Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: FKT7vQ86aqbVf1ghdAqsfpxbPCcM1fK97ZwUekfgbuw=
Subject key identifier: 4D:A8:D1:36:C0:85:D5:DD:27:3F:35:7A:0A:86:44:3D:95:F4:C0:0B
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 019D25835E97873EC2B423C27480A32020F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:00:59 +0000
Manifest this update: Wed 25 Mar 2026 15:00:59 +0000
Manifest next update: Thu 26 Mar 2026 15:00:59 +0000
Files and hashes: 1: FXM0lZ9RW8MVyeNhLRa0gA27Yz8.roa (hash: AOWqH2G8p3eNy+r9FYww+1k4v48/EVkof2UT4jbdqII=)
2: ScbfsojaaHjN1VPlqjt62kAyKyQ.roa (hash: lQ50zLidvT+ypigEP+SJVNAGB7dMGWzSVTcP7sdJtfU=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: qhFCw8bv4CrozIISF+/hkaN+SSYoxoXo7wOC1SjUKrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:5e:97:87:3e:c2:b4:23:c2:74:80:a3:20:20:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Mar 25 15:00:59 2026 GMT
Not After : Mar 26 15:00:59 2026 GMT
Subject: CN=4da8d136c085d5dd273f357a0a86443d95f4c00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:af:d4:88:6d:6b:e8:70:60:d2:d3:d6:64:
93:6b:c5:a5:4a:a7:79:05:ad:2d:18:31:76:e6:ca:
78:74:e3:a8:36:f8:85:b1:6e:a2:f0:2b:49:92:ef:
ed:ec:f7:24:0a:cc:e3:4d:58:22:95:1e:14:f8:55:
f8:5f:6a:18:cf:e6:fb:fb:02:00:fd:af:ab:5c:1f:
dc:d9:e2:13:f9:3b:e2:44:0f:35:7d:3c:d2:cc:35:
7e:20:b9:a4:9e:2f:eb:f4:d5:fc:57:0c:2d:3b:d2:
d4:90:2b:cc:f5:5c:2c:3e:80:a9:5f:2c:df:4c:db:
13:5b:7a:84:08:06:b2:dc:6e:09:d6:4c:b7:73:ea:
0a:f2:64:26:78:f0:61:2c:b7:79:e7:36:ed:04:4b:
a4:d2:87:65:ab:7f:25:09:3b:0a:cf:87:c2:c3:2e:
3b:04:27:0f:83:60:09:b7:8b:a7:98:dd:ea:6f:67:
c6:66:4d:28:ec:b5:d7:5c:5f:dd:81:dc:22:a8:c0:
06:d4:f0:a2:f9:cd:67:87:97:83:50:e2:2d:aa:56:
02:18:84:d9:06:17:a9:2c:98:1f:47:cd:cd:12:8a:
2e:39:6c:f9:cf:4c:16:6a:e8:f9:b6:a2:26:4c:4b:
64:f4:61:52:f8:78:ef:f5:a7:b2:1d:c1:79:77:c1:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A8:D1:36:C0:85:D5:DD:27:3F:35:7A:0A:86:44:3D:95:F4:C0:0B
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:81:05:2a:fa:37:fb:9f:b7:5d:78:4d:2b:1c:8a:f9:f6:31:
88:d6:17:21:f7:98:e4:c4:86:f5:91:88:fb:9e:c3:18:72:c5:
4c:29:ba:db:ab:75:a8:66:24:5d:e1:87:bc:45:7b:61:c9:b9:
56:88:8f:b4:09:0b:df:13:83:14:c5:01:a5:e2:44:0d:91:eb:
a0:65:c5:36:68:53:0a:98:d0:d1:e0:23:ae:e3:5c:1f:31:95:
c3:57:df:42:8e:ea:47:3a:e7:f6:0e:c5:db:cc:67:f7:90:48:
e0:8f:74:20:c6:b1:81:ed:1a:ae:78:30:fb:91:0b:b7:2d:1b:
7d:5d:67:7b:b5:02:36:95:30:07:a4:03:09:bf:72:cd:6d:4f:
f8:69:b0:b3:37:df:cc:f2:e3:bd:41:dc:d3:c4:a6:76:53:f0:
20:8d:44:ae:f3:4a:53:ac:bf:ae:ab:e7:ee:9b:ab:6d:26:80:
b9:25:83:bc:ce:d5:1d:cb:8d:8f:f9:0d:ff:8e:5e:d8:d6:49:
79:82:43:5e:9a:3f:8c:1b:00:2e:53:53:f5:45:56:7c:57:54:
24:84:b9:ea:17:27:23:bc:a8:9c:75:1a:e7:33:58:35:59:f7:
75:30:39:ee:eb:ac:6e:34:a5:05:c8:f1:92:4a:6b:57:aa:52:
95:58:dd:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg16Xhz7CtCPCdICjICDzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYzJiYzBlM2U1OTMzMmY0YmUyYzU4ZmYyNWExODYxZjVm
ZGU4MTkwHhcNMjYwMzI1MTUwMDU5WhcNMjYwMzI2MTUwMDU5WjAzMTEwLwYDVQQD
Eyg0ZGE4ZDEzNmMwODVkNWRkMjczZjM1N2EwYTg2NDQzZDk1ZjRjMDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLiv1Ihta+hwYNLT1mSTa8WlSqd5
Ba0tGDF25sp4dOOoNviFsW6i8CtJku/t7PckCszjTVgilR4U+FX4X2oYz+b7+wIA
/a+rXB/c2eIT+TviRA81fTzSzDV+ILmkni/r9NX8VwwtO9LUkCvM9VwsPoCpXyzf
TNsTW3qECAay3G4J1ky3c+oK8mQmePBhLLd55zbtBEuk0odlq38lCTsKz4fCwy47
BCcPg2AJt4unmN3qb2fGZk0o7LXXXF/dgdwiqMAG1PCi+c1nh5eDUOItqlYCGITZ
BhepLJgfR83NEoouOWz5z0wWauj5tqImTEtk9GFS+Hjv9aeyHcF5d8E6RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2o0TbAhdXdJz81egqGRD2V9MALMB8GA1UdIwQY
MBaAFErCvA4+WTMvS+LFj/JaGGH1/egZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3NLOERqNVpNeTlMNHNXUDhsb1lZZlg5NkJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80OGFmZTAtNWExOC00ZDk5LTkxYjYt
ODA3M2RjZTA5NjI4LzEvU3NLOERqNVpNeTlMNHNXUDhsb1lZZlg5NkJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80OGFmZTAtNWExOC00ZDk5LTkxYjYtODA3M2RjZTA5NjI4
LzEvU3NLOERqNVpNeTlMNHNXUDhsb1lZZlg5NkJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYEFKvo3
+5+3XXhNKxyK+fYxiNYXIfeY5MSG9ZGI+57DGHLFTCm626t1qGYkXeGHvEV7Ycm5
VoiPtAkL3xODFMUBpeJEDZHroGXFNmhTCpjQ0eAjruNcHzGVw1ffQo7qRzrn9g7F
28xn95BI4I90IMaxge0arngw+5ELty0bfV1ne7UCNpUwB6QDCb9yzW1P+Gmwszff
zPLjvUHc08SmdlPwII1ErvNKU6y/rqvn7purbSaAuSWDvM7VHcuNj/kN/45e2NZJ
eYJDXpo/jBsALlNT9UVWfFdUJIS56hcnI7yonHUa5zNYNVn3dTA57uusbjSlBcjx
kkprV6pSlVjd2g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:57 2026 by rpki-client