Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier: nMhrTiibaYEW0MsreejKYZrKd46FOVXC0s5U946LrdA=
Subject key identifier: 37:D3:52:5D:6C:4B:1E:79:0E:C7:B2:0B:38:36:E6:51:F1:A4:EA:8B
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 019F954A333985904EB8743928900C36346A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 18:01:35 +0000
Manifest this update: Fri 24 Jul 2026 18:01:35 +0000
Manifest next update: Sat 25 Jul 2026 18:01:35 +0000
Files and hashes: 1: FXM0lZ9RW8MVyeNhLRa0gA27Yz8.roa (hash: AOWqH2G8p3eNy+r9FYww+1k4v48/EVkof2UT4jbdqII=)
2: ScbfsojaaHjN1VPlqjt62kAyKyQ.roa (hash: lQ50zLidvT+ypigEP+SJVNAGB7dMGWzSVTcP7sdJtfU=)
3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: 9z4p4k/L06zxzHGr6t9G33af5LSQbSAX0Get49hDtX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:33:39:85:90:4e:b8:74:39:28:90:0c:36:34:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Jul 24 18:01:35 2026 GMT
Not After : Jul 25 18:01:35 2026 GMT
Subject: CN=37d3525d6c4b1e790ec7b20b3836e651f1a4ea8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1d:76:c7:59:ee:e0:43:44:dc:f1:8a:32:90:
ae:a9:77:bc:a1:61:a3:c9:6f:c3:da:be:77:31:77:
d0:f6:22:29:05:20:a5:9d:a5:bb:ee:24:c9:b8:9f:
30:2e:d4:a7:8c:c9:d9:33:42:82:ea:30:41:87:af:
ac:67:2f:a0:ef:b7:4c:8e:9d:3a:6a:11:b1:a4:b3:
d9:ac:c6:38:2b:1b:23:79:a1:9d:96:23:d3:e9:4a:
0a:7c:31:38:df:af:43:39:b4:d3:7f:7e:ce:d1:72:
65:ac:b0:db:d3:47:2f:16:b9:56:cf:35:c7:44:d8:
f0:28:f5:bd:9d:50:c1:c0:a3:f0:07:1f:3a:69:8a:
3e:b2:ea:44:b5:1f:fa:34:32:8e:66:28:61:f8:89:
85:6a:fd:5b:c0:32:76:28:12:eb:91:73:3e:50:42:
ba:4f:db:3d:7e:a1:98:ef:15:c7:56:29:6f:07:1a:
d0:0b:ca:a5:f6:ad:a0:78:f7:a4:43:9b:7c:31:7e:
d2:c1:13:1a:22:71:f4:a9:15:03:f5:25:b5:d7:96:
26:4c:36:85:5c:74:48:80:55:4f:66:a9:05:a2:dc:
0b:1e:25:64:71:f7:a4:a0:71:d2:47:89:d4:85:e7:
f0:df:d1:89:ba:eb:c1:a0:4c:dc:03:bc:39:80:6b:
e5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D3:52:5D:6C:4B:1E:79:0E:C7:B2:0B:38:36:E6:51:F1:A4:EA:8B
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4f:a7:2d:a1:c1:86:d2:de:fe:74:a4:e1:62:25:4f:6a:11:
b4:e3:2d:7d:43:52:9b:9f:60:6a:56:59:f7:35:3c:f7:e2:5c:
c1:f2:02:7a:d4:a3:66:a8:38:99:8f:4a:40:ce:88:16:4c:9b:
20:01:64:40:fd:db:8a:cc:6b:e8:2c:69:9d:f7:70:ca:ef:56:
49:2c:86:25:b7:fc:2e:5e:8d:f8:71:93:3e:a4:08:02:65:30:
a5:79:79:eb:79:5d:19:31:c9:04:12:7a:b3:0c:17:15:4b:81:
5b:48:a6:bc:57:eb:92:f2:b1:ec:39:3a:1c:2a:33:1e:01:61:
63:96:d9:8c:75:04:dd:a1:d4:1c:7e:65:bc:43:df:21:e9:93:
4b:1f:ce:ae:53:94:08:2d:7c:1a:d0:3d:ac:df:b8:f0:95:b2:
da:a7:42:05:bf:98:c5:e3:9e:b9:61:33:f0:d4:3b:70:cd:73:
6d:6e:d9:1c:a1:e3:7b:38:3d:06:cb:a8:35:3f:ae:3d:40:60:
91:ee:77:7e:de:e0:b9:40:7a:08:ea:18:28:94:ca:40:58:b0:
92:e4:d4:0c:75:53:65:70:83:45:13:0c:99:6d:c3:df:a7:f8:
70:1b:4d:39:24:8c:c9:db:f5:22:fe:76:59:28:74:3e:ad:12:
ac:88:a7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:32:12 2026 by rpki-client