Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
File: SS0kreN6IjOTKECddX1H-XlDt6A.mft (raw, json)
Hash identifier: ourLsghpAsS52J4iw0mpaIqVp6IHhaH7RMSoYXdu1IY=
Subject key identifier: 3E:07:3B:F1:08:00:23:E2:88:22:79:6B:B7:D6:3A:25:90:C3:2E:D6
Authority key identifier: 49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
Certificate issuer: /CN=492d24ade37a22339328409d757d47f97943b7a0
Certificate serial: 019D29609081411E6F60709E13D1F93B788D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
Manifest number: 0F83
Signing time: Thu 26 Mar 2026 09:01:27 +0000
Manifest this update: Thu 26 Mar 2026 09:01:27 +0000
Manifest next update: Fri 27 Mar 2026 09:01:27 +0000
Files and hashes: 1: NFYt2GuSWXtuOwlW6Nq8CMWtovs.roa (hash: puZ/+ztmFMeMmQqgSFGKCmQg2VYFRDLAAcv+aC1rqdo=)
2: SS0kreN6IjOTKECddX1H-XlDt6A.crl (hash: GdvAWxIRlXjupJR0O8E3Uuo6f+hd/fFHUEpPDfU2juc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:90:81:41:1e:6f:60:70:9e:13:d1:f9:3b:78:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492d24ade37a22339328409d757d47f97943b7a0
Validity
Not Before: Mar 26 09:01:27 2026 GMT
Not After : Mar 27 09:01:27 2026 GMT
Subject: CN=3e073bf1080023e28822796bb7d63a2590c32ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:75:17:95:9c:1e:18:bb:53:71:8e:9d:2a:
28:c4:16:ea:c4:64:69:1e:40:cd:a4:eb:1e:64:16:
e6:d5:92:eb:f6:2c:43:35:83:1a:b2:b3:a1:50:09:
ea:d1:e7:a0:5a:d4:b9:35:73:4c:93:35:96:82:90:
99:42:bc:d9:b5:64:fa:4f:2f:8b:fb:bd:9e:8f:46:
d3:56:24:52:d3:eb:fb:b5:b0:fa:f9:b0:96:c3:d3:
d3:55:b0:f3:c1:e0:73:f9:42:d1:ac:2f:ff:6e:3f:
1d:80:89:32:fd:f9:3c:52:b4:4c:50:9c:a5:c6:76:
c1:42:6f:0f:14:5c:3d:42:39:85:03:a5:17:a9:87:
c7:d9:f7:5f:ec:30:ec:54:ba:31:3b:e3:5c:ad:77:
36:e7:64:41:9b:7c:47:7a:b1:b8:68:2c:63:90:7a:
04:4d:ea:1a:1a:44:2f:28:f0:08:bf:15:71:6e:41:
55:65:6e:b3:8a:9b:71:17:77:ad:e3:2e:94:4f:36:
c9:cd:85:fb:f7:33:9c:10:7d:57:38:9b:44:16:1f:
1f:a8:3d:fe:21:ce:15:a8:8d:ff:d3:0a:a5:6a:7d:
7b:0a:a6:84:c1:b0:2c:d7:fe:dc:c9:ea:99:16:d9:
06:e2:00:c4:bd:6f:4f:e4:6a:e9:51:6a:1c:bc:8b:
41:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:07:3B:F1:08:00:23:E2:88:22:79:6B:B7:D6:3A:25:90:C3:2E:D6
X509v3 Authority Key Identifier:
keyid:49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:3b:dd:8d:e2:a1:2c:3a:e0:75:33:8a:73:2f:f0:f2:94:a6:
19:bc:d1:42:4e:e1:c9:22:ff:8f:e0:0c:f4:83:13:3c:a6:fd:
01:9f:99:3b:00:1c:a5:1d:14:c7:95:53:d7:63:78:58:05:fb:
47:10:0e:36:ae:7b:5a:09:f0:12:9a:55:fe:04:98:e1:5e:2c:
68:ed:11:4f:fb:93:3b:d3:20:43:d6:51:f3:32:89:30:c0:c2:
98:e9:fd:fe:0b:7b:4f:56:f6:4e:22:26:ac:26:d5:72:ae:57:
a9:0e:de:bc:32:54:15:2c:8f:96:92:c1:31:7e:45:19:a3:78:
7b:94:d2:0d:e3:c5:b5:6f:ba:46:12:7c:9c:34:b8:d7:14:a7:
05:60:9f:38:d1:cd:b1:96:64:c7:e8:73:33:91:81:8c:82:95:
47:be:b7:8c:ad:78:37:78:a5:28:67:08:49:03:68:99:48:8f:
62:b5:6b:ff:87:36:1d:c3:30:50:fe:09:7a:5e:ac:c9:ed:b3:
5b:70:ef:4a:14:e2:b5:f7:ca:9a:3b:d1:24:cd:9b:4b:a1:ee:
17:d4:73:64:52:48:20:8b:7c:5f:20:76:d8:3f:8c:e7:89:66:
57:66:b0:ee:c3:32:fc:07:87:e6:d4:3e:59:bd:1e:38:88:e4:
ba:14:29:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:35:16 2026 by rpki-client