Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: UaHLAzR5B5AGkKin7Lo24k2PrvsDJvhGq/OxjO1ISQ0=
Subject key identifier: 25:B1:2A:55:18:05:7B:4C:0B:13:28:5B:AB:AA:4D:A5:CA:F0:47:09
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 019CABD9E041E165401EABBB930D5DD63E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:48 +0000
Manifest this update: Mon 02 Mar 2026 00:01:48 +0000
Manifest next update: Tue 03 Mar 2026 00:01:48 +0000
Files and hashes: 1: FXM0lZ9RW8MVyeNhLRa0gA27Yz8.roa (hash: AOWqH2G8p3eNy+r9FYww+1k4v48/EVkof2UT4jbdqII=)
2: ScbfsojaaHjN1VPlqjt62kAyKyQ.roa (hash: lQ50zLidvT+ypigEP+SJVNAGB7dMGWzSVTcP7sdJtfU=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: 61r3aXsrqI6lX4cl8xEs9NhXAnK5gwqzKgRVcit9Dv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e0:41:e1:65:40:1e:ab:bb:93:0d:5d:d6:3e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Mar 2 00:01:48 2026 GMT
Not After : Mar 3 00:01:48 2026 GMT
Subject: CN=25b12a5518057b4c0b13285babaa4da5caf04709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:0d:e6:40:56:87:a3:91:54:14:ca:b1:22:
e6:7b:b7:8e:2f:ab:a2:c9:ad:28:d8:3f:68:8e:c8:
8c:85:b8:26:96:50:6d:63:9a:0a:2a:52:b3:25:7f:
06:1f:4b:e9:b4:0a:47:83:0b:16:40:f8:0b:60:48:
76:46:76:dd:1b:47:c2:f9:c4:4c:78:f3:4b:1a:26:
85:46:87:8e:50:5b:f8:0f:65:d5:7d:1e:f6:52:66:
29:28:47:16:f4:73:a7:37:f3:f5:b1:f7:12:e7:04:
b0:57:d0:ec:8f:92:4f:0a:1d:13:0f:9a:64:c8:00:
80:93:59:f6:f2:c9:ad:ca:ff:6e:08:2b:86:79:49:
a0:a6:c3:92:31:4f:47:97:9f:29:79:6b:a5:61:77:
fd:17:97:6c:ba:83:d2:68:dc:af:ad:e8:d4:3d:e1:
b2:6e:8a:5b:c6:f1:ce:de:e3:69:fc:04:20:08:db:
42:b6:f8:70:0d:7f:0d:a6:10:74:97:42:7c:47:52:
35:ff:d4:a2:02:54:f7:7f:4a:00:53:59:53:57:13:
42:c4:d6:7c:e2:44:eb:20:86:0c:ac:96:82:ae:08:
d3:b0:f6:b0:c2:a5:b1:3d:fe:62:ea:47:c2:0c:8d:
2c:69:14:4e:34:17:c0:6b:13:d5:9d:a2:40:8a:09:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B1:2A:55:18:05:7B:4C:0B:13:28:5B:AB:AA:4D:A5:CA:F0:47:09
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:cd:4e:2d:a8:5c:16:38:87:da:a8:77:54:10:3f:a3:9e:a9:
b8:43:23:e6:09:21:8a:32:28:99:5f:be:c9:14:65:5b:33:58:
f4:54:48:66:16:3e:ea:bc:95:ea:36:da:37:52:b9:21:5f:53:
71:be:33:f3:63:bb:6e:09:eb:97:e3:a0:94:1f:57:35:01:8e:
04:71:d2:3d:a0:9c:f4:3c:c5:7b:c5:c8:ce:e3:49:98:91:24:
ed:63:ee:14:29:11:45:c0:a4:7f:0e:9c:e1:ae:e8:9e:c5:5c:
6d:b4:18:09:76:94:78:1e:b6:6a:3c:48:a5:04:a8:20:12:c0:
0b:cc:8d:a3:48:3e:b1:03:62:34:d7:ba:da:2c:c2:01:48:76:
2b:ca:9e:06:9e:33:4a:eb:53:a2:2c:4e:96:4e:8a:c4:39:52:
1d:d0:32:34:a0:31:03:6c:17:ee:e7:91:75:dd:0a:b1:30:f1:
21:6e:6c:c6:3b:6d:00:54:d3:60:cf:b7:46:9b:d1:8d:4b:05:
52:9c:8d:f1:29:7a:f8:e8:de:c4:8c:60:4b:83:9a:40:86:df:
32:c3:64:b1:af:d3:99:80:8d:62:65:48:4a:78:92:ec:13:18:
82:36:7d:f3:c4:50:41:29:ed:bf:f4:91:39:1b:b1:5f:91:c9:
67:ad:dc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:16 2026 by rpki-client