Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: uVI27UUXMLMeue69VwDigH0jOccWN0pCO7QefwAylu8=
Subject key identifier: E6:11:AF:BC:AD:32:1D:B6:DF:2A:01:94:50:AD:C3:93:45:FB:79:DB
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 019D99624144EE7E23AAB1A02E91566FBE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:00:46 +0000
Manifest this update: Fri 17 Apr 2026 03:00:46 +0000
Manifest next update: Sat 18 Apr 2026 03:00:46 +0000
Files and hashes: 1: FXM0lZ9RW8MVyeNhLRa0gA27Yz8.roa (hash: AOWqH2G8p3eNy+r9FYww+1k4v48/EVkof2UT4jbdqII=)
2: ScbfsojaaHjN1VPlqjt62kAyKyQ.roa (hash: lQ50zLidvT+ypigEP+SJVNAGB7dMGWzSVTcP7sdJtfU=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: 0KE6I8VaXcxZ3N7DSYKXPcGncAvweGN2xHaAP6w/7tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:41:44:ee:7e:23:aa:b1:a0:2e:91:56:6f:be:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Apr 17 03:00:46 2026 GMT
Not After : Apr 18 03:00:46 2026 GMT
Subject: CN=e611afbcad321db6df2a019450adc39345fb79db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:09:fc:62:81:49:37:4a:b2:61:0d:21:37:
a2:a0:07:d0:07:be:85:7c:b8:5b:35:98:6a:c9:e1:
fd:12:f4:62:de:57:a9:00:c7:47:db:fc:20:36:17:
33:f7:26:1e:c9:d3:2c:56:b5:68:43:28:26:5a:9c:
6c:d4:6c:33:79:51:31:8c:b2:53:4c:c3:2f:77:de:
fe:07:1a:cb:d1:98:04:ad:a7:d8:e3:51:8c:d7:89:
ac:f8:a4:32:f2:d5:1a:c1:d3:94:c6:a1:05:d0:af:
f9:7e:75:14:b0:84:f6:cc:a3:b0:c2:8f:8d:a1:e6:
c1:ca:67:20:9f:86:4a:10:b3:a3:49:11:16:fa:95:
d0:ef:f1:8b:ce:25:5d:69:0f:04:8d:fd:76:51:0d:
08:9c:b2:04:10:77:eb:74:7e:6d:a6:5c:0f:d5:c1:
18:b8:8f:93:d7:52:eb:98:87:9e:0f:ea:1e:0d:d8:
fa:51:c9:62:50:1c:1b:57:09:6a:a2:98:b8:7d:67:
93:11:d2:16:6a:5b:2e:f5:35:78:74:37:03:95:42:
7b:90:a8:cf:62:da:1a:56:04:46:5b:2e:09:c8:1e:
d9:89:4d:fb:0d:7c:55:0b:56:f7:d1:4d:1b:41:25:
f2:32:ed:23:9f:2a:e2:5c:d2:de:e7:47:1d:3a:50:
df:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:11:AF:BC:AD:32:1D:B6:DF:2A:01:94:50:AD:C3:93:45:FB:79:DB
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b7:7e:52:21:00:3b:46:d7:81:7f:5a:b6:5c:f3:b3:cf:35:
74:22:e2:4d:c4:da:74:97:81:5e:0e:84:e8:37:b2:2c:9f:1a:
e9:a2:6a:de:e9:f6:f3:61:8a:c0:72:b9:a8:c6:31:5b:83:9a:
1a:84:a6:fb:19:92:2f:cb:b4:1e:4a:62:af:25:86:9f:26:c6:
79:d1:0d:59:24:69:67:20:67:94:88:cd:b6:e2:e5:24:9b:c5:
19:45:23:ea:44:5a:01:b1:ae:06:e5:08:2a:9c:2b:3f:d5:31:
90:9a:32:1b:07:b1:03:c2:ed:64:32:8f:ee:6a:53:56:66:b8:
e1:49:82:09:69:8c:b2:a1:76:e4:b9:b1:b5:80:79:0e:be:1c:
4e:33:1e:92:c8:22:12:2e:5e:cb:c8:85:98:25:da:5f:5e:1e:
1f:40:7c:f7:ee:d3:a6:46:f0:9b:4a:06:df:1a:96:ee:e3:93:
16:ea:3d:d3:b8:0e:31:16:68:2f:f6:21:12:d1:69:92:29:04:
03:47:49:e3:30:b7:b8:99:83:a6:13:6c:8a:df:0f:e6:5e:8f:
bd:83:dd:2c:b6:99:b5:a8:21:47:53:8c:90:a0:34:15:c3:84:
c3:b7:94:15:c9:50:60:fa:06:72:db:d1:50:01:7a:15:de:07:
cd:84:51:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:42 2026 by rpki-client