Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
File: sszaHFSHy5ONV-phzC1i0xBw21E.mft (raw, json)
Hash identifier: uOeVu59PFVdbyvyyXHLoPPhUjBBbVxKqEx7R/UJrQAs=
Subject key identifier: AA:B2:B3:A5:C0:7D:52:1D:B0:68:F8:66:4D:1A:1E:01:F5:32:7A:6E
Authority key identifier: B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51
Certificate issuer: /CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51
Certificate serial: 019D9A75440737F5B019447FD45C51547FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
Manifest number: 0EC9
Signing time: Fri 17 Apr 2026 08:01:09 +0000
Manifest this update: Fri 17 Apr 2026 08:01:09 +0000
Manifest next update: Sat 18 Apr 2026 08:01:09 +0000
Files and hashes: 1: 5WXSL9wWB5JNwpdm1UP4ejoSsRw.roa (hash: 2CKZu3jOCHO6Fw6CJElWpqf72yG47yIKnLWAvdNr280=)
2: sszaHFSHy5ONV-phzC1i0xBw21E.crl (hash: D7KRCHSgZvH43ZlZpbdIvmqeV46yj+RiZpofS4e35Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:44:07:37:f5:b0:19:44:7f:d4:5c:51:54:7f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51
Validity
Not Before: Apr 17 08:01:09 2026 GMT
Not After : Apr 18 08:01:09 2026 GMT
Subject: CN=aab2b3a5c07d521db068f8664d1a1e01f5327a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:33:c5:42:21:a4:1f:38:46:e4:c2:5e:f4:
27:2b:c2:7a:67:a1:ed:11:35:72:9b:7e:d0:b9:00:
f5:b5:8e:16:20:35:9e:59:66:71:f2:09:fb:3f:bd:
e1:e0:9d:b2:ef:e0:b1:3b:e6:a7:59:c8:a5:74:8b:
28:f9:e5:a6:e5:28:fc:86:86:dc:91:5f:05:95:88:
bb:29:23:01:82:a0:ae:2c:9d:a1:86:19:82:ca:da:
c1:03:78:25:f4:71:f3:15:ca:49:9f:01:b6:c7:86:
70:f2:70:8d:02:59:69:e6:4f:6f:4e:19:95:5c:f3:
18:34:1f:9e:34:43:bd:6b:85:49:96:a2:7e:55:d2:
52:c6:00:7e:3a:e3:59:5e:4b:ba:d3:2a:0d:39:76:
f6:c0:52:f7:b2:55:d5:f2:ed:19:1f:e0:a9:57:ef:
04:ea:e7:92:cc:eb:15:e8:4e:c4:f8:5a:2f:eb:46:
71:cb:12:a4:86:57:54:bb:1b:ca:0d:72:37:78:59:
59:dc:4d:ef:e2:9a:2c:e0:92:1e:cd:18:d5:d6:d4:
52:39:b4:30:61:56:92:1f:c3:80:d3:e2:8e:31:7c:
6e:64:fd:fd:c2:d4:4e:3e:36:3b:46:f7:1f:ce:2e:
61:8c:b3:69:ee:d9:58:b0:8e:a1:5b:dc:70:80:7a:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B2:B3:A5:C0:7D:52:1D:B0:68:F8:66:4D:1A:1E:01:F5:32:7A:6E
X509v3 Authority Key Identifier:
keyid:B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:24:04:e4:83:f7:eb:94:95:e2:af:7e:30:47:d0:e3:00:ea:
71:13:77:50:b7:66:53:65:80:1d:a0:c4:f6:ff:cb:53:9c:b8:
7d:b7:b1:1f:41:bb:b0:80:a0:46:9a:01:78:e3:27:8a:28:1d:
de:06:74:7e:3f:a3:83:75:71:70:cb:72:34:d7:ac:ed:9f:62:
77:40:14:18:d3:4b:9d:2a:c9:04:98:da:ca:d9:af:ce:6e:a4:
12:39:ca:7c:4c:4a:a3:55:7d:0d:7b:90:bc:b9:bc:d4:af:29:
f8:ea:eb:67:27:90:eb:67:19:32:36:2e:48:17:70:4e:ea:79:
c4:3d:cb:ec:c0:19:14:4a:0c:e1:e8:56:47:1e:39:af:ac:b7:
d4:9c:da:f5:49:4d:f7:7a:72:d3:3c:3e:6e:5d:25:be:35:f6:
21:ac:bf:ef:9d:d1:88:23:43:9c:39:7d:c6:9e:7d:2e:38:83:
d8:58:08:1f:d2:28:5c:8a:be:c2:3e:8d:9a:46:b9:1b:7e:c4:
7f:a8:90:de:62:4a:25:cf:8f:6b:f7:20:f6:96:61:55:3b:82:
28:d0:6e:4e:cb:df:2c:ba:80:1d:07:39:66:6e:48:0f:ea:07:
8d:f5:55:fc:df:12:92:ed:2d:90:47:c5:76:5c:dd:43:08:f7:
26:dd:bc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:50:37 2026 by rpki-client