Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: XbR4d7wh4yypkCLmgatJA+4dc2LvJqDY85vjj3/thsk=
Subject key identifier: 08:B7:32:67:5A:D5:27:3E:46:F4:43:D0:10:DB:EC:82:78:A3:34:4A
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 01A0DBA9BBC7E6F7FA3F3A1FC8219FCBF374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 03:02:08 +0000
Manifest this update: Sat 26 Sep 2026 03:02:08 +0000
Manifest next update: Sun 27 Sep 2026 03:02:08 +0000
Files and hashes: 1: FXM0lZ9RW8MVyeNhLRa0gA27Yz8.roa (hash: AOWqH2G8p3eNy+r9FYww+1k4v48/EVkof2UT4jbdqII=)
2: ScbfsojaaHjN1VPlqjt62kAyKyQ.roa (hash: lQ50zLidvT+ypigEP+SJVNAGB7dMGWzSVTcP7sdJtfU=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: D4QNeKx1y/XcLlVUGW7IWZabL4+7pdcFRCzmKfHLFVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:bb:c7:e6:f7:fa:3f:3a:1f:c8:21:9f:cb:f3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Sep 26 03:02:08 2026 GMT
Not After : Sep 27 03:02:08 2026 GMT
Subject: CN=08b732675ad5273e46f443d010dbec8278a3344a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:99:a3:fb:0f:72:2a:6d:48:fa:7d:d7:b8:
b1:c3:7b:69:f7:fa:10:e1:40:15:8f:83:9d:a1:14:
f3:2d:c3:31:89:c0:5b:b1:7b:b8:fa:1b:21:fb:43:
1b:2e:eb:72:fd:83:d3:e8:d1:b2:1f:31:bb:2b:03:
8a:66:5f:c7:26:a4:38:8e:69:26:64:6c:2f:b6:82:
e6:4b:9c:0e:f0:4a:58:bc:b9:1c:f7:1c:e1:a2:22:
83:64:c8:e6:f9:e2:22:50:15:bb:f5:02:76:f6:53:
ee:eb:ed:59:1b:46:1a:b0:94:f5:08:98:e3:b7:6b:
d4:ff:49:d1:21:99:1d:37:ef:ea:76:06:c9:c6:37:
04:c2:c5:a7:31:bc:82:93:6a:9d:da:1c:6f:9b:52:
36:a5:b9:3f:4c:ba:14:72:c6:c6:ba:bf:16:9f:e4:
fb:fa:33:a3:29:c0:74:49:a6:6e:27:bf:ad:1b:5f:
1e:1d:b2:f0:28:db:04:8d:3a:0b:d2:97:f7:f5:9d:
b1:87:12:35:db:01:57:31:95:1c:f7:8e:18:9a:7b:
b7:1d:6d:77:9c:22:3f:a6:01:80:59:5d:9a:68:5b:
e3:b8:bd:ff:d0:1d:30:db:57:c0:d1:67:44:24:6f:
92:30:79:d3:32:e2:21:a2:1e:49:5b:6c:ed:7b:75:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B7:32:67:5A:D5:27:3E:46:F4:43:D0:10:DB:EC:82:78:A3:34:4A
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:00:32:37:b8:81:b7:59:45:f5:85:81:0b:5c:56:58:4b:a6:
93:5f:c6:a3:e3:55:2a:45:1d:22:df:8c:d0:09:85:74:78:0b:
01:8b:a9:57:62:65:b7:af:fe:45:a4:73:bb:ca:28:81:a9:54:
94:e8:b8:6c:78:53:cf:f1:74:e0:97:c9:70:1e:4c:04:e4:86:
bd:ab:5c:c7:b3:f6:67:0b:7d:5b:40:b4:64:15:6a:b2:06:90:
1f:95:65:46:82:00:0a:f3:8d:37:2f:e7:88:8f:2f:c6:5e:25:
63:f5:39:d9:71:4c:4e:3e:71:cd:a5:74:12:e8:6e:16:40:64:
87:38:f1:bc:9b:a1:63:e3:a8:c3:74:83:49:de:53:65:d1:12:
35:0f:c0:85:f8:9b:d1:79:dd:5c:e2:54:df:c6:ba:89:b9:03:
aa:51:74:e1:02:dc:9e:0d:e0:ee:0d:31:16:33:ef:5a:34:1a:
b7:59:f7:22:c3:91:0c:e9:3e:94:7a:5b:6f:3f:05:1c:11:d7:
e7:48:f6:85:5c:80:59:59:dc:c7:32:a4:fb:86:e8:7c:b3:38:
eb:b4:4f:12:1c:a3:e2:d0:ee:92:e1:8f:05:c3:e8:bb:8e:93:
d5:08:a0:d7:4e:cb:f2:f7:a7:55:59:46:49:e8:be:25:1e:b1:
c5:1a:26:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:08:08 2026 by rpki-client