Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
File: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json)
Hash identifier: 5r8jcyfB5yku8gDOSApZzU8GDaorArFPnfFwaapSZaE=
Subject key identifier: 8F:38:AE:8A:DE:FC:5D:91:46:1E:20:E6:B1:16:B4:9E:72:21:03:32
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Certificate issuer: /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial: 01A0C632F24E42A7F58407B4B9FE4F696DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
Manifest number: 11EF
Signing time: Mon 21 Sep 2026 23:00:22 +0000
Manifest this update: Mon 21 Sep 2026 23:00:22 +0000
Manifest next update: Tue 22 Sep 2026 23:00:22 +0000
Files and hashes: 1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: n1qEf7pkitn94D+UZtFosvjtSbYOMdkV1OyPHjEGJCU=)
2: KFS9AT9Dh5IYqtvylPcHNAxeD1Q.roa (hash: aPsZ9SwAfwr9bP1Lvnapo0qJgXtXh+rAUimtLCb9z5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:32:f2:4e:42:a7:f5:84:07:b4:b9:fe:4f:69:6d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Validity
Not Before: Sep 21 23:00:22 2026 GMT
Not After : Sep 22 23:00:22 2026 GMT
Subject: CN=8f38ae8adefc5d91461e20e6b116b49e72210332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:32:27:48:aa:34:ee:9c:98:99:cf:94:33:
99:39:3a:7b:52:5e:02:de:d4:36:b4:fe:2d:27:f6:
46:3e:97:e8:1a:18:81:a4:46:42:7c:be:4a:76:a8:
b3:e4:d7:28:cd:df:cd:09:88:f2:d9:24:cd:20:08:
02:93:10:0b:78:96:90:2c:bf:60:46:75:ac:4d:e5:
35:9d:89:9b:63:f9:6a:c9:73:bb:07:b3:28:87:52:
4d:9b:22:26:16:36:6d:be:16:ef:a7:6e:8b:a8:2c:
b9:85:92:88:6b:56:71:9b:de:84:fc:6d:81:d3:f3:
f3:f9:cb:98:98:80:0c:3e:aa:d2:d4:09:52:8b:16:
09:c8:29:c4:ff:23:9f:b3:0e:5a:76:99:c1:3c:00:
58:1d:10:c0:e9:15:91:c8:f3:22:a9:99:1a:3b:8f:
3d:de:35:36:de:9a:8f:4f:ed:6c:92:99:e8:39:86:
e5:95:09:d5:5b:16:8d:a0:db:18:a5:be:2f:57:b4:
34:a7:52:67:63:1d:b4:e8:f7:5d:64:12:b3:bc:c4:
2b:88:1f:3e:30:2e:05:2f:2c:b6:84:7d:67:91:b7:
b6:4e:28:9e:7f:c0:2a:74:72:a9:42:32:aa:5e:64:
09:a3:dc:75:f2:e7:58:56:85:13:d8:7a:a6:4c:b5:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:38:AE:8A:DE:FC:5D:91:46:1E:20:E6:B1:16:B4:9E:72:21:03:32
X509v3 Authority Key Identifier:
keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e1:ea:b0:5f:d6:ae:44:a2:3b:ba:3d:3c:dd:e9:97:4a:03:
1a:b2:eb:09:d6:cf:c0:b8:fb:fd:32:3e:b1:ae:aa:08:74:4f:
ad:99:ce:08:a6:3b:2d:f1:c9:93:8e:54:e4:c6:12:46:3a:02:
ae:44:35:a4:16:ab:1c:9b:8a:43:3c:02:7c:cf:8a:d1:fe:a7:
ef:fb:f8:8a:e2:48:13:b6:0c:1f:c8:04:ba:44:2d:cf:e0:70:
6a:06:a8:d6:58:0b:9e:13:c6:c8:ec:78:2d:58:60:d5:65:ba:
b5:fa:7f:20:59:53:14:f3:c4:22:ba:30:63:c3:4a:00:fe:0f:
74:01:5c:59:24:7e:3a:ed:07:bb:98:b5:cf:79:91:dc:f4:b3:
31:ac:46:e3:40:23:13:46:6c:3e:5f:98:e4:19:44:a0:e9:ba:
12:1d:63:33:6c:0b:fa:cb:c6:1e:fb:23:71:40:18:07:a8:cf:
c3:c7:ce:a9:d3:c7:06:3b:f8:33:c9:93:4a:2f:b8:c9:61:5f:
a2:6c:3c:35:8d:a0:21:1f:3c:f2:d7:cd:4c:ba:40:08:8a:ea:
5e:0f:05:43:c7:fd:e5:d9:ac:80:af:e9:10:c6:d6:bc:61:d1:
33:88:c5:e8:da:be:2c:d6:97:ba:e9:40:ed:b3:5d:a7:b9:3c:
96:a9:bc:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGMvJOQqf1hAe0uf5PaW2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MjRhODNmZmYyZjAwMGU5OWMxZjI4ZWMxOTY0ODk4NmY4
ZGRjMzcwHhcNMjYwOTIxMjMwMDIyWhcNMjYwOTIyMjMwMDIyWjAzMTEwLwYDVQQD
Eyg4ZjM4YWU4YWRlZmM1ZDkxNDYxZTIwZTZiMTE2YjQ5ZTcyMjEwMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiUyJ0iqNO6cmJnPlDOZOTp7Ul4C
3tQ2tP4tJ/ZGPpfoGhiBpEZCfL5Kdqiz5Ncozd/NCYjy2STNIAgCkxALeJaQLL9g
RnWsTeU1nYmbY/lqyXO7B7Moh1JNmyImFjZtvhbvp26LqCy5hZKIa1Zxm96E/G2B
0/Pz+cuYmIAMPqrS1AlSixYJyCnE/yOfsw5adpnBPABYHRDA6RWRyPMiqZkaO489
3jU23pqPT+1skpnoOYbllQnVWxaNoNsYpb4vV7Q0p1JnYx206PddZBKzvMQriB8+
MC4FLyy2hH1nkbe2Tiief8AqdHKpQjKqXmQJo9x18udYVoUT2HqmTLU4owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI84rore/F2RRh4g5rEWtJ5yIQMyMB8GA1UdIwQY
MBaAFNUkqD//LwAOmcHyjsGWSJhvjdw3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVNTb1BfOHZBQTZad2ZLT3daWkltRy1OM0RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kYmFmY2QtYTUxZC00NDZiLTljZDct
NDRkNDBkMWM0NmQ1LzEvMVNTb1BfOHZBQTZad2ZLT3daWkltRy1OM0RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kYmFmY2QtYTUxZC00NDZiLTljZDctNDRkNDBkMWM0NmQ1
LzEvMVNTb1BfOHZBQTZad2ZLT3daWkltRy1OM0RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuHqsF/W
rkSiO7o9PN3pl0oDGrLrCdbPwLj7/TI+sa6qCHRPrZnOCKY7LfHJk45U5MYSRjoC
rkQ1pBarHJuKQzwCfM+K0f6n7/v4iuJIE7YMH8gEukQtz+Bwagao1lgLnhPGyOx4
LVhg1WW6tfp/IFlTFPPEIrowY8NKAP4PdAFcWSR+Ou0Hu5i1z3mR3PSzMaxG40Aj
E0ZsPl+Y5BlEoOm6Eh1jM2wL+svGHvsjcUAYB6jPw8fOqdPHBjv4M8mTSi+4yWFf
omw8NY2gIR888tfNTLpACIrqXg8FQ8f95dmsgK/pEMbWvGHRM4jF6Nq+LNaXuulA
7bNdp7k8lqm8kA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:12:26 2026 by rpki-client