Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
File: ss0DX6sYpLeCYURWP2DniYpO8PE.mft (raw, json)
Hash identifier: RaSEXxMrGlXCRskMVsoo/KR7XdGv8WO8rlaBCwevSKI=
Subject key identifier: E6:25:C3:E7:D6:42:AF:48:B4:2B:D6:E3:DA:C2:20:27:D9:E7:C1:65
Authority key identifier: B2:CD:03:5F:AB:18:A4:B7:82:61:44:56:3F:60:E7:89:8A:4E:F0:F1
Certificate issuer: /CN=b2cd035fab18a4b7826144563f60e7898a4ef0f1
Certificate serial: 019CAE35ABABACAD6B61C6D3DB379BCFB231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
Manifest number: 1364
Signing time: Mon 02 Mar 2026 11:01:18 +0000
Manifest this update: Mon 02 Mar 2026 11:01:18 +0000
Manifest next update: Tue 03 Mar 2026 11:01:18 +0000
Files and hashes: 1: ss0DX6sYpLeCYURWP2DniYpO8PE.crl (hash: b/GTKysBdL2/1XQgfy6kSchGZpL4qEN+MgfR9Hpdb0Q=)
2: tgTwpFfHXIJ-4zvGVktRl18g6vA.roa (hash: kjXIbzNvSA/lR/bgH5uNTLZdXALacffRt33zev7P/mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:ab:ab:ac:ad:6b:61:c6:d3:db:37:9b:cf:b2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2cd035fab18a4b7826144563f60e7898a4ef0f1
Validity
Not Before: Mar 2 11:01:18 2026 GMT
Not After : Mar 3 11:01:18 2026 GMT
Subject: CN=e625c3e7d642af48b42bd6e3dac22027d9e7c165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8e:c3:12:20:57:be:55:62:21:32:42:5e:14:
42:94:42:a9:76:86:3a:d1:1c:6f:17:99:59:07:d9:
99:9e:ac:25:41:57:31:fc:e8:e1:e3:e7:61:c3:c6:
20:fc:24:b0:0e:c1:16:0d:4f:c5:1a:ef:b1:9f:92:
6f:b4:ed:e3:6a:26:20:c4:e9:cf:cd:48:bc:f4:84:
94:d2:83:8e:07:57:ba:50:a0:f5:24:b0:16:b1:66:
5b:a5:59:6b:f7:12:68:f8:f1:36:68:51:39:9e:7a:
52:f4:02:19:0a:e8:9f:2e:98:db:21:f5:40:57:3f:
13:26:f8:c5:81:4f:2e:21:11:7a:69:eb:cb:9d:b6:
50:fe:42:a1:bb:94:ac:80:78:48:3d:86:b0:d6:c6:
1c:fd:96:6c:34:b6:d4:16:e0:94:aa:aa:bf:16:e3:
71:3e:91:c4:e2:be:99:a8:90:96:8c:7d:c4:43:b6:
d3:ef:1f:75:c5:15:9a:c3:ae:71:66:78:2e:f9:76:
6c:fa:2e:04:a4:e7:4c:bc:6d:23:75:a3:ac:87:4e:
ce:b9:1c:c2:80:69:00:60:8b:23:bc:47:07:6e:12:
06:9f:1f:b4:89:6f:81:f5:61:b8:08:ef:9d:d5:17:
d1:64:37:5f:ec:7a:d5:99:e3:35:70:6d:87:fa:f9:
22:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:25:C3:E7:D6:42:AF:48:B4:2B:D6:E3:DA:C2:20:27:D9:E7:C1:65
X509v3 Authority Key Identifier:
keyid:B2:CD:03:5F:AB:18:A4:B7:82:61:44:56:3F:60:E7:89:8A:4E:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:66:97:8a:6b:6e:90:fe:fa:1a:ed:99:3b:ba:16:e6:35:af:
6a:ab:98:c3:89:de:ad:ee:8f:26:01:ca:f4:51:b6:fb:c2:ee:
fc:e5:a2:f8:b8:8b:a6:54:b7:ba:35:ef:fc:f9:a0:d0:ca:8e:
d1:3c:41:9d:06:1c:0b:46:b6:44:cc:c4:d0:1e:e5:a7:db:38:
80:92:f5:06:c9:b7:9d:1c:f7:be:84:44:01:58:4e:65:72:af:
81:91:76:45:aa:34:aa:aa:f7:38:65:30:d8:a4:a9:a1:97:ee:
0d:38:87:c4:b3:e7:63:e5:dd:0d:d7:b2:cf:2a:ca:00:5e:ae:
de:da:02:85:83:8f:bf:10:ed:17:82:fa:60:e8:c4:c2:74:40:
5d:03:10:bf:46:7c:7b:56:3d:ac:e7:aa:b9:8a:8e:92:7d:7c:
0c:56:29:ca:b9:7e:9c:e4:d8:9f:91:e5:7b:ed:9c:62:f6:bb:
c5:6c:fe:79:4a:b4:d2:75:2b:a0:26:db:b5:64:70:7b:dc:ce:
df:4c:f0:d8:0b:c5:fb:1d:d8:dc:10:20:1a:35:d8:c5:76:eb:
7f:13:52:93:fe:5f:04:11:cf:c3:c6:32:be:66:a8:2f:bc:0e:
7e:02:1b:12:ec:cd:a2:12:be:d0:68:43:f3:b3:fe:30:99:87:
42:92:77:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:36 2026 by rpki-client