Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json)
Hash identifier: D0Q/gydXQPb1ftU3tbeNIoWBbPmpIX4SPmaYFvtsQXI=
Subject key identifier: E4:F2:54:9E:3E:8F:09:76:F0:8D:0D:DC:C9:75:6B:21:1C:D6:BB:E7
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 01A1280C2727C5564B158F472DB7D2F27709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
Manifest number: 117B
Signing time: Sat 10 Oct 2026 23:00:47 +0000
Manifest this update: Sat 10 Oct 2026 23:00:47 +0000
Manifest next update: Sun 11 Oct 2026 23:00:47 +0000
Files and hashes: 1: 6JsGG8yxKzcDoQMwZR2x3KoCb00.roa (hash: 6wxEu7HqJEfHfAXKDDmYgs76ZayF6+azKu/sKGA3exs=)
2: FENuxoqFjunqAylfU_74pUn9r9w.roa (hash: MH7ftTgYFM0jAg20wF24Y7UB/Kl4HvysaZ+BlD0+dTM=)
3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: UEZr8WHEpKX1PPD336SLbnab2QLeMtuKFTl1JNcqhgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:27:27:c5:56:4b:15:8f:47:2d:b7:d2:f2:77:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Oct 10 23:00:47 2026 GMT
Not After : Oct 11 23:00:47 2026 GMT
Subject: CN=e4f2549e3e8f0976f08d0ddcc9756b211cd6bbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:a2:9a:22:5f:75:0b:c6:92:70:da:d5:d5:
3a:5a:e9:95:11:94:9a:6b:63:44:d3:34:98:96:9d:
cc:87:07:9e:08:06:05:af:51:de:9f:56:dc:a3:6c:
b7:e8:da:29:fc:dd:93:a7:2c:50:7c:8f:5e:40:6d:
96:8d:e9:63:9a:76:e2:25:68:74:10:7f:22:e5:c5:
47:ab:ff:6d:08:d6:2e:b6:df:4a:75:dc:94:69:c7:
97:fa:af:8e:16:cc:c6:0c:75:69:db:1e:33:90:76:
ae:1d:98:0e:88:82:af:8f:91:9f:9b:5e:d4:f7:87:
f6:d0:62:33:ef:df:4b:4d:91:02:9f:13:47:69:a3:
c5:6d:b5:96:ad:d7:ca:b6:a1:44:b9:ae:a6:14:54:
3c:b5:65:2b:3d:24:d3:81:e7:f1:9b:48:ed:b5:b5:
22:df:01:59:c9:68:dc:74:f7:e7:a7:86:29:27:56:
72:81:c6:fd:9b:59:fd:bb:4e:46:9c:66:59:36:30:
22:3b:ae:59:5c:c7:96:d1:d1:86:af:fa:3d:f8:0e:
94:23:49:52:3b:57:54:6f:56:ad:a3:c4:1a:04:3e:
e0:98:06:ab:7a:61:e3:43:ef:07:6a:1c:b7:ea:72:
3f:56:43:56:ed:99:8d:10:6a:e4:93:96:02:a8:b2:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F2:54:9E:3E:8F:09:76:F0:8D:0D:DC:C9:75:6B:21:1C:D6:BB:E7
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:38:78:4c:c7:d8:9f:fe:6d:74:5a:d0:de:b4:93:21:88:03:
ec:a4:7b:29:8e:ae:84:c1:27:14:25:c1:63:f5:eb:4e:a5:4d:
0a:ce:b5:68:a0:31:28:d3:b1:30:d4:03:32:b3:de:be:51:51:
e3:37:21:a0:a9:fb:70:18:74:f2:9e:b4:87:e3:a5:94:0f:0e:
34:7f:82:fd:06:41:bd:a0:c1:7a:1b:1e:a4:da:18:1b:e7:62:
80:12:07:ef:47:fe:eb:82:51:82:5c:3c:c6:6f:4a:ff:8b:f4:
99:c4:b6:8b:be:df:7c:d2:ff:31:5d:a0:fb:12:20:9e:89:f1:
ce:d6:2f:d6:85:2e:e8:1c:b5:4d:71:0f:c9:92:86:40:64:32:
09:00:86:7b:25:8a:28:0a:98:9d:65:13:a9:03:5f:35:da:0f:
2e:1b:2f:6a:85:08:bf:03:56:1a:37:cd:69:df:98:5e:45:87:
23:e7:0d:37:be:1b:4d:02:b3:b7:2a:65:2e:b4:e1:2b:0e:e1:
c3:9e:fb:01:d9:91:7f:a8:1e:75:c1:0d:4a:74:e1:4a:bf:9c:
f0:21:f1:e1:f3:be:0a:8d:e9:8b:fb:52:60:4d:a9:98:10:d5:
92:cc:02:32:44:4a:45:5a:1f:51:ac:3b:ba:98:2e:00:ad:81:
f9:1d:87:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:41:06 2026 by rpki-client