Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: yG4GJuIGs5DrivO0djQ96PvQ3JET/CrDAAM6X7H/7O8=
Subject key identifier: 20:6F:CD:59:70:3C:46:C3:AD:01:98:07:60:9C:EA:13:06:70:FF:A4
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 019D992BA23BA5727C25E60431BF97EAB68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 0C92
Signing time: Fri 17 Apr 2026 02:01:06 +0000
Manifest this update: Fri 17 Apr 2026 02:01:06 +0000
Manifest next update: Sat 18 Apr 2026 02:01:06 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: ayU6YTYj8mvifR4kfK0YwE/ck93ouTNBCEf/5qDYVQA=)
2: qYLGAcvtEuF5PRAuWurjHsIKzqA.roa (hash: 5iM7z0Ocb30XgRdkW4wQqrCmbwJLHsRTyj2e6RtK/do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:a2:3b:a5:72:7c:25:e6:04:31:bf:97:ea:b6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Apr 17 02:01:06 2026 GMT
Not After : Apr 18 02:01:06 2026 GMT
Subject: CN=206fcd59703c46c3ad019807609cea130670ffa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:10:d8:2d:15:a1:79:3e:2b:e5:82:3e:3c:
c4:7c:60:9d:3d:05:40:1d:4b:91:ec:23:48:76:fc:
7a:59:98:c8:20:2e:ff:3d:6a:62:70:67:15:85:ed:
13:16:32:a5:1f:62:4c:7a:8d:52:01:8f:98:63:2a:
58:da:53:ae:ac:60:fb:ef:37:16:eb:c8:a6:0f:57:
00:d0:a6:7b:1a:24:ce:41:29:b3:89:3b:b3:f4:23:
06:b8:1b:f6:94:07:23:3b:0d:cd:12:3a:96:43:56:
78:c0:14:68:64:64:b7:56:17:17:44:f6:1a:02:c3:
aa:a5:2d:65:b0:5e:15:d7:bb:2d:5b:7d:9e:d6:41:
00:07:9b:81:d9:c3:29:a9:2f:a1:fd:fa:14:fb:3a:
4e:ee:8f:b0:2d:5f:13:b9:90:0c:dd:6b:ef:79:75:
71:d4:78:b6:b6:d9:67:d9:03:c0:87:d2:43:ba:b9:
fb:17:df:b4:49:a9:32:ae:f4:d6:fb:95:1c:41:ed:
29:50:07:cd:33:cb:c3:a9:9e:a8:c5:fe:f2:2e:83:
bd:0b:d0:67:4e:61:d2:dd:f9:80:77:6b:08:a2:b6:
7e:a5:b5:b9:1c:b6:5b:d5:52:7f:f3:97:0b:97:22:
99:4b:6a:35:88:c9:6f:da:4e:9c:49:c8:60:36:7b:
71:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6F:CD:59:70:3C:46:C3:AD:01:98:07:60:9C:EA:13:06:70:FF:A4
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:49:92:07:3a:9d:3e:2e:88:68:59:6e:d9:33:3e:77:b4:74:
c2:db:a3:d7:1c:fd:a7:b5:e6:01:be:d8:2c:fd:45:de:dc:93:
54:1b:ab:4c:20:53:2f:03:9d:73:8e:87:d4:14:06:28:38:c9:
ed:da:7f:a4:24:13:54:0c:9c:e3:e5:2b:4e:9e:aa:36:f9:59:
5b:df:b4:7a:09:55:4d:31:63:51:30:1d:14:f0:cf:7a:38:60:
4a:c0:c4:50:1d:bd:62:50:df:85:1b:08:60:c5:88:0c:ae:b0:
93:3e:09:a0:78:1c:b7:ff:91:33:69:ff:e6:ca:53:32:c9:ea:
79:fb:44:43:6c:89:eb:ec:7c:75:9b:e2:08:f9:72:33:c9:47:
03:4d:27:1a:9e:c3:06:1d:47:c6:63:20:33:11:2b:6b:3d:a0:
01:6e:89:87:ea:22:e7:5e:04:01:99:32:00:93:fd:fb:17:e7:
df:1e:01:3a:09:a9:05:bc:86:7c:c3:ce:4a:5c:bc:72:44:f7:
0d:da:01:13:4f:cf:3c:e1:42:4f:b8:22:07:80:1e:c8:50:39:
5c:b6:af:d0:77:3d:96:10:0d:71:94:58:ad:d7:69:f4:ad:45:
48:c5:e4:8d:06:e5:16:a0:27:79:f6:76:4f:08:74:0d:8d:37:
33:e5:1c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:49 2026 by rpki-client