next update: Thu 30 Jul 2026 05:00:25 +0000
Files and hashes: 1: 3JNSQLDSVjMCAeXDdRfs56ArU_A.roa (hash: rZTM/BDsvJUHVVJdlV2ux5RuYfvV5Fs0/F1F4geykB8=)
2: VTknZ-I_GU8r0qWqKMpUO2ZewjE.roa (hash: 3hD9W96lP9a4vkoDA7OXWeZO5moSVt18MKLKHlgk0dU=)
3: sFtpmEwf8BZ7WD7WnZcVk65ZP4c.roa (hash: m7H1o/4M+RauJJ9zEivTYaIxQJNTjYvvSZKIkxe1inE=)
4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: Ccmy5kewNCwDGA6mD9p9oI6FnV5K+szoBF1hGcCkeV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:d0:f7:64:7c:e7:6a:2a:27:a4:2b:18:bd:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jul 29 05:00:25 2026 GMT
Not After : Jul 30 05:00:25 2026 GMT
Subject: CN=a06ca7f6d09baa4de564fa0de0ac067443b52c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:e9:12:79:5b:73:5b:34:ec:d0:3a:02:fb:
15:77:41:af:70:03:c5:69:f1:ff:0f:f2:da:c5:09:
2d:06:5d:35:60:a9:a3:71:08:19:6a:40:52:0a:1b:
75:b7:ed:e2:01:87:59:a1:69:a8:c5:33:75:4b:44:
ce:7c:7f:33:35:11:b1:89:e5:23:aa:42:3c:36:7d:
31:07:49:99:fa:c3:56:25:65:3d:ba:dd:b1:53:72:
a8:cd:9e:9a:a2:62:ee:f8:76:c6:b3:e9:e1:23:00:
f9:ee:6f:6d:8c:91:6f:f2:e2:ff:bc:88:07:27:62:
1b:fd:a5:bb:9b:18:7c:14:33:4f:60:dc:fa:c2:d2:
da:28:96:51:ae:e1:e2:e1:1e:0c:58:f7:07:30:0f:
53:41:78:40:24:99:28:0a:ec:13:67:0a:92:fd:99:
0b:79:a2:5e:c8:d5:60:7a:87:af:67:82:04:b1:99:
bc:89:eb:0e:7c:f4:62:7f:47:0a:c7:8e:c1:4a:a8:
49:11:13:22:05:4d:4c:78:6a:00:eb:c8:70:08:e3:
38:ed:bb:06:3c:99:77:55:49:80:dd:05:c1:2e:37:
dd:51:03:d8:8b:5c:8b:dc:6a:a3:a4:cd:c1:5d:75:
dc:ba:1d:13:78:d7:98:aa:32:7e:de:d1:76:6b:e3:
32:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6C:A7:F6:D0:9B:AA:4D:E5:64:FA:0D:E0:AC:06:74:43:B5:2C:3C
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cc:9b:3f:54:c5:19:dc:ab:4e:7a:e6:38:cf:0f:bb:0e:1f:
dc:4f:ca:24:39:46:e7:39:73:ed:2f:d7:91:1b:cb:73:7c:9a:
38:35:17:ec:62:75:d7:1c:84:fd:36:98:3d:e2:00:35:fb:5d:
96:71:41:26:23:13:79:3b:a9:4f:73:14:b7:38:1b:96:38:42:
5a:65:64:68:f3:04:31:84:b7:3a:5c:30:98:a7:59:a4:bb:95:
0e:56:98:f6:4a:35:9f:d1:05:aa:f3:8d:d7:94:51:78:92:d5:
e8:f9:be:86:24:57:61:43:7c:7b:ef:60:06:28:aa:c7:19:50:
07:5e:69:fb:cc:ab:1a:86:7e:bc:10:83:d5:c4:aa:c8:aa:f5:
93:9f:77:cf:00:d4:40:6b:65:62:03:e5:75:aa:d3:2d:8e:b5:
c0:eb:e8:b3:d5:b0:7e:89:4d:f0:aa:77:c1:5b:e5:10:3c:fe:
35:db:22:9c:7f:72:d9:05:54:37:68:91:46:40:fd:66:4e:a7:
44:c8:7b:3c:20:9c:35:0c:b4:2b:aa:88:c5:cd:65:a4:6c:66:
af:74:70:3a:a1:a8:86:a0:30:16:43:ef:46:ce:81:65:76:7f:
83:46:a0:4f:ea:bc:70:cc:76:b8:da:b9:e5:89:cd:21:2c:76:
a0:60:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:52:33 2026 by rpki-client