Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier: A+BpsrgJQCFXa1CeJBzmVSQnjaBbTXyGwq6iYEyP9EI=
Subject key identifier: 50:78:40:7A:A9:80:84:A4:22:54:46:F2:EE:3A:EC:C2:E0:B4:56:07
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 019D9D08616ED24EB53310012A6F901581AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number: 1233
Signing time: Fri 17 Apr 2026 20:01:05 +0000
Manifest this update: Fri 17 Apr 2026 20:01:05 +0000
Manifest next update: Sat 18 Apr 2026 20:01:05 +0000
Files and hashes: 1: 3JNSQLDSVjMCAeXDdRfs56ArU_A.roa (hash: rZTM/BDsvJUHVVJdlV2ux5RuYfvV5Fs0/F1F4geykB8=)
2: VTknZ-I_GU8r0qWqKMpUO2ZewjE.roa (hash: 3hD9W96lP9a4vkoDA7OXWeZO5moSVt18MKLKHlgk0dU=)
3: sFtpmEwf8BZ7WD7WnZcVk65ZP4c.roa (hash: m7H1o/4M+RauJJ9zEivTYaIxQJNTjYvvSZKIkxe1inE=)
4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: kLdhF7WzRDow1p69e4SWHkgzaXLb/4HljPdU2Sg8/V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:61:6e:d2:4e:b5:33:10:01:2a:6f:90:15:81:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Apr 17 20:01:05 2026 GMT
Not After : Apr 18 20:01:05 2026 GMT
Subject: CN=5078407aa98084a4225446f2ee3aecc2e0b45607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:dd:62:9a:90:9d:90:f5:e6:b6:5f:67:6b:
76:38:03:49:9b:92:18:dd:f2:22:37:bf:be:22:2c:
2d:74:40:d6:15:4f:3c:e7:8d:9b:75:39:2e:59:69:
f1:f9:fe:be:59:8d:ab:71:5e:8d:e4:d8:e4:88:1b:
4f:eb:15:fd:15:be:63:6e:60:57:7c:cb:e5:78:62:
1d:6b:79:ad:b7:2b:3d:78:80:29:1b:f4:b0:b0:0b:
d6:72:0d:14:b3:73:65:57:37:de:25:c0:1f:45:98:
b0:bc:6f:a8:f7:de:35:a6:d6:25:f9:cc:21:56:13:
97:0c:e6:24:18:23:22:7e:cd:dd:dc:a4:58:57:a0:
be:09:bd:ab:ba:74:7d:21:51:44:41:25:77:6c:ac:
ee:3e:e1:2b:2e:d5:3b:6b:b4:c7:f8:68:34:8a:7b:
f3:24:83:e1:03:fc:b4:41:a0:5f:69:76:a8:d5:1f:
42:16:a7:5b:35:0b:36:9f:da:e9:2e:94:34:d2:60:
8d:dd:83:8d:dd:be:cf:15:90:12:74:39:60:61:f1:
7f:ae:aa:e5:3e:4b:19:a9:30:87:82:f2:bb:dc:26:
73:90:bd:81:49:f6:02:b6:8d:b8:3e:22:b5:cb:fb:
38:67:65:fa:57:6e:93:3f:71:50:15:66:cb:f4:b3:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:78:40:7A:A9:80:84:A4:22:54:46:F2:EE:3A:EC:C2:E0:B4:56:07
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7d:65:85:2c:91:b1:5e:30:7c:51:4b:a1:f2:b9:58:3e:80:
ed:35:39:99:d9:69:a8:bc:2e:55:23:c6:a9:12:41:e2:aa:9c:
f6:88:78:1b:46:66:70:a0:9a:6b:a4:2e:fb:63:40:1d:24:2c:
3e:ec:84:9a:95:0f:27:66:18:10:08:c2:a9:85:fa:65:51:5f:
75:f4:39:1e:1e:e1:48:41:84:13:36:24:7b:7c:f3:7a:46:28:
82:de:cf:ff:aa:69:4f:e0:e9:ee:7a:5c:57:50:07:34:aa:bc:
ad:f7:95:55:82:46:3f:11:e3:c9:4c:09:c6:5a:83:92:cf:f1:
0e:d0:c2:f4:89:5c:f0:cd:28:df:30:d3:04:c5:74:d6:7b:20:
49:10:54:61:49:e1:79:0d:40:bc:71:2a:a1:a3:e3:e5:cd:7c:
f4:54:1a:36:18:bd:83:58:72:b4:a4:bf:6e:5b:93:3c:f3:43:
b5:5f:fd:70:f6:af:d3:b6:41:3c:e4:bc:e7:82:27:73:f4:f8:
ef:49:f8:9d:2c:30:bf:3a:a1:5f:7d:e6:50:ad:f7:ae:ac:c3:
81:52:66:cb:56:6e:63:0a:d4:5d:88:f9:fa:b6:f9:bc:5a:53:
4b:3a:41:ee:e2:17:49:23:36:f8:98:1d:53:4b:47:b4:80:d7:
14:c1:3b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:53:25 2026 by rpki-client