Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: Jdtm9lM6EKV4XhoaKbeFfoslDN9WVuGMGf0wS9MxPDU=
Subject key identifier: BB:20:7C:73:6F:70:6A:16:A1:FB:D5:D5:D0:53:EC:A8:74:DB:1C:B1
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 019CA9B3CFCA2A78F9BD7F79FF6AF80421D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 0C16
Signing time: Sun 01 Mar 2026 14:00:59 +0000
Manifest this update: Sun 01 Mar 2026 14:00:59 +0000
Manifest next update: Mon 02 Mar 2026 14:00:59 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: TDUxsTdSSoC29wpWzEYu9elJa4TLohpUirpnFhWL90w=)
2: qYLGAcvtEuF5PRAuWurjHsIKzqA.roa (hash: 5iM7z0Ocb30XgRdkW4wQqrCmbwJLHsRTyj2e6RtK/do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:cf:ca:2a:78:f9:bd:7f:79:ff:6a:f8:04:21:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Mar 1 14:00:59 2026 GMT
Not After : Mar 2 14:00:59 2026 GMT
Subject: CN=bb207c736f706a16a1fbd5d5d053eca874db1cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:66:18:63:de:c5:56:d5:4d:3f:81:66:7d:1c:
6e:c1:a8:52:57:96:48:85:84:cf:57:e8:9d:48:14:
66:80:64:d8:ad:5f:12:0e:b3:b9:d7:af:ea:3c:b7:
86:5b:8a:10:5e:c4:b5:f3:ee:b5:2a:97:92:17:54:
e2:5e:3e:1b:85:e1:c1:7a:80:03:66:fc:35:7e:e7:
dc:78:ff:bb:92:af:dd:a7:8f:b7:ba:d2:f0:4e:98:
09:fd:a2:f0:df:b3:83:38:7b:d9:01:cf:b0:c1:0e:
3d:de:49:c2:13:c6:d0:45:da:27:38:0f:d6:46:a5:
d6:59:4c:a8:07:88:74:66:9f:61:af:f5:d1:a6:e9:
ed:65:9d:53:e8:8d:99:2d:4f:4b:61:59:8d:eb:01:
c2:a9:14:b9:8d:66:d9:2e:06:28:77:b5:e4:54:e7:
f7:2b:a3:33:22:6a:cf:52:76:70:79:66:dc:da:20:
7b:02:46:83:6d:66:99:45:63:49:06:50:a1:07:5e:
05:3d:a5:83:04:32:2f:7e:42:24:b5:7b:83:6c:85:
fe:f8:c2:f7:4f:22:b8:f9:5c:0b:b0:c1:cc:5d:38:
25:4d:ad:89:a2:e0:5d:03:c5:77:dd:cd:3c:61:96:
0e:4f:3e:59:c4:da:cb:c9:13:29:b0:8f:d7:79:98:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:20:7C:73:6F:70:6A:16:A1:FB:D5:D5:D0:53:EC:A8:74:DB:1C:B1
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:89:8a:fe:8c:a2:a9:56:96:16:e4:c6:28:fd:20:40:f4:e3:
10:bc:1b:3e:09:64:2c:cc:ed:ed:de:3b:1c:fd:c4:5b:60:05:
5a:c5:cb:2e:2d:b3:bb:0c:c6:04:f5:e3:ba:3e:45:65:d3:30:
9c:7b:9b:c1:dd:04:84:9d:0a:82:b7:ae:cd:17:53:11:60:2d:
3f:22:2c:c5:dd:5a:a8:26:04:d5:04:08:4f:12:7a:95:3b:8e:
38:6e:d9:81:23:da:8f:2e:65:17:a7:c9:13:d5:40:78:ad:d3:
86:be:3f:94:c4:74:8b:9d:f7:e7:06:f7:c3:28:e7:18:34:29:
a4:42:63:41:98:55:ab:32:48:53:48:58:f0:42:29:b2:ef:83:
7c:ef:f4:29:ef:10:b1:36:b4:f5:c2:f8:5f:09:9e:75:36:9f:
bf:c3:3e:42:67:fa:47:9e:62:ce:d4:4a:33:bb:81:2e:9b:37:
2d:23:fa:b7:f1:aa:e0:f9:73:aa:9b:46:6b:44:55:8d:f7:d0:
a2:11:06:d9:ec:a6:41:18:eb:5e:88:8e:07:d2:76:7b:af:f1:
11:71:ad:5d:65:f9:6b:9f:9a:74:a5:3f:f0:9e:3b:83:b6:3a:
06:47:53:08:b8:e7:7d:18:55:be:53:e1:ab:40:9a:3d:46:c8:
a4:c0:4a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:42 2026 by rpki-client