Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: F5vrCW8v5uU/LZ/rKxB/xV0kd+G89mgnmxMZIswOG0M=
Subject key identifier: B7:9C:40:9B:6B:A1:C3:A4:E0:16:A8:36:76:FF:42:DA:68:9D:48:B1
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 019ED3F408DB8ED92EDD1EBF54AD5D4E1867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 0D35
Signing time: Wed 17 Jun 2026 05:00:45 +0000
Manifest this update: Wed 17 Jun 2026 05:00:45 +0000
Manifest next update: Thu 18 Jun 2026 05:00:45 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: Mk9KOEL/ZNkgzIUO8WpOKV4SUxt2C0z6oUqWBOvgZ9w=)
2: qYLGAcvtEuF5PRAuWurjHsIKzqA.roa (hash: 5iM7z0Ocb30XgRdkW4wQqrCmbwJLHsRTyj2e6RtK/do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:f4:08:db:8e:d9:2e:dd:1e:bf:54:ad:5d:4e:18:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Jun 17 05:00:45 2026 GMT
Not After : Jun 18 05:00:45 2026 GMT
Subject: CN=b79c409b6ba1c3a4e016a83676ff42da689d48b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ec:71:12:e8:78:e7:51:3b:a2:de:e7:39:04:
06:ef:16:6e:2a:5d:6d:90:25:29:51:ae:6b:f4:bb:
65:53:e8:ac:57:27:c9:0c:d3:10:8a:f7:9a:d8:52:
59:37:46:11:7a:5c:f3:a4:fc:06:51:bb:f6:7e:d0:
88:2a:1b:1a:43:53:20:78:fd:89:6a:29:85:26:d4:
23:dd:6b:b2:96:1b:3e:01:ec:a2:8f:3f:43:01:00:
e5:f7:f0:37:bf:d2:91:07:3f:eb:ba:64:8d:b6:91:
e0:59:0e:c7:9d:75:9d:72:de:ce:ef:d7:03:3f:90:
2d:81:cd:a8:f4:28:c7:c4:61:a7:07:97:36:01:89:
cf:45:e3:27:ca:52:9b:79:d4:ee:e5:6a:1f:8d:d7:
89:0a:a5:6a:d3:22:9f:fa:2a:5d:95:a7:6f:52:32:
e4:50:8a:af:cb:05:12:a8:fb:db:28:97:0a:3e:16:
8a:0a:5c:0a:04:e0:82:99:23:4c:71:2f:8c:7e:7d:
87:58:f4:41:ac:12:5f:23:d4:44:e1:0a:9a:5c:f0:
75:a2:08:ad:4d:72:34:38:57:8b:ce:bc:d7:ac:fe:
7a:51:86:36:09:46:dc:6d:02:5c:ed:85:3a:ac:57:
10:f2:31:77:bc:a7:c8:fc:d0:17:34:83:f5:3b:bc:
d4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9C:40:9B:6B:A1:C3:A4:E0:16:A8:36:76:FF:42:DA:68:9D:48:B1
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f7:62:2f:88:8d:f2:4c:49:95:1d:bb:ca:62:ee:95:d9:e1:
ce:8f:5e:24:b0:6e:d8:2b:c1:29:8e:03:fb:df:12:82:fc:c6:
01:29:a7:98:74:7c:a8:cb:9c:df:7c:8b:14:b3:f8:03:7f:2e:
5c:8e:7d:68:a6:f0:0c:38:58:ee:3c:37:34:02:e5:60:37:6b:
0e:c5:21:cb:0a:7e:36:d2:a5:54:36:59:29:85:f4:ed:63:8f:
a3:13:16:d9:99:7d:8c:c7:37:7f:8a:58:2d:38:2b:c8:bf:8b:
64:fd:30:76:46:b8:c9:db:a5:b1:70:3b:77:23:0f:16:36:de:
49:0d:4a:4b:64:86:09:1a:d4:3a:b8:54:92:3b:5f:f8:30:59:
3e:d8:7f:31:bb:01:78:6c:56:21:81:59:34:36:09:11:4f:e1:
33:89:3a:e3:fa:a7:a3:8e:40:f8:67:d5:ad:b6:93:04:d3:7b:
bf:1e:7e:2c:ff:89:a0:f6:d3:56:31:79:e9:ac:c5:99:21:2c:
e7:50:1f:40:97:34:10:4d:e4:87:5d:f3:f6:b9:9d:2f:20:95:
d7:ea:a0:0f:59:d9:da:fb:e6:2d:af:73:30:af:89:9d:a6:8e:
82:ff:f9:e2:8e:ac:ad:af:8c:2b:00:41:c8:6b:5e:9b:50:d3:
cc:16:1b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:48:47 2026 by rpki-client