Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
File: ssX3TfRSDTQdo0inAKA7l8rwdzU.mft (raw, json)
Hash identifier: VGCcx0HS+viBVeBkYKxCL1Mz7B4LgGtnO4iZ8xFdASE=
Subject key identifier: 5B:F7:5A:36:BB:2C:0B:13:3F:C9:AB:E3:F1:27:8E:6A:28:25:31:A2
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial: 019E1FB58DA448D543ABA3E8D71C728DAF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
Manifest number: 0FE9
Signing time: Wed 13 May 2026 05:00:52 +0000
Manifest this update: Wed 13 May 2026 05:00:52 +0000
Manifest next update: Thu 14 May 2026 05:00:52 +0000
Files and hashes: 1: 6JsGG8yxKzcDoQMwZR2x3KoCb00.roa (hash: 6wxEu7HqJEfHfAXKDDmYgs76ZayF6+azKu/sKGA3exs=)
2: FENuxoqFjunqAylfU_74pUn9r9w.roa (hash: MH7ftTgYFM0jAg20wF24Y7UB/Kl4HvysaZ+BlD0+dTM=)
3: ssX3TfRSDTQdo0inAKA7l8rwdzU.crl (hash: sND2aQUFak4Sc0xY3yJdB4oxK5QOFueePy2+1Uegghs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:8d:a4:48:d5:43:ab:a3:e8:d7:1c:72:8d:af:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
Validity
Not Before: May 13 05:00:52 2026 GMT
Not After : May 14 05:00:52 2026 GMT
Subject: CN=5bf75a36bb2c0b133fc9abe3f1278e6a282531a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:45:b2:27:94:71:1a:e5:c9:e7:29:04:4a:
fe:3b:ae:f8:9a:bb:ae:13:3c:29:5b:72:46:4d:24:
0e:bc:c0:fa:93:2a:91:22:13:9d:c4:20:b2:27:fe:
93:67:1d:ab:80:34:05:02:1e:fa:9d:42:65:0f:eb:
4d:7f:04:5c:ce:5e:f7:7d:62:3f:fd:73:19:ff:f1:
cc:a6:23:a9:fb:92:18:10:78:62:4b:6d:16:c5:fe:
82:37:bc:18:4c:b2:d9:2c:ed:86:91:31:24:aa:f6:
42:8f:fe:e1:1a:8e:91:ce:4a:cf:ed:47:5b:9d:9b:
b8:fe:6e:c1:ba:23:6b:31:e1:6c:19:e2:72:26:13:
f4:d5:26:7b:37:4f:5c:85:7d:ed:a9:9f:d5:83:0c:
2c:2c:b9:d0:44:5c:35:a0:71:3e:ca:28:56:9e:35:
9b:fb:a9:9a:6d:7d:39:1d:45:20:b1:96:09:0f:56:
12:d9:b1:96:a2:61:1f:57:38:e1:ac:2c:df:98:64:
5a:e1:84:70:2a:b0:74:85:d1:8b:20:7d:63:a1:cf:
1a:62:a8:8e:33:78:5d:fc:33:60:8c:0d:3c:b2:4b:
cf:be:49:63:e6:29:7c:76:bf:f7:9f:e4:cd:75:9a:
44:46:94:5d:22:d5:46:9a:fc:a4:3e:cb:c5:39:31:
48:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F7:5A:36:BB:2C:0B:13:3F:C9:AB:E3:F1:27:8E:6A:28:25:31:A2
X509v3 Authority Key Identifier:
keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7f:cf:3c:f0:ab:be:8c:bc:c2:d5:b6:ae:9d:5e:ca:68:34:
92:5c:53:56:61:10:ce:1b:3e:7a:c7:5d:30:30:f6:40:2d:2b:
b3:bb:36:06:4d:fd:0c:fd:77:45:24:01:82:7d:04:21:7c:65:
76:f9:80:f7:55:c8:73:34:2f:09:b3:32:56:b9:90:4f:f8:d6:
9e:c4:49:a3:16:7a:88:c7:f3:67:16:7f:45:f5:c2:c2:e2:45:
fc:8f:4e:63:28:43:da:a6:ab:39:73:28:90:6e:b9:2a:61:80:
2a:ea:1f:85:02:a2:eb:19:e7:c2:15:28:d7:cf:e9:a4:4c:9b:
b1:0f:b8:62:c3:7d:fc:fe:9d:03:08:ae:3b:db:9b:e6:73:83:
b0:a9:5f:09:e9:1d:55:92:d4:c6:64:fc:6a:8d:41:38:56:40:
e1:b6:6c:30:65:73:34:3a:77:56:15:9c:82:cc:27:45:75:7c:
84:0d:e3:ec:76:5f:bd:93:f7:f4:d8:35:3e:9a:00:48:e7:49:
39:d9:12:ca:fd:8f:92:aa:ae:a3:48:16:82:94:9f:43:0b:fc:
5e:64:bf:f2:4e:63:ba:df:3b:42:4e:d4:da:e8:82:34:ab:bd:
43:77:46:48:3d:5a:b7:4d:0d:a0:02:aa:9a:2e:2f:b1:23:82:
d5:00:95:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:16:27 2026 by rpki-client