Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier: OmqwLrl7C9dgmAr3VdqHi+fmAYSv6cVKSncbCUTXBps=
Subject key identifier: E9:A7:E1:CC:E6:9A:57:40:39:2E:AD:21:8F:EC:41:D1:54:00:BC:C7
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 019F9323B1BFCA6ADFDE9B25C729CD92B474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number: 1337
Signing time: Fri 24 Jul 2026 08:00:17 +0000
Manifest this update: Fri 24 Jul 2026 08:00:17 +0000
Manifest next update: Sat 25 Jul 2026 08:00:17 +0000
Files and hashes: 1: 3JNSQLDSVjMCAeXDdRfs56ArU_A.roa (hash: rZTM/BDsvJUHVVJdlV2ux5RuYfvV5Fs0/F1F4geykB8=)
2: VTknZ-I_GU8r0qWqKMpUO2ZewjE.roa (hash: 3hD9W96lP9a4vkoDA7OXWeZO5moSVt18MKLKHlgk0dU=)
3: sFtpmEwf8BZ7WD7WnZcVk65ZP4c.roa (hash: m7H1o/4M+RauJJ9zEivTYaIxQJNTjYvvSZKIkxe1inE=)
4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: sUYh/Jkswr3BRafcvJ+Eyl1PPEdAnYefgxzWujcthlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:b1:bf:ca:6a:df:de:9b:25:c7:29:cd:92:b4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jul 24 08:00:17 2026 GMT
Not After : Jul 25 08:00:17 2026 GMT
Subject: CN=e9a7e1cce69a5740392ead218fec41d15400bcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:90:67:70:7d:21:3b:1b:62:af:20:1c:94:37:
04:50:81:bf:06:bd:e3:3a:ec:20:1b:a1:47:ee:78:
ff:d6:ff:04:e2:b7:d4:46:48:d9:44:2b:c0:0b:a6:
dd:f4:b3:6c:ec:37:f0:e0:29:ce:8f:a5:19:30:43:
15:f4:09:7c:6b:36:f1:50:1c:5d:83:69:2b:11:e0:
9e:bf:50:ad:a4:b7:5e:a7:c8:a7:13:ed:f5:96:d8:
e8:95:04:6d:8b:76:d1:50:72:8f:13:55:f9:e5:29:
1f:50:e1:8f:80:eb:b9:1d:8e:c9:06:5d:4e:41:d9:
cc:12:f0:8a:ae:63:62:2f:c4:07:fc:71:72:51:66:
26:e6:d7:37:55:0b:dd:4a:e2:ab:95:70:6b:cc:f9:
de:ab:db:1c:91:21:da:a6:0f:17:a5:49:01:3b:b3:
3e:e1:b8:43:cb:1f:ab:07:79:88:e2:df:39:5f:94:
d0:fc:30:26:33:78:45:77:58:87:fd:4b:ec:56:89:
ea:e6:26:98:35:c3:9e:6d:b2:ed:fb:c2:f9:2d:30:
e3:03:a0:73:5f:76:63:d4:d8:69:b7:92:18:a1:3f:
e6:6e:52:fa:ee:23:de:c7:e4:f7:88:5e:cf:8f:6a:
5f:58:83:f3:03:6c:91:96:61:91:5d:14:6a:d2:be:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A7:E1:CC:E6:9A:57:40:39:2E:AD:21:8F:EC:41:D1:54:00:BC:C7
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:46:3a:a0:9e:aa:8d:75:97:3f:e0:58:06:7f:a7:57:c8:64:
04:c3:43:0d:e1:2e:9d:82:af:b6:d0:0f:07:10:81:6a:05:f7:
da:71:6c:b1:ac:c6:6f:4f:89:72:d5:54:9f:99:63:91:42:6f:
e5:5c:15:70:5a:93:00:6f:b4:e2:95:f9:37:52:71:73:38:ba:
7a:68:2e:05:2d:49:3e:72:57:4b:97:5c:1f:9d:fa:e6:44:1b:
f3:d2:3e:e7:d7:49:53:ab:22:7e:12:8b:c7:64:38:a4:c8:86:
36:0e:3c:41:47:8b:0c:8e:4a:a3:f7:2e:c2:fa:53:40:61:30:
3d:a6:99:9f:dc:91:89:db:57:18:00:a8:ff:e9:95:8f:9b:bd:
6a:74:3a:1c:35:a6:4e:aa:73:ab:0d:db:f5:4e:8a:d6:3e:88:
26:91:fd:ae:09:17:37:d0:c3:11:64:8c:f4:95:2e:09:63:7e:
c5:b0:93:ba:d1:a3:6b:36:f6:62:7b:26:b6:d5:6e:b8:df:1d:
3c:8a:49:b3:57:35:86:e9:8f:6e:85:1e:13:82:bd:f8:9c:27:
db:e2:23:f5:6c:a0:2e:76:5f:d0:6b:1c:4f:4b:0e:75:0f:00:
67:06:79:ba:89:87:63:99:6e:a3:c6:31:a1:44:bd:ae:ff:92:
f3:6f:e4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:26:18 2026 by rpki-client