Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json)
Hash identifier: Cm6mgt/URNamIwbgB/btLMi8FeYBhDM01N+SLusny20=
Subject key identifier: 6B:20:DC:99:4E:62:FB:A0:63:5E:B0:7D:5D:6E:F1:24:71:38:87:82
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 01A0D8DF716542BB79DF38AB2CC75F9E8577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
Manifest number: 1152
Signing time: Fri 25 Sep 2026 14:01:57 +0000
Manifest this update: Fri 25 Sep 2026 14:01:57 +0000
Manifest next update: Sat 26 Sep 2026 14:01:57 +0000
Files and hashes: 1: 6JsGG8yxKzcDoQMwZR2x3KoCb00.roa (hash: 6wxEu7HqJEfHfAXKDDmYgs76ZayF6+azKu/sKGA3exs=)
2: FENuxoqFjunqAylfU_74pUn9r9w.roa (hash: MH7ftTgYFM0jAg20wF24Y7UB/Kl4HvysaZ+BlD0+dTM=)
3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: g8HebgXGXpTylkmxRv+PxbtRlfxd1VRzMN+6wY0rcXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:71:65:42:bb:79:df:38:ab:2c:c7:5f:9e:85:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: Sep 25 14:01:57 2026 GMT
Not After : Sep 26 14:01:57 2026 GMT
Subject: CN=6b20dc994e62fba0635eb07d5d6ef12471388782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:b1:ed:76:1e:bd:b6:ea:dd:6a:af:db:05:
fd:df:2d:52:00:0e:09:9f:58:a0:3c:3b:6d:cd:ab:
3f:6c:2f:77:e2:4d:2e:3a:43:45:7c:82:f8:45:b0:
8e:93:1e:b4:e6:8b:cd:8b:1d:98:50:d8:80:28:40:
64:88:61:13:1e:2d:4a:59:b3:22:a3:2e:9c:7e:1e:
a3:58:a2:07:05:36:7d:94:97:41:46:38:0c:df:7c:
70:f2:8a:08:83:67:ed:5a:f2:f8:6c:de:25:14:d1:
71:3c:f4:90:1c:dd:14:3a:38:3d:ef:fe:f9:53:bf:
5f:bc:d0:60:ba:8e:24:62:6d:10:b0:4a:19:3e:82:
6e:98:8b:6e:bf:f3:db:9c:de:31:6b:e8:eb:6c:1f:
c9:66:43:84:67:95:c8:c9:19:1e:2d:10:cb:c4:50:
b1:19:30:4b:8c:5e:d2:34:57:61:6e:72:d2:61:a2:
76:19:3d:9e:61:79:09:36:38:12:1f:57:fb:98:a1:
90:9d:8a:cb:72:b0:8c:4e:c2:d3:3d:81:20:64:93:
b2:69:68:e2:91:c0:f6:7f:11:33:10:2a:0d:a2:a7:
d6:01:25:62:e5:cb:60:fc:b2:c1:c2:36:48:c3:0f:
71:74:ea:9b:22:d6:28:e4:ad:0c:e6:16:f3:7c:03:
9c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:20:DC:99:4E:62:FB:A0:63:5E:B0:7D:5D:6E:F1:24:71:38:87:82
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cc:52:b4:8f:bb:ee:65:f9:e4:07:97:1c:94:dd:71:7b:33:
34:97:e7:17:ad:a5:85:7d:c6:fe:f2:6c:b1:62:a9:3b:d4:62:
e0:86:74:7e:ec:0f:38:b2:ee:7d:85:2f:21:e2:6f:4a:e4:f2:
a8:0c:b5:ea:39:08:f5:1f:04:f6:a6:dd:aa:a0:41:e7:07:c9:
dd:b3:f2:03:b2:cb:1a:66:b5:07:c3:47:62:24:fd:d6:0b:81:
96:55:31:c1:c8:78:11:bc:dc:30:00:d5:10:a4:18:ee:be:91:
3b:15:64:80:67:73:f6:63:46:8b:86:97:2a:f6:13:81:60:c7:
af:a5:a2:40:6e:d7:9c:70:3a:05:96:00:d0:07:46:d7:15:1c:
da:c3:89:62:3d:67:60:f3:c8:5a:51:43:e4:a5:29:16:08:da:
11:9f:07:d3:bc:1d:47:f6:15:d2:2a:ca:97:9f:8a:dd:10:06:
0b:14:e5:bc:ec:97:d9:21:fb:3b:6b:e0:42:e6:89:f4:5b:5c:
17:e6:f7:72:c0:a1:24:0f:86:c9:82:94:b0:66:75:5d:33:89:
75:79:40:19:30:73:c0:2f:0d:7c:b8:4c:8a:6b:0d:6d:e5:8e:
5d:74:7e:7c:e2:a2:96:41:56:1c:91:2d:e1:7d:27:ae:46:2f:
67:3a:0d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:24:25 2026 by rpki-client