Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: 0vm3Gh0UncrWSyYToKVfbkTLB5bTaE7HK3YjVJnvIHw=
Subject key identifier: 55:8A:8C:C8:DA:2D:FE:5C:91:63:BA:8F:5C:40:9F:5A:5B:94:CB:53
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 01A1DEDED0E64A13665A72E5B164A1C35F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 13DF
Signing time: Sun 15 Nov 2026 11:01:46 +0000
Manifest this update: Sun 15 Nov 2026 11:01:46 +0000
Manifest next update: Mon 16 Nov 2026 11:01:46 +0000
Files and hashes: 1: 6YI5rJ7BlGzxSIRA8GPA9weBdeE.roa (hash: Rjqr+vNFn+Ln+ETYNFvgxdo2liKvZUHKE0VAbwfjlW8=)
2: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: EpH4W3j9qWxYtLx0uwx+jK3tsMeiYSNUaNWNOqlUsMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:d0:e6:4a:13:66:5a:72:e5:b1:64:a1:c3:5f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: Nov 15 11:01:46 2026 GMT
Not After : Nov 16 11:01:46 2026 GMT
Subject: CN=558a8cc8da2dfe5c9163ba8f5c409f5a5b94cb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:80:c3:59:7b:2f:7a:d9:59:c9:c0:99:e8:
dd:bb:bb:ba:a7:3a:dd:d7:57:6b:a8:d6:de:b9:c3:
f7:8d:14:5e:28:f7:68:70:1b:94:d0:fe:4a:db:74:
2a:72:0d:59:1c:3b:44:4c:e8:60:8d:09:bc:cb:6f:
f5:8c:a0:6b:0f:ec:d9:41:38:0f:15:0d:02:de:02:
f0:27:1c:43:47:af:1f:7f:33:7d:95:94:38:b6:b4:
e4:36:a2:87:42:7d:44:7e:0f:28:a5:7f:0d:18:31:
3f:0d:49:06:2f:47:0a:08:ab:5d:3f:bf:e1:5c:0f:
d6:c7:01:b3:26:95:bf:dc:a1:a5:5d:0c:b9:26:15:
9f:fc:cc:7f:04:2c:76:60:a4:62:36:68:9b:b5:55:
f2:50:3c:f6:a4:b7:07:ff:5d:7a:9e:45:92:ad:31:
ce:30:07:16:a1:ac:f2:c1:0f:68:49:40:0a:91:9e:
ee:f3:8e:38:ee:e7:1c:ca:6c:cf:47:84:f2:b2:eb:
27:36:dc:d7:f0:aa:98:3b:7c:01:56:55:26:91:c2:
09:4c:8d:44:e9:58:36:0f:19:c3:ff:31:d6:51:6c:
c9:a8:88:99:6f:6e:93:cc:42:e4:be:11:1b:ae:ac:
60:39:c8:75:26:d5:2b:70:3b:7d:4f:5e:a7:38:d0:
bd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8A:8C:C8:DA:2D:FE:5C:91:63:BA:8F:5C:40:9F:5A:5B:94:CB:53
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:03:a2:a2:70:d4:bf:82:c3:76:76:af:a3:53:75:87:b1:fa:
21:d3:da:0d:2e:cc:55:37:21:67:86:a3:86:ee:cd:94:64:a3:
ce:d1:dc:1b:0f:8a:a0:87:b1:8d:9a:76:67:e0:72:b4:b1:95:
3f:5d:6b:ce:1a:a9:87:35:3e:20:ce:fd:46:53:3e:4b:ff:b7:
7d:c9:b6:c3:3a:35:c1:b8:57:2d:d0:e8:26:52:33:70:5d:e7:
bc:5f:63:98:64:0c:a7:59:e0:fc:43:35:f9:81:3b:e8:3e:a6:
3d:6a:cc:76:4a:fa:ef:7d:56:c3:dc:be:ea:2c:27:c5:15:a4:
18:5c:80:c7:94:ea:db:63:84:f0:db:65:e7:ee:b4:3e:0b:ba:
e1:9c:b3:47:30:6b:8b:01:ad:0b:ff:93:9a:a4:17:a9:45:4b:
cf:b7:11:4b:99:f8:c2:8a:08:87:ad:44:21:f1:79:44:13:35:
81:3b:3c:32:6c:a6:42:53:61:c4:d6:1a:f6:9f:c2:47:05:bb:
a4:77:04:3a:cf:e1:76:fc:de:88:37:1d:00:5a:9b:e3:77:01:
cd:aa:44:28:a9:47:46:02:ad:d7:6a:fa:19:46:0e:c4:59:8d:
1d:ea:b2:c2:51:11:30:62:01:a0:8e:f4:8b:74:f7:c0:ef:54:
cf:0b:c6:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3tDmShNmWnLlsWShw18rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2Y2IwYzhmMjA4NDMzMDIwMzRmNjM2NTZlYTI5ZWJkNmQx
MTYzYWEwHhcNMjYxMTE1MTEwMTQ2WhcNMjYxMTE2MTEwMTQ2WjAzMTEwLwYDVQQD
Eyg1NThhOGNjOGRhMmRmZTVjOTE2M2JhOGY1YzQwOWY1YTViOTRjYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZaAw1l7L3rZWcnAmejdu7u6pzrd
11drqNbeucP3jRReKPdocBuU0P5K23Qqcg1ZHDtETOhgjQm8y2/1jKBrD+zZQTgP
FQ0C3gLwJxxDR68ffzN9lZQ4trTkNqKHQn1Efg8opX8NGDE/DUkGL0cKCKtdP7/h
XA/WxwGzJpW/3KGlXQy5JhWf/Mx/BCx2YKRiNmibtVXyUDz2pLcH/116nkWSrTHO
MAcWoazywQ9oSUAKkZ7u84447uccymzPR4TysusnNtzX8KqYO3wBVlUmkcIJTI1E
6Vg2DxnD/zHWUWzJqIiZb26TzELkvhEbrqxgOch1JtUrcDt9T16nONC9OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWKjMjaLf5ckWO6j1xAn1pblMtTMB8GA1UdIwQY
MBaAFPbLDI8ghDMCA09jZW6inr1tEWOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUt
MmFmM2Q2MmJlN2YyLzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUtMmFmM2Q2MmJlN2Yy
LzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQOionDU
v4LDdnavo1N1h7H6IdPaDS7MVTchZ4ajhu7NlGSjztHcGw+KoIexjZp2Z+BytLGV
P11rzhqphzU+IM79RlM+S/+3fcm2wzo1wbhXLdDoJlIzcF3nvF9jmGQMp1ng/EM1
+YE76D6mPWrMdkr6731Ww9y+6iwnxRWkGFyAx5Tq22OE8Ntl5+60Pgu64ZyzRzBr
iwGtC/+TmqQXqUVLz7cRS5n4wooIh61EIfF5RBM1gTs8MmymQlNhxNYa9p/CRwW7
pHcEOs/hdvzeiDcdAFqb43cBzapEKKlHRgKt12r6GUYOxFmNHeqywlERMGIBoI70
i3T3wO9UzwvGOg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:21:11 2026 by rpki-client