Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: dZU3Hhuc9w74fEbBjrBR7CFG7l3nUqCUckAEbf8tUjg=
Subject key identifier: CC:13:4B:DD:7A:3E:37:9B:BA:16:B9:3E:FD:96:28:35:72:BB:22:BF
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 01A0CA47CDE7FF6FD133304D3D9202507FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 18:01:38 +0000
Manifest this update: Tue 22 Sep 2026 18:01:38 +0000
Manifest next update: Wed 23 Sep 2026 18:01:38 +0000
Files and hashes: 1: FXM0lZ9RW8MVyeNhLRa0gA27Yz8.roa (hash: AOWqH2G8p3eNy+r9FYww+1k4v48/EVkof2UT4jbdqII=)
2: ScbfsojaaHjN1VPlqjt62kAyKyQ.roa (hash: lQ50zLidvT+ypigEP+SJVNAGB7dMGWzSVTcP7sdJtfU=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: WGavb7pjAWmRG4PFhlKT26n2Ll9CVmXSOJgqFKbLiVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:cd:e7:ff:6f:d1:33:30:4d:3d:92:02:50:7f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Sep 22 18:01:38 2026 GMT
Not After : Sep 23 18:01:38 2026 GMT
Subject: CN=cc134bdd7a3e379bba16b93efd96283572bb22bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:92:0c:2d:e8:6a:82:76:70:da:02:e3:f4:
08:d5:88:1e:48:d3:3e:8d:5f:a2:6a:5c:fc:70:21:
07:f4:84:a5:e6:4c:6e:24:87:23:60:c2:66:cc:eb:
09:c6:97:87:06:fe:9c:37:d1:ff:b7:22:cc:88:35:
88:63:75:42:7f:a6:4e:3c:ec:9a:aa:fb:fd:a4:08:
72:39:22:04:13:4f:c4:5e:8e:45:98:75:3f:0e:c8:
07:25:31:d7:c1:e1:91:d0:c9:18:3c:bb:0a:d6:52:
0b:90:10:bc:09:10:8a:68:2c:ac:fd:5f:7d:39:5b:
d4:3b:0d:e8:6b:ad:0a:c9:fa:e7:14:82:b3:f5:8c:
3e:ca:a5:07:b7:be:fd:70:d8:58:7d:51:24:c0:ea:
8b:44:37:1d:2e:74:0c:0a:63:62:04:f9:97:3f:04:
a1:73:8f:80:b2:96:e2:c5:98:b8:81:df:f2:7c:10:
ba:63:3c:f5:3a:c2:f4:25:d9:71:07:85:2f:56:95:
95:6b:94:40:5f:76:4b:fb:9a:b4:37:2c:bb:cf:37:
28:ae:e7:10:86:d9:38:4b:f6:2c:04:9c:fb:6e:c2:
61:46:e7:f8:3c:26:67:83:bd:8c:86:93:c1:ad:ba:
24:d5:03:93:d2:3e:c0:de:18:68:db:1d:62:f9:c8:
3c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:13:4B:DD:7A:3E:37:9B:BA:16:B9:3E:FD:96:28:35:72:BB:22:BF
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d3:ce:dd:49:08:41:1f:67:de:dd:03:ea:3d:61:b8:96:be:
ed:39:a5:a1:77:ae:2f:e0:a7:df:a8:00:ad:61:3c:19:0d:b2:
68:32:ed:5e:be:85:aa:c6:f1:b6:09:e7:1e:00:a7:35:bf:1c:
26:f8:b8:2c:a8:94:b6:6c:16:7c:3d:42:36:b1:28:58:de:41:
4a:13:2c:91:21:5c:25:78:bb:c6:05:f0:de:94:98:b5:2e:67:
dc:e6:2a:c2:17:5b:f2:4b:3e:13:6b:db:b1:94:73:c6:ac:30:
ec:c9:05:a2:37:0f:6a:d6:c3:e9:e7:64:e1:21:a0:60:99:1a:
b8:d0:95:81:cd:6b:53:00:05:eb:8b:6f:55:9e:b1:d6:12:af:
83:67:82:70:8e:99:11:9f:15:01:17:73:06:57:38:e8:2b:9f:
d4:87:81:c0:4e:df:ce:a6:00:2b:a4:39:4b:0d:52:f4:1e:9e:
88:16:49:06:21:10:0e:33:9f:a6:8b:63:36:ae:b9:b3:b1:ca:
3f:cb:91:81:66:a7:e2:c7:65:a4:fc:b0:3a:71:f4:92:81:d0:
3a:0e:8c:3f:55:60:4a:dc:1a:af:a6:37:e2:5d:dd:9a:02:0c:
ad:48:13:75:e2:39:a6:0e:d9:a8:b4:eb:a9:db:3b:eb:81:4f:
e5:6f:ee:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:21:38 2026 by rpki-client