Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier: J/yshP6nHBqnX649gOK58yafCKmoPEGRFWTjBNk8c3M=
Subject key identifier: 9E:CA:3C:67:1F:6B:E5:2E:40:FA:22:1B:BE:77:70:C7:26:B4:5B:88
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 019D2B16F557EE7156231F65E3AB83BE952C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number: 11F8
Signing time: Thu 26 Mar 2026 17:00:18 +0000
Manifest this update: Thu 26 Mar 2026 17:00:18 +0000
Manifest next update: Fri 27 Mar 2026 17:00:18 +0000
Files and hashes: 1: 3JNSQLDSVjMCAeXDdRfs56ArU_A.roa (hash: rZTM/BDsvJUHVVJdlV2ux5RuYfvV5Fs0/F1F4geykB8=)
2: VTknZ-I_GU8r0qWqKMpUO2ZewjE.roa (hash: 3hD9W96lP9a4vkoDA7OXWeZO5moSVt18MKLKHlgk0dU=)
3: sFtpmEwf8BZ7WD7WnZcVk65ZP4c.roa (hash: m7H1o/4M+RauJJ9zEivTYaIxQJNTjYvvSZKIkxe1inE=)
4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: /QIM3TzzQLOsOQgMg8XoVGCHkLCCL+hE2iwDU+2GJ5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:16:f5:57:ee:71:56:23:1f:65:e3:ab:83:be:95:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Mar 26 17:00:18 2026 GMT
Not After : Mar 27 17:00:18 2026 GMT
Subject: CN=9eca3c671f6be52e40fa221bbe7770c726b45b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2a:dc:77:5d:cb:0e:e3:9f:7a:60:d0:b4:55:
6b:c0:60:06:a7:1f:8b:54:7f:9d:13:0c:1e:6a:30:
5f:9f:d3:31:7b:a7:82:2f:0e:80:0f:12:2e:3c:d0:
cb:e6:8d:be:8b:d6:bf:6a:eb:8f:35:3d:22:ec:a9:
60:a1:da:8e:f9:38:73:67:be:b0:d2:06:48:c6:56:
57:e1:8c:c1:6d:1a:1d:ff:ec:b6:70:33:de:61:81:
73:0a:d2:ab:aa:1c:95:3c:f4:7d:33:71:ee:86:09:
47:0a:dc:80:71:40:cc:74:2e:62:08:49:17:41:5c:
00:45:34:d1:9c:26:ba:d4:f3:b0:6c:c7:72:43:23:
66:64:00:a9:db:5d:4c:52:9f:21:11:d6:15:56:31:
c8:bb:18:64:8a:e5:ae:ae:ab:88:28:c6:fd:15:52:
14:0a:e4:e6:d5:62:c8:37:1e:ff:d0:a2:82:4b:44:
90:96:62:67:ff:b4:ae:59:fa:41:bf:9e:95:ad:7a:
43:43:91:d1:4c:39:35:20:a0:90:a3:b8:af:1d:6c:
44:31:a7:8f:06:b7:1c:55:82:81:e9:8b:14:ad:ec:
42:cf:ed:b6:e0:a8:60:4a:34:3f:4f:9c:af:73:4c:
f6:d2:51:b7:ec:2a:c7:98:c6:6d:88:f0:dd:a6:94:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CA:3C:67:1F:6B:E5:2E:40:FA:22:1B:BE:77:70:C7:26:B4:5B:88
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:62:49:65:16:69:61:ad:7f:4f:e9:02:23:25:48:78:02:a2:
c8:26:3b:97:2c:13:1c:a9:e8:60:37:d6:c5:84:f4:3f:3a:23:
91:84:2b:2f:0e:a0:9a:d4:f0:a7:a1:ef:74:82:b2:1e:7d:40:
eb:09:f7:70:74:ca:eb:25:a4:02:22:ab:84:fa:6a:22:63:d4:
2b:6d:6f:16:8b:17:2f:36:99:e2:20:31:c3:86:7d:ee:a9:c2:
2f:1f:34:71:a2:15:d3:da:b3:bb:41:3a:7a:f0:dc:3a:d9:ce:
c4:32:f3:0e:6d:3e:f6:56:91:e2:2f:fc:21:ae:0f:82:16:06:
57:43:0d:49:e3:f4:6f:52:35:7c:1b:ca:10:ea:ff:0f:34:85:
ba:9a:7d:0f:b0:5a:4b:92:69:4f:a5:21:9f:14:04:e0:02:6b:
47:51:cf:2b:e1:c1:63:a5:a1:ab:60:47:c9:b0:c0:6d:aa:82:
ab:ce:6a:09:4e:e4:e7:9a:22:4e:6f:fa:aa:fc:cc:60:c4:b4:
00:c2:56:3c:17:f7:32:ba:d9:8e:42:76:5c:2d:7b:1d:7d:25:
d1:46:4a:b2:ec:f7:9e:bb:13:c1:87:8f:8d:0f:8b:c8:d0:76:
5b:86:54:a9:19:5c:63:31:bd:c1:1e:a0:88:c2:7e:9e:df:92:
13:8d:04:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rFvVX7nFWIx9l46uDvpUsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYzBiZGFmYWRlYTc4ZGNlMzEyZjg2MmRkZjQyYjFiZDRj
NGY2NDUwHhcNMjYwMzI2MTcwMDE4WhcNMjYwMzI3MTcwMDE4WjAzMTEwLwYDVQQD
Eyg5ZWNhM2M2NzFmNmJlNTJlNDBmYTIyMWJiZTc3NzBjNzI2YjQ1Yjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCrcd13LDuOfemDQtFVrwGAGpx+L
VH+dEwweajBfn9Mxe6eCLw6ADxIuPNDL5o2+i9a/auuPNT0i7KlgodqO+ThzZ76w
0gZIxlZX4YzBbRod/+y2cDPeYYFzCtKrqhyVPPR9M3HuhglHCtyAcUDMdC5iCEkX
QVwARTTRnCa61POwbMdyQyNmZACp211MUp8hEdYVVjHIuxhkiuWurquIKMb9FVIU
CuTm1WLINx7/0KKCS0SQlmJn/7SuWfpBv56VrXpDQ5HRTDk1IKCQo7ivHWxEMaeP
BrccVYKB6YsUrexCz+224KhgSjQ/T5yvc0z20lG37CrHmMZtiPDdppR5twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7KPGcfa+UuQPoiG753cMcmtFuIMB8GA1UdIwQY
MBaAFLLAva+t6njc4xL4Yt30KxvUxPZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMt
ZmNjMzM2ZWVkOGQ3LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMtZmNjMzM2ZWVkOGQ3
LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGJJZRZp
Ya1/T+kCIyVIeAKiyCY7lywTHKnoYDfWxYT0PzojkYQrLw6gmtTwp6HvdIKyHn1A
6wn3cHTK6yWkAiKrhPpqImPUK21vFosXLzaZ4iAxw4Z97qnCLx80caIV09qzu0E6
evDcOtnOxDLzDm0+9laR4i/8Ia4PghYGV0MNSeP0b1I1fBvKEOr/DzSFupp9D7Ba
S5JpT6UhnxQE4AJrR1HPK+HBY6Whq2BHybDAbaqCq85qCU7k55oiTm/6qvzMYMS0
AMJWPBf3MrrZjkJ2XC17HX0l0UZKsuz3nrsTwYePjQ+LyNB2W4ZUqRlcYzG9wR6g
iMJ+nt+SE40E7g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:11:58 2026 by rpki-client