Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
File: ss0DX6sYpLeCYURWP2DniYpO8PE.mft (raw, json)
Hash identifier: hQ03DIRlXLV1AKvoegDQ0vtG1LL84CdipMsKm7/8EgY=
Subject key identifier: A0:49:23:D5:C3:A7:63:28:15:40:BB:AA:55:4A:5C:65:F1:8C:D9:0F
Authority key identifier: B2:CD:03:5F:AB:18:A4:B7:82:61:44:56:3F:60:E7:89:8A:4E:F0:F1
Certificate issuer: /CN=b2cd035fab18a4b7826144563f60e7898a4ef0f1
Certificate serial: 019D9BBF3F60385C665331C27E7929AF8680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
Manifest number: 13DF
Signing time: Fri 17 Apr 2026 14:01:35 +0000
Manifest this update: Fri 17 Apr 2026 14:01:35 +0000
Manifest next update: Sat 18 Apr 2026 14:01:35 +0000
Files and hashes: 1: ss0DX6sYpLeCYURWP2DniYpO8PE.crl (hash: CVLG4i5U3i+611BV6UPj2P6IEBRaCOzne0XlvqPP5m8=)
2: tgTwpFfHXIJ-4zvGVktRl18g6vA.roa (hash: kjXIbzNvSA/lR/bgH5uNTLZdXALacffRt33zev7P/mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:3f:60:38:5c:66:53:31:c2:7e:79:29:af:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2cd035fab18a4b7826144563f60e7898a4ef0f1
Validity
Not Before: Apr 17 14:01:35 2026 GMT
Not After : Apr 18 14:01:35 2026 GMT
Subject: CN=a04923d5c3a763281540bbaa554a5c65f18cd90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:a4:60:d1:34:c4:61:d2:3c:15:dc:af:42:
e8:05:39:eb:29:ed:d8:2d:eb:34:2b:cd:18:66:48:
7f:55:62:39:8c:7b:2a:a5:d2:d9:50:9b:4b:50:39:
a0:a5:a3:7b:77:f1:64:0d:8e:64:5b:07:53:29:93:
69:82:e3:4a:99:39:7f:f9:44:63:df:35:c7:62:c3:
02:38:21:fd:6d:05:31:16:3a:e5:6b:0d:fb:cc:b3:
00:8d:fc:51:34:4c:d4:6a:38:78:4e:50:ea:74:53:
4e:81:4d:3b:da:31:06:e4:40:35:0d:3d:91:e7:f2:
88:df:4a:5e:27:a6:e4:06:96:11:a6:e6:31:28:7f:
bf:d1:77:d1:f6:c1:14:0d:79:f8:60:24:69:d0:a7:
3a:5a:1d:03:c7:e0:e6:fc:93:7b:6c:f2:d1:48:c1:
cf:b9:ed:de:38:0e:f1:e4:25:50:dc:c0:17:04:28:
08:e6:93:c8:8e:fa:e0:e3:83:4c:3f:a2:0a:c8:46:
73:a7:0d:11:6c:db:ce:3b:98:7c:8a:44:a6:87:59:
11:de:bc:15:84:75:86:13:3c:3b:a5:ec:06:aa:9c:
3a:62:af:a5:a6:f5:6e:79:d0:2b:48:3c:ad:c9:4a:
0d:e8:80:73:44:99:e7:62:46:1b:99:3c:6b:d1:8f:
b5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:49:23:D5:C3:A7:63:28:15:40:BB:AA:55:4A:5C:65:F1:8C:D9:0F
X509v3 Authority Key Identifier:
keyid:B2:CD:03:5F:AB:18:A4:B7:82:61:44:56:3F:60:E7:89:8A:4E:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:20:48:70:be:75:52:e1:b3:10:19:46:4a:8e:f0:07:4a:ac:
8c:b0:96:15:d0:f6:29:07:cb:da:8f:c8:91:4c:6d:e9:09:48:
25:00:66:6f:db:73:fd:38:72:51:8a:16:75:71:53:7f:45:2e:
b2:8e:1f:5f:d4:b8:9a:7e:2a:61:35:48:47:3d:01:93:12:ab:
53:0e:82:50:b9:eb:9f:f7:01:84:bf:d3:33:29:9e:fc:0b:8a:
a8:da:3e:46:7d:ac:8f:42:a4:97:41:72:a2:15:af:22:0f:ef:
bf:3d:30:f8:cb:05:eb:35:4e:9a:d2:a5:b7:f8:7a:8b:08:f3:
64:9d:67:fa:c8:8f:f6:52:ef:08:39:00:c9:fb:42:a3:3f:28:
b8:35:fe:76:e1:82:81:bc:fd:a3:1c:90:d3:98:50:f2:6f:01:
29:f5:81:bf:8c:4c:91:bb:b1:db:dd:30:51:0e:90:83:c5:ae:
3c:f1:b5:ff:32:91:c6:47:e7:2b:f0:78:4f:86:6c:b7:c3:08:
50:ff:5e:5d:96:c8:da:5d:06:73:d2:b3:94:8b:80:12:52:4c:
01:b6:bb:26:fa:65:94:52:25:2e:24:7a:da:a9:e4:15:6b:cf:
7d:d1:bb:a7:f6:36:fd:8d:c2:ee:de:ef:5a:6f:96:79:96:7b:
99:6b:b8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:02 2026 by rpki-client