Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json)
Hash identifier: kjo+4L52YT3D0ERALw4Avfnw0LmzAWRU1FMl9M0R3vM=
Subject key identifier: A3:C7:E4:D2:43:F9:E9:AB:A0:41:98:F4:06:23:4B:3D:2C:69:B6:A9
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 019D2695D92E6E72AB3C8EECA149179DF3CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
Manifest number: 0F68
Signing time: Wed 25 Mar 2026 20:00:47 +0000
Manifest this update: Wed 25 Mar 2026 20:00:47 +0000
Manifest next update: Thu 26 Mar 2026 20:00:47 +0000
Files and hashes: 1: 6JsGG8yxKzcDoQMwZR2x3KoCb00.roa (hash: 6wxEu7HqJEfHfAXKDDmYgs76ZayF6+azKu/sKGA3exs=)
2: FENuxoqFjunqAylfU_74pUn9r9w.roa (hash: MH7ftTgYFM0jAg20wF24Y7UB/Kl4HvysaZ+BlD0+dTM=)
3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: 6pNATPwp+Kb9rwDR9oMtWTvwZpdvbq20D6LZwcP2MeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:d9:2e:6e:72:ab:3c:8e:ec:a1:49:17:9d:f3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Mar 25 20:00:47 2026 GMT
Not After : Mar 26 20:00:47 2026 GMT
Subject: CN=a3c7e4d243f9e9aba04198f406234b3d2c69b6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:53:55:af:7f:ca:28:57:b4:9a:67:f3:46:
f9:03:1d:6e:81:88:44:88:5b:1c:12:0c:4c:8f:5b:
ab:e0:7c:c8:bc:fb:f4:83:77:58:68:07:51:fa:6a:
a3:8e:5d:b1:a3:21:b3:ac:a8:0e:26:58:31:4a:3a:
09:ca:3e:d4:de:6e:c3:ca:86:17:0a:82:6a:5c:f5:
0f:7f:99:e2:0c:a1:d7:b4:39:b6:ee:73:a1:53:8c:
42:49:1b:fe:02:a3:bf:21:05:f7:41:31:22:c1:2e:
32:b7:fd:99:de:37:26:a7:4f:fb:e1:93:68:58:3d:
19:2b:15:b3:d9:46:84:5d:cc:ee:aa:cb:09:bb:a5:
63:96:6d:8d:ab:84:c8:c4:44:5c:f7:bc:2a:72:92:
74:00:a3:a9:16:bc:52:13:4c:46:c0:6f:21:f8:a3:
42:d0:6e:56:9f:f6:b9:6c:31:65:83:59:2a:86:a7:
74:91:2c:98:71:6b:6d:8f:74:54:4c:91:dc:14:31:
a7:34:c5:ef:2e:2b:b2:d8:9b:c1:ec:91:08:77:20:
93:71:23:b9:c9:ce:a6:24:20:a9:f0:56:3f:48:5b:
4a:5e:5f:80:04:52:4f:cb:99:ab:29:39:81:79:44:
95:75:13:83:e5:92:f4:54:bb:b2:ef:bd:e7:2e:28:
2c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C7:E4:D2:43:F9:E9:AB:A0:41:98:F4:06:23:4B:3D:2C:69:B6:A9
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:75:8d:d9:a8:7a:75:34:81:ed:cb:a9:32:be:c8:de:8c:c7:
0f:f5:33:f1:07:d7:b0:9b:26:4d:d5:78:d1:4b:3c:78:59:cd:
0e:6e:ec:c6:a2:a4:1d:39:43:65:22:af:33:e0:25:3b:5d:57:
a2:cb:8d:f2:99:f7:9f:f7:f9:35:34:20:26:e1:08:e2:9a:2b:
81:61:7a:7c:47:5d:a6:4f:af:c9:67:d8:f4:b4:e6:e4:a4:c0:
bc:6c:9a:db:e0:35:1c:34:a0:c5:dc:a9:57:32:71:cf:06:62:
74:a3:e5:4f:ef:48:a4:53:fc:b6:a3:35:2b:a0:6f:af:0c:fa:
63:c8:d4:0e:fd:4a:f0:6a:5e:50:73:cf:17:f0:78:a3:b0:b7:
24:7d:27:d6:1a:e8:cc:5d:11:a2:a8:1d:09:81:31:1a:68:a0:
8e:bf:53:32:e8:c1:25:59:ef:df:e6:40:a7:4f:ff:99:8b:71:
8a:8f:e5:4c:a6:c9:3e:d3:c0:fb:6b:ec:86:2a:c7:b3:99:94:
3d:a8:fe:6d:ac:ac:c1:37:f3:49:48:31:5c:e8:dc:05:25:59:
a4:14:8a:b3:14:f6:b8:0a:6a:eb:1c:d5:4c:9f:09:b6:8d:b4:
07:e0:86:f8:67:ba:ef:67:f2:7b:5e:af:84:b5:ce:69:60:5f:
8f:3c:11:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mldkubnKrPI7soUkXnfPOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYzVmNzRkZjQ1MjBkMzQxZGEzNDhhNzAwYTAzYjk3Y2Fm
MDc3MzUwHhcNMjYwMzI1MjAwMDQ3WhcNMjYwMzI2MjAwMDQ3WjAzMTEwLwYDVQQD
EyhhM2M3ZTRkMjQzZjllOWFiYTA0MTk4ZjQwNjIzNGIzZDJjNjliNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnttTVa9/yihXtJpn80b5Ax1ugYhE
iFscEgxMj1ur4HzIvPv0g3dYaAdR+mqjjl2xoyGzrKgOJlgxSjoJyj7U3m7DyoYX
CoJqXPUPf5niDKHXtDm27nOhU4xCSRv+AqO/IQX3QTEiwS4yt/2Z3jcmp0/74ZNo
WD0ZKxWz2UaEXczuqssJu6Vjlm2Nq4TIxERc97wqcpJ0AKOpFrxSE0xGwG8h+KNC
0G5Wn/a5bDFlg1kqhqd0kSyYcWttj3RUTJHcFDGnNMXvLiuy2JvB7JEIdyCTcSO5
yc6mJCCp8FY/SFtKXl+ABFJPy5mrKTmBeUSVdROD5ZL0VLuy773nLigs0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPH5NJD+emroEGY9AYjSz0sabapMB8GA1UdIwQY
MBaAFLLF9030Ug00HaNIpwCgO5fK8Hc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzIt
Nzc3ZWU5NTU2MjEwLzEvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzItNzc3ZWU5NTU2MjEw
LzEvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3WN2ah6
dTSB7cupMr7I3ozHD/Uz8QfXsJsmTdV40Us8eFnNDm7sxqKkHTlDZSKvM+AlO11X
osuN8pn3n/f5NTQgJuEI4porgWF6fEddpk+vyWfY9LTm5KTAvGya2+A1HDSgxdyp
VzJxzwZidKPlT+9IpFP8tqM1K6Bvrwz6Y8jUDv1K8GpeUHPPF/B4o7C3JH0n1hro
zF0RoqgdCYExGmigjr9TMujBJVnv3+ZAp0//mYtxio/lTKbJPtPA+2vshirHs5mU
Paj+bayswTfzSUgxXOjcBSVZpBSKsxT2uApq6xzVTJ8Jto20B+CG+Ge672fye16v
hLXOaWBfjzwRsQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:32 2026 by rpki-client