Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
File: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json)
Hash identifier: 6aM/DqPilPBL+4CVft89GMnWGvtUaBN+u5MhsGcVLe0=
Subject key identifier: 1F:1C:64:39:32:89:A3:92:D4:02:98:81:0D:A1:92:9C:B0:4D:9C:DB
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Certificate issuer: /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial: 019CABA1D7ADFCF059E8CD237BABEA933E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
Manifest number: 0FCF
Signing time: Sun 01 Mar 2026 23:00:36 +0000
Manifest this update: Sun 01 Mar 2026 23:00:36 +0000
Manifest next update: Mon 02 Mar 2026 23:00:36 +0000
Files and hashes: 1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: QsAsIir0ML+HacCoLRcPOVDtv58KUcUBrSH6S4i+fbg=)
2: KFS9AT9Dh5IYqtvylPcHNAxeD1Q.roa (hash: aPsZ9SwAfwr9bP1Lvnapo0qJgXtXh+rAUimtLCb9z5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d7:ad:fc:f0:59:e8:cd:23:7b:ab:ea:93:3e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Validity
Not Before: Mar 1 23:00:36 2026 GMT
Not After : Mar 2 23:00:36 2026 GMT
Subject: CN=1f1c64393289a392d40298810da1929cb04d9cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:ab:1c:44:4d:d1:a8:a0:ad:24:e1:6e:ac:
c3:e0:2b:8c:c4:4c:6d:69:8e:e6:e3:23:2d:96:a4:
26:e7:49:d5:ba:fe:4a:65:39:e9:a6:ba:10:2a:f6:
99:8e:1b:7c:79:40:f8:13:eb:41:3a:0b:11:8b:78:
bc:5a:c5:5e:2a:a3:fa:3f:4c:e3:ec:ef:8c:6c:38:
1a:d8:a5:e7:c6:05:1e:8d:35:e7:b5:cc:3f:11:f7:
ca:3b:a4:b0:f1:af:8f:37:17:46:43:3a:ba:c0:ca:
b9:75:4a:31:e5:13:95:eb:0a:cb:94:8b:a2:14:11:
02:14:aa:4a:eb:30:44:97:98:d2:96:30:a1:4e:8a:
fd:c8:f7:df:87:9b:1f:59:94:8a:aa:66:20:8c:17:
e6:02:19:01:4f:60:c3:39:70:b9:b4:a9:c8:fa:5d:
bf:cb:79:d6:cd:36:1c:ed:88:84:a1:85:8d:25:5e:
8a:1e:b1:80:1b:61:41:67:ab:0a:3d:99:00:07:14:
a2:ae:32:4b:a1:b1:4a:84:58:24:be:79:d1:75:b4:
73:25:db:31:cf:71:4d:ad:63:b7:53:41:ef:07:01:
28:6d:6b:2f:ee:0c:9b:fa:8d:a7:39:69:b9:60:2f:
49:5d:26:6c:bc:1f:22:ef:3e:61:af:7f:2f:8f:98:
a8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1C:64:39:32:89:A3:92:D4:02:98:81:0D:A1:92:9C:B0:4D:9C:DB
X509v3 Authority Key Identifier:
keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:81:ca:b5:39:2e:54:bf:54:29:3b:89:71:7d:58:3d:61:de:
3f:af:35:f3:2d:20:cb:07:9f:75:33:40:45:38:44:13:d0:1f:
8c:9d:70:b3:0c:df:89:6f:69:89:7d:6d:e3:75:7a:97:db:63:
46:7a:b9:88:54:b4:c9:39:c0:11:46:cf:e2:6f:47:a2:61:36:
08:ed:46:69:3e:0e:59:7f:95:c8:60:f0:4f:11:42:fe:2b:cc:
1c:43:71:53:89:e8:c5:3b:3d:f9:61:8e:5a:73:0d:32:72:61:
69:3d:0c:75:42:bd:5f:19:69:e5:f1:ff:06:82:46:1a:e5:74:
d0:e0:2c:72:06:cb:b1:65:03:8b:55:0f:dc:be:00:b6:ff:6b:
ec:20:6f:37:7d:75:19:55:da:01:02:cf:84:f7:34:12:42:74:
0d:5a:3b:f0:b7:49:95:ed:8c:86:0d:bf:d3:87:fb:6f:ed:71:
4c:56:d2:4a:65:7c:8d:9e:43:96:9b:69:63:0e:cc:3a:df:73:
d4:99:2d:f8:1b:9f:ff:99:39:a2:1f:eb:fe:73:d9:f1:c1:d0:
db:55:b6:5b:64:d9:ce:ba:ef:73:c1:cd:18:05:44:ed:fd:4c:
05:50:56:43:17:e1:ad:10:8f:0c:f8:51:2c:a4:a0:4e:09:dd:
7b:6a:3c:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrodet/PBZ6M0je6vqkz4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MjRhODNmZmYyZjAwMGU5OWMxZjI4ZWMxOTY0ODk4NmY4
ZGRjMzcwHhcNMjYwMzAxMjMwMDM2WhcNMjYwMzAyMjMwMDM2WjAzMTEwLwYDVQQD
EygxZjFjNjQzOTMyODlhMzkyZDQwMjk4ODEwZGExOTI5Y2IwNGQ5Y2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJqrHERN0aigrSThbqzD4CuMxExt
aY7m4yMtlqQm50nVuv5KZTnpproQKvaZjht8eUD4E+tBOgsRi3i8WsVeKqP6P0zj
7O+MbDga2KXnxgUejTXntcw/EffKO6Sw8a+PNxdGQzq6wMq5dUox5ROV6wrLlIui
FBECFKpK6zBEl5jSljChTor9yPffh5sfWZSKqmYgjBfmAhkBT2DDOXC5tKnI+l2/
y3nWzTYc7YiEoYWNJV6KHrGAG2FBZ6sKPZkABxSirjJLobFKhFgkvnnRdbRzJdsx
z3FNrWO3U0HvBwEobWsv7gyb+o2nOWm5YC9JXSZsvB8i7z5hr38vj5iotwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8cZDkyiaOS1AKYgQ2hkpywTZzbMB8GA1UdIwQY
MBaAFNUkqD//LwAOmcHyjsGWSJhvjdw3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVNTb1BfOHZBQTZad2ZLT3daWkltRy1OM0RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kYmFmY2QtYTUxZC00NDZiLTljZDct
NDRkNDBkMWM0NmQ1LzEvMVNTb1BfOHZBQTZad2ZLT3daWkltRy1OM0RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kYmFmY2QtYTUxZC00NDZiLTljZDctNDRkNDBkMWM0NmQ1
LzEvMVNTb1BfOHZBQTZad2ZLT3daWkltRy1OM0RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIHKtTku
VL9UKTuJcX1YPWHeP6818y0gywefdTNARThEE9AfjJ1wswzfiW9piX1t43V6l9tj
Rnq5iFS0yTnAEUbP4m9HomE2CO1GaT4OWX+VyGDwTxFC/ivMHENxU4noxTs9+WGO
WnMNMnJhaT0MdUK9Xxlp5fH/BoJGGuV00OAscgbLsWUDi1UP3L4Atv9r7CBvN311
GVXaAQLPhPc0EkJ0DVo78LdJle2Mhg2/04f7b+1xTFbSSmV8jZ5DlptpYw7MOt9z
1Jkt+Buf/5k5oh/r/nPZ8cHQ21W2W2TZzrrvc8HNGAVE7f1MBVBWQxfhrRCPDPhR
LKSgTgnde2o8Hg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:24 2026 by rpki-client