Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json)
Hash identifier: yRv3aHCYaPpw7BNYH9vOUzd8cUgEhD6xbAkne0Q7NBg=
Subject key identifier: 8D:6F:46:EC:BC:E2:C3:52:57:2F:DC:72:81:90:45:CE:7A:EA:8C:C4
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 019DA41D0482D726ADB156F62AD9799384A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
Manifest number: 0FA9
Signing time: Sun 19 Apr 2026 05:00:58 +0000
Manifest this update: Sun 19 Apr 2026 05:00:58 +0000
Manifest next update: Mon 20 Apr 2026 05:00:58 +0000
Files and hashes: 1: 6JsGG8yxKzcDoQMwZR2x3KoCb00.roa (hash: 6wxEu7HqJEfHfAXKDDmYgs76ZayF6+azKu/sKGA3exs=)
2: FENuxoqFjunqAylfU_74pUn9r9w.roa (hash: MH7ftTgYFM0jAg20wF24Y7UB/Kl4HvysaZ+BlD0+dTM=)
3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: ET1VAxKIDRhAohkQzdulW7lyufR1jNN92xeS20gN6/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:04:82:d7:26:ad:b1:56:f6:2a:d9:79:93:84:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Apr 19 05:00:58 2026 GMT
Not After : Apr 20 05:00:58 2026 GMT
Subject: CN=8d6f46ecbce2c352572fdc72819045ce7aea8cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:38:8f:bf:13:4b:28:ab:d8:95:af:1c:4a:e9:
57:70:cd:84:04:81:6a:9a:c5:97:b7:ab:5b:f0:18:
71:3a:ea:25:2e:9f:fb:02:ed:16:1d:22:76:3d:5a:
9d:5e:f7:e9:52:e8:cc:e5:6c:ef:aa:09:c7:25:df:
ee:58:dd:d2:e0:a2:12:66:94:c8:ca:87:2f:32:08:
68:7b:f3:dc:2b:90:dc:70:96:00:fb:28:3f:2a:cd:
1b:f8:50:28:98:34:da:e8:76:f5:0c:90:62:d9:98:
fa:f5:b7:69:fd:a8:4e:23:58:ab:0b:2a:17:e7:45:
4f:7d:a8:16:f3:4c:59:1b:bd:14:8d:14:cc:57:dc:
54:c3:12:b5:51:3b:7d:49:ef:f5:04:3d:12:30:db:
d7:6d:aa:dd:60:ce:84:a7:2b:1d:51:db:1c:f9:55:
7a:97:c7:61:38:24:d8:e4:72:c8:2e:4d:c2:2d:76:
43:ab:1b:7f:aa:59:cc:f8:b3:c6:42:30:65:c3:28:
6e:ed:fe:8d:1d:49:e3:2f:10:9d:cf:23:70:d1:3e:
24:4c:3c:de:7c:00:34:ee:ab:49:a4:40:d8:a9:cd:
6a:a8:26:eb:13:64:27:dd:ae:79:1e:2e:d7:79:c1:
db:7c:5d:98:db:de:4e:e4:cc:f3:9d:7c:eb:06:03:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6F:46:EC:BC:E2:C3:52:57:2F:DC:72:81:90:45:CE:7A:EA:8C:C4
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6e:88:44:f2:b2:db:43:ff:50:2b:9b:11:77:16:ce:63:c8:
7d:d0:ab:ef:77:f1:e4:52:f5:b6:8b:b8:5c:c7:3d:34:eb:ef:
b4:65:48:08:06:8d:c3:bf:e7:47:77:0b:e6:8a:7f:01:04:5f:
9e:04:0c:e5:4b:43:33:24:80:69:01:fb:ec:7f:8b:cc:10:f3:
ed:19:b5:f3:12:34:4e:e5:bd:c5:2e:03:03:61:e6:37:74:ac:
4f:cd:df:60:c8:b9:23:59:cc:1a:8b:a7:84:71:6d:66:aa:61:
1d:3a:3c:e2:41:cf:d1:a5:01:05:00:6c:52:a8:7c:c3:c2:f2:
99:13:86:72:91:1a:59:da:b8:4e:eb:26:6c:aa:b6:0d:95:e9:
fe:54:37:03:ce:f6:40:75:f7:d9:e3:1a:6f:60:d8:8c:b9:e3:
29:d0:57:15:80:46:8e:2a:a7:3e:e4:05:b5:42:04:36:50:56:
62:75:7b:6a:07:cd:90:5d:21:a8:ee:d6:f9:57:8f:40:56:bb:
4c:51:1b:f1:4b:3e:93:73:08:45:2b:08:3d:64:03:d5:0d:4d:
26:3c:2c:6a:1f:0c:07:9f:0a:ba:ca:82:89:28:6c:70:8b:39:
4b:23:10:c8:45:77:19:e0:b1:f7:bd:21:66:eb:41:8c:b4:78:
c0:29:9c:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHQSC1yatsVb2Ktl5k4SlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYzVmNzRkZjQ1MjBkMzQxZGEzNDhhNzAwYTAzYjk3Y2Fm
MDc3MzUwHhcNMjYwNDE5MDUwMDU4WhcNMjYwNDIwMDUwMDU4WjAzMTEwLwYDVQQD
Eyg4ZDZmNDZlY2JjZTJjMzUyNTcyZmRjNzI4MTkwNDVjZTdhZWE4Y2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jiPvxNLKKvYla8cSulXcM2EBIFq
msWXt6tb8BhxOuolLp/7Au0WHSJ2PVqdXvfpUujM5WzvqgnHJd/uWN3S4KISZpTI
yocvMghoe/PcK5DccJYA+yg/Ks0b+FAomDTa6Hb1DJBi2Zj69bdp/ahOI1irCyoX
50VPfagW80xZG70UjRTMV9xUwxK1UTt9Se/1BD0SMNvXbardYM6EpysdUdsc+VV6
l8dhOCTY5HLILk3CLXZDqxt/qlnM+LPGQjBlwyhu7f6NHUnjLxCdzyNw0T4kTDze
fAA07qtJpEDYqc1qqCbrE2Qn3a55Hi7XecHbfF2Y295O5MzznXzrBgMTHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1vRuy84sNSVy/ccoGQRc566ozEMB8GA1UdIwQY
MBaAFLLF9030Ug00HaNIpwCgO5fK8Hc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzIt
Nzc3ZWU5NTU2MjEwLzEvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzItNzc3ZWU5NTU2MjEw
LzEvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR26IRPKy
20P/UCubEXcWzmPIfdCr73fx5FL1tou4XMc9NOvvtGVICAaNw7/nR3cL5op/AQRf
ngQM5UtDMySAaQH77H+LzBDz7Rm18xI0TuW9xS4DA2HmN3SsT83fYMi5I1nMGoun
hHFtZqphHTo84kHP0aUBBQBsUqh8w8LymROGcpEaWdq4TusmbKq2DZXp/lQ3A872
QHX32eMab2DYjLnjKdBXFYBGjiqnPuQFtUIENlBWYnV7agfNkF0hqO7W+VePQFa7
TFEb8Us+k3MIRSsIPWQD1Q1NJjwsah8MB58KusqCiShscIs5SyMQyEV3GeCx970h
ZutBjLR4wCmcQw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:59:57 2026 by rpki-client