Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier: I4IlbkgQbg+CGG/FjxZFRPT1ssioUThNot3eMMz2Ny4=
Subject key identifier: 7E:D1:1C:CE:AD:7A:AC:48:D1:D6:88:D5:A4:B6:15:44:7E:56:93:3D
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 019D9B196FEAD5542DF7D848751D0A4A7A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number: 1232
Signing time: Fri 17 Apr 2026 11:00:28 +0000
Manifest this update: Fri 17 Apr 2026 11:00:28 +0000
Manifest next update: Sat 18 Apr 2026 11:00:28 +0000
Files and hashes: 1: 3JNSQLDSVjMCAeXDdRfs56ArU_A.roa (hash: rZTM/BDsvJUHVVJdlV2ux5RuYfvV5Fs0/F1F4geykB8=)
2: VTknZ-I_GU8r0qWqKMpUO2ZewjE.roa (hash: 3hD9W96lP9a4vkoDA7OXWeZO5moSVt18MKLKHlgk0dU=)
3: sFtpmEwf8BZ7WD7WnZcVk65ZP4c.roa (hash: m7H1o/4M+RauJJ9zEivTYaIxQJNTjYvvSZKIkxe1inE=)
4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: r8Wd7N/r9vv8bOI8aLSQ0xFj00zl3rTPJZxsUzrzGm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:6f:ea:d5:54:2d:f7:d8:48:75:1d:0a:4a:7a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Apr 17 11:00:28 2026 GMT
Not After : Apr 18 11:00:28 2026 GMT
Subject: CN=7ed11ccead7aac48d1d688d5a4b615447e56933d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:7e:ea:88:c2:e4:b6:7d:27:d6:61:74:f8:
49:6d:c5:22:bd:91:2d:2c:cd:cc:c7:c7:3b:53:91:
39:e6:4e:ac:38:45:a3:b4:10:4d:22:63:f8:94:08:
71:63:f6:cf:6c:bf:f3:ca:15:f5:d4:bf:53:3f:48:
69:ae:fd:7e:13:85:50:b7:d7:a2:bd:53:2e:36:56:
8e:66:02:88:9d:7b:d7:d4:20:00:05:b5:52:70:7f:
e6:58:59:e2:6e:03:ef:49:4d:58:68:81:27:07:4e:
09:ce:68:73:a7:c2:fb:d3:ba:99:af:1c:d0:b8:af:
ff:df:31:d4:37:a7:a8:c1:57:df:f2:03:79:eb:55:
70:e4:e3:be:d6:ed:a0:3b:89:b1:cc:e0:f2:c6:94:
d0:eb:02:ec:4e:03:36:c6:a7:1b:ab:20:dc:da:20:
07:0f:53:a0:91:49:01:be:2c:36:0d:db:3f:3b:62:
e4:dd:64:65:ad:ae:43:e8:ee:4c:d4:9e:b2:99:2c:
78:ad:52:0d:eb:40:44:4d:ab:88:49:fa:0a:9f:d7:
ca:c5:b9:da:dc:42:6b:cb:ea:ca:0c:b7:5f:58:52:
3b:1a:59:e6:43:c0:08:86:0a:2d:a7:07:78:05:1d:
d9:9e:44:87:bd:1a:7e:7e:ab:db:dc:e4:03:a7:0c:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D1:1C:CE:AD:7A:AC:48:D1:D6:88:D5:A4:B6:15:44:7E:56:93:3D
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:86:f0:07:3c:4c:c3:28:ca:d8:e0:60:15:e5:b1:21:6f:09:
08:1b:10:ca:bd:72:b5:e6:a2:95:51:04:ed:cd:38:85:db:e8:
fb:a2:ae:e7:8f:3c:a9:f6:da:5e:4b:a7:70:fc:6b:88:bd:54:
08:8a:df:9a:39:f4:10:39:77:46:02:f9:0d:f5:35:fa:01:df:
62:73:6a:e0:0d:ea:60:bb:f1:19:bb:59:2b:1f:eb:f6:a6:fd:
e5:89:ab:76:6d:ee:95:ad:3b:a5:48:c0:36:e9:4b:6c:fa:42:
c6:b8:e4:7c:8d:aa:55:ff:1b:02:16:d0:62:34:2e:d1:31:4d:
2a:5f:25:79:73:b9:4a:48:3f:7e:c8:67:d3:3b:5c:5a:f5:00:
d0:28:42:f9:1c:09:f4:16:53:ba:6d:13:26:0a:93:76:a3:3f:
05:1b:fd:ca:68:93:da:c9:62:d0:92:68:c9:4e:f8:33:b6:ad:
4c:d8:95:2d:2b:7b:1b:3b:1b:c7:1d:69:86:a8:d0:68:60:e9:
cb:cb:3f:21:27:4e:9d:e6:7a:95:44:4e:cb:5b:ca:40:6f:56:
ea:3d:b3:04:22:96:7b:72:3f:6c:19:a2:0d:ec:be:68:19:01:
c2:ea:44:03:f9:cc:3f:bc:5e:21:40:95:ce:a3:94:b9:08:b8:
91:66:d9:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGW/q1VQt99hIdR0KSnpeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYzBiZGFmYWRlYTc4ZGNlMzEyZjg2MmRkZjQyYjFiZDRj
NGY2NDUwHhcNMjYwNDE3MTEwMDI4WhcNMjYwNDE4MTEwMDI4WjAzMTEwLwYDVQQD
Eyg3ZWQxMWNjZWFkN2FhYzQ4ZDFkNjg4ZDVhNGI2MTU0NDdlNTY5MzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNd+6ojC5LZ9J9ZhdPhJbcUivZEt
LM3Mx8c7U5E55k6sOEWjtBBNImP4lAhxY/bPbL/zyhX11L9TP0hprv1+E4VQt9ei
vVMuNlaOZgKInXvX1CAABbVScH/mWFnibgPvSU1YaIEnB04Jzmhzp8L707qZrxzQ
uK//3zHUN6eowVff8gN561Vw5OO+1u2gO4mxzODyxpTQ6wLsTgM2xqcbqyDc2iAH
D1OgkUkBviw2Dds/O2Lk3WRlra5D6O5M1J6ymSx4rVIN60BETauISfoKn9fKxbna
3EJry+rKDLdfWFI7GlnmQ8AIhgotpwd4BR3ZnkSHvRp+fqvb3OQDpwyoqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7RHM6teqxI0daI1aS2FUR+VpM9MB8GA1UdIwQY
MBaAFLLAva+t6njc4xL4Yt30KxvUxPZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMt
ZmNjMzM2ZWVkOGQ3LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMtZmNjMzM2ZWVkOGQ3
LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4bwBzxM
wyjK2OBgFeWxIW8JCBsQyr1yteailVEE7c04hdvo+6Ku5488qfbaXkuncPxriL1U
CIrfmjn0EDl3RgL5DfU1+gHfYnNq4A3qYLvxGbtZKx/r9qb95Ymrdm3ula07pUjA
NulLbPpCxrjkfI2qVf8bAhbQYjQu0TFNKl8leXO5Skg/fshn0ztcWvUA0ChC+RwJ
9BZTum0TJgqTdqM/BRv9ymiT2sli0JJoyU74M7atTNiVLSt7Gzsbxx1phqjQaGDp
y8s/ISdOneZ6lUROy1vKQG9W6j2zBCKWe3I/bBmiDey+aBkBwupEA/nMP7xeIUCV
zqOUuQi4kWbZoA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:20:12 2026 by rpki-client