Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json)
Hash identifier: nCS0wlAMnTcykhUbBI4uhWQCG1nBLs68Jh78JjHUYyY=
Subject key identifier: 6F:8D:C6:CF:DD:61:05:44:3A:0C:B2:41:CA:6F:62:66:1E:86:D1:49
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 019FAB9AD7E96061662C075EA2D85F93DDD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
Manifest number: 10B6
Signing time: Wed 29 Jul 2026 02:01:19 +0000
Manifest this update: Wed 29 Jul 2026 02:01:19 +0000
Manifest next update: Thu 30 Jul 2026 02:01:19 +0000
Files and hashes: 1: 6JsGG8yxKzcDoQMwZR2x3KoCb00.roa (hash: 6wxEu7HqJEfHfAXKDDmYgs76ZayF6+azKu/sKGA3exs=)
2: FENuxoqFjunqAylfU_74pUn9r9w.roa (hash: MH7ftTgYFM0jAg20wF24Y7UB/Kl4HvysaZ+BlD0+dTM=)
3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: EqYxHg83lNvyUy/GjGU7w7EDJwiTPORQxuUHG1/p9IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:d7:e9:60:61:66:2c:07:5e:a2:d8:5f:93:dd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Jul 29 02:01:19 2026 GMT
Not After : Jul 30 02:01:19 2026 GMT
Subject: CN=6f8dc6cfdd6105443a0cb241ca6f62661e86d149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:ca:f2:55:96:b6:7c:08:26:bc:c3:e1:7f:
4e:ca:37:a8:3f:08:dc:aa:ef:fd:6f:49:51:d1:30:
6f:5c:bb:cd:bd:6d:f5:e6:88:64:11:37:44:7d:59:
d3:b5:9c:30:4b:3a:e6:f4:db:b2:f0:4a:b3:5c:35:
55:b6:c5:c8:65:5f:ca:dc:e7:c7:98:b9:b2:ac:57:
bc:4f:43:ef:7c:22:8f:1a:03:c7:65:ec:ae:43:6a:
f5:58:78:c4:fb:51:f1:b2:55:66:38:f3:f9:6a:88:
6a:69:a4:4a:1f:a8:88:4e:9d:2b:3e:57:51:60:6b:
95:66:f4:64:f1:8f:01:da:fb:07:0b:ff:26:e3:a4:
79:f2:c0:50:ee:df:ea:dc:8f:6d:01:44:43:ea:c4:
53:8e:db:1f:9b:7d:80:ef:4d:4a:2a:0f:1e:bf:bf:
40:92:b2:4a:b6:47:ef:e1:f1:19:c6:a4:96:c5:34:
46:da:ab:79:dd:3f:2e:3f:71:6b:67:04:48:da:19:
56:1d:99:99:e9:5c:d5:3b:c4:37:94:42:be:3d:9e:
df:84:36:d3:a5:75:0e:5b:ad:14:41:ad:31:b4:b5:
67:ae:d4:4a:0d:48:22:d5:36:86:49:ae:d1:88:f3:
32:b0:c2:d8:40:ec:9a:bf:c8:ee:0a:0e:f1:49:00:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8D:C6:CF:DD:61:05:44:3A:0C:B2:41:CA:6F:62:66:1E:86:D1:49
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ae:5a:cc:ba:e6:af:a3:3b:8a:58:25:aa:b5:65:b7:e1:5b:
cb:f6:29:b2:e4:b5:a3:d4:09:96:3d:a1:e8:5d:b5:4a:c6:9b:
fd:02:f1:87:6a:a8:f9:75:c7:e8:1f:01:06:f6:4e:cc:c5:57:
af:7a:a8:aa:75:37:eb:a7:6b:60:8c:11:be:41:d8:e9:0a:3d:
b1:ce:56:8d:f9:59:8c:2b:13:21:d0:28:eb:d3:b1:be:7f:a7:
d0:e5:ef:c7:89:9c:75:ed:de:34:b5:e1:54:29:02:3a:60:d8:
cd:58:5f:aa:fb:2d:86:1a:9c:83:89:7f:e3:e8:23:7d:2e:16:
41:8f:3b:1c:b2:97:6e:2b:50:29:91:31:fa:03:c6:e9:68:65:
6a:9d:5c:c1:23:22:0a:bb:25:51:3a:4f:3d:35:8a:94:c5:a1:
2e:e5:64:1b:16:d7:6f:e0:dc:d5:43:da:f5:8b:d8:b3:93:19:
7f:ea:65:ad:40:ee:da:10:f7:da:b7:ce:33:ed:24:a2:88:1d:
58:ae:23:ed:cf:33:e1:e8:a7:fe:64:d4:7a:3b:0d:1c:f5:47:
3e:06:10:6c:51:48:a5:0c:b0:89:7b:f2:96:d4:82:a6:a3:00:
9c:52:8e:c4:a4:7a:f6:63:55:52:2a:c7:66:aa:37:29:25:a1:
45:d8:db:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:18:29 2026 by rpki-client