
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier: WP4xSYLO9jzImKQqchHN0js+etgsHKrbDglspaJawuc=
Subject key identifier: 71:22:21:F2:FC:D1:BA:E9:1C:6A:AA:38:66:14:7F:F6:7A:DD:32:05
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 01A128B0DB56ED0874BA8E29978DED99DC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number: 1409
Signing time: Sun 11 Oct 2026 02:00:41 +0000
Manifest this update: Sun 11 Oct 2026 02:00:41 +0000
Manifest next update: Mon 12 Oct 2026 02:00:41 +0000
Files and hashes: 1: 3JNSQLDSVjMCAeXDdRfs56ArU_A.roa (hash: rZTM/BDsvJUHVVJdlV2ux5RuYfvV5Fs0/F1F4geykB8=)
2: VTknZ-I_GU8r0qWqKMpUO2ZewjE.roa (hash: 3hD9W96lP9a4vkoDA7OXWeZO5moSVt18MKLKHlgk0dU=)
3: sFtpmEwf8BZ7WD7WnZcVk65ZP4c.roa (hash: m7H1o/4M+RauJJ9zEivTYaIxQJNTjYvvSZKIkxe1inE=)
4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: hd1qagaSf3o7DT5f/JCGEyWIgZJnpdn5h4tL0g5ptsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b0:db:56:ed:08:74:ba:8e:29:97:8d:ed:99:dc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Oct 11 02:00:41 2026 GMT
Not After : Oct 12 02:00:41 2026 GMT
Subject: CN=712221f2fcd1bae91c6aaa3866147ff67add3205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:10:6f:e6:87:a1:e0:97:e4:9c:1d:80:dc:
af:23:c9:8e:42:29:70:ba:87:e7:56:42:dc:87:1b:
c2:39:b4:44:61:00:f2:06:ad:3a:37:c3:81:fa:c9:
b6:08:52:d6:d9:a4:b7:17:e3:c9:c9:75:f8:cd:4f:
2f:19:2b:3b:72:a2:e6:af:4a:8a:ef:78:7d:93:e0:
10:b9:3a:1d:98:40:49:af:6a:27:0d:23:ee:90:68:
7e:7f:81:33:b8:b3:f8:45:54:8e:65:81:9d:5e:8a:
9e:71:8c:ce:51:58:9b:15:e0:be:cb:d6:ca:b8:db:
94:e6:a6:3b:ce:8f:c3:43:4f:ed:10:85:05:a4:7c:
41:06:e4:e9:cb:bf:ea:34:a9:15:b0:44:12:1d:45:
07:23:41:2e:53:dd:c7:66:03:b9:e4:c1:3d:18:b4:
a3:57:25:bf:9f:20:71:41:01:ec:49:cb:f5:3e:f3:
0f:e5:ff:72:cd:86:c5:f3:27:46:35:f1:be:2e:fc:
04:70:42:80:27:5c:dd:87:19:b5:1f:23:3f:97:9d:
be:35:6a:e8:e3:70:8c:23:8e:bd:35:96:fd:91:af:
21:01:71:3a:1a:d8:dc:b5:09:96:7e:f0:df:5e:21:
46:aa:ef:f8:1b:be:9f:0f:3d:3c:e3:82:92:d7:5b:
93:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:22:21:F2:FC:D1:BA:E9:1C:6A:AA:38:66:14:7F:F6:7A:DD:32:05
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:35:78:88:b9:31:87:6a:a4:69:65:da:50:90:a8:1d:8e:d7:
4a:f1:98:a5:70:71:2a:44:ce:ac:2a:d5:b5:1f:30:cf:20:e0:
8b:29:3d:e9:2b:2f:e8:47:a8:7d:d2:c1:a8:66:f6:17:fe:c8:
7c:f0:bc:90:4e:95:f6:ed:9a:98:c1:ab:6e:22:b6:e5:1b:41:
7a:d6:67:7a:2c:ff:06:58:44:4c:52:60:23:92:9a:d9:dc:d5:
81:f7:e6:ef:47:4d:23:a4:b5:df:dc:a3:b8:32:fc:b0:9f:f1:
a6:55:6f:0e:af:57:c5:05:82:4b:fc:22:00:3b:f7:58:71:00:
70:7b:05:d0:51:55:94:75:dd:59:b4:37:61:08:56:66:f8:16:
4d:2d:bf:b0:22:36:5c:ec:ed:a8:7d:45:e6:91:b3:e2:f7:26:
5f:cc:d4:37:a7:3d:a2:e0:06:ba:0e:a2:ac:77:b2:fc:90:27:
b6:af:45:8a:3e:6c:1e:50:52:c3:bb:0f:f1:37:ca:cc:5b:3c:
85:4d:6f:7d:61:a3:b5:49:cd:8e:33:57:a7:03:02:81:de:72:
e5:3a:b5:76:8b:de:c3:01:14:81:65:56:f7:42:60:8f:e4:69:
fc:eb:e9:82:62:a5:63:3d:a8:73:c4:72:31:02:b5:22:e3:f9:
12:8c:54:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:06:31 2026 by rpki-client