Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: 8Z6j8VI6buNcusYv0peJsC5HSW5edxHB6AYPEhbOxp4=
Subject key identifier: 1A:9F:B4:00:26:92:79:52:68:F6:DC:4B:26:A1:4D:58:54:AE:1F:5D
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 019E1E6CA77C763DB5FE095ADA6ECA8570B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 0CD7
Signing time: Tue 12 May 2026 23:01:37 +0000
Manifest this update: Tue 12 May 2026 23:01:37 +0000
Manifest next update: Wed 13 May 2026 23:01:37 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: Chrm/cHiqCA6uwO9Wrn97A9FRj0um+6gawkTDJ2R30A=)
2: qYLGAcvtEuF5PRAuWurjHsIKzqA.roa (hash: 5iM7z0Ocb30XgRdkW4wQqrCmbwJLHsRTyj2e6RtK/do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:a7:7c:76:3d:b5:fe:09:5a:da:6e:ca:85:70:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: May 12 23:01:37 2026 GMT
Not After : May 13 23:01:37 2026 GMT
Subject: CN=1a9fb4002692795268f6dc4b26a14d5854ae1f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:16:93:5c:de:2e:29:74:52:f8:0c:2a:79:
0b:cf:61:b1:b0:22:99:d6:81:e3:88:68:f9:a4:36:
b6:4c:91:65:5e:4d:33:00:c7:ae:e9:b4:04:15:6c:
64:5a:79:52:1d:9e:b6:97:27:fb:86:73:e3:d5:6d:
1b:51:4e:20:1e:06:58:f3:14:2a:ca:1d:69:dd:33:
75:c5:52:77:0f:a4:84:cc:69:26:72:c4:52:30:20:
de:f1:ea:03:17:20:eb:f5:42:19:c7:72:dc:de:e7:
d9:27:49:b4:84:25:06:51:3f:bc:64:0f:d3:d4:8b:
14:25:3c:fc:0d:c2:03:75:17:e5:3c:47:66:bf:d0:
f3:72:5d:29:40:77:17:fd:68:b3:e8:1e:e8:bf:ea:
6c:c5:0f:a9:0e:65:8b:d6:89:47:f9:4c:d7:86:5f:
b6:6e:b3:eb:cf:d1:74:78:c5:82:84:b2:57:00:3d:
57:d9:d2:d3:fc:ee:68:a0:76:b0:fb:91:fa:5d:8b:
0a:1d:a0:f6:74:3e:1a:ab:05:60:d7:f0:86:1b:c4:
53:6f:b8:a4:18:9a:de:c6:19:25:5f:75:a3:bc:e7:
88:da:8d:da:8e:4e:40:36:c0:cc:dd:df:84:16:8f:
6b:7a:06:5a:17:50:a0:bd:f8:b5:5e:72:06:d4:47:
6a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9F:B4:00:26:92:79:52:68:F6:DC:4B:26:A1:4D:58:54:AE:1F:5D
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2c:5c:82:0d:00:21:96:42:4e:97:06:85:f2:cc:d6:fa:7e:
6e:ef:1b:0c:62:d4:62:92:c7:36:40:0f:83:46:ac:09:b7:10:
87:a9:7e:13:86:df:8c:84:67:f3:69:67:29:96:08:d2:fc:7b:
df:e8:f1:f7:f6:c8:51:f9:d2:39:75:f0:2b:ff:a8:2c:b1:77:
19:bd:42:3d:17:98:63:98:a3:f4:53:13:0b:25:23:20:40:bf:
4d:4a:d5:21:53:05:4c:f5:8b:84:36:26:a4:4a:6e:ff:4e:db:
92:e2:f7:07:d7:dd:0b:af:2a:cf:a3:bd:64:e5:9e:8d:f2:fc:
1f:6e:58:27:f4:a0:ce:76:ac:fb:cc:a5:93:f2:bd:2b:33:23:
d9:48:c7:fb:da:89:ad:a0:0b:74:e4:92:07:56:44:40:84:6d:
f1:f5:ec:32:12:86:80:4b:5a:d0:2d:d7:59:25:c0:4f:5f:76:
1e:94:fe:1a:75:98:3e:0b:52:2c:27:8f:49:ae:21:be:ce:f5:
a2:b0:b7:3b:e4:4b:33:03:6b:84:22:c0:8f:21:99:3c:8e:ed:
f9:5f:9d:70:a1:95:2c:0a:39:16:b5:c1:22:20:ea:b7:9e:ba:
c3:bb:2e:ce:a0:d1:3f:96:a2:7b:ff:0c:ba:34:0d:5a:87:02:
cb:28:40:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebKd8dj21/gla2m7KhXCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhY2EwNDU4NmE4NWVkMTJlOWNkYTgzNGRmZGZhMTE5YzFh
NTg5NzUwHhcNMjYwNTEyMjMwMTM3WhcNMjYwNTEzMjMwMTM3WjAzMTEwLwYDVQQD
EygxYTlmYjQwMDI2OTI3OTUyNjhmNmRjNGIyNmExNGQ1ODU0YWUxZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpcWk1zeLil0UvgMKnkLz2GxsCKZ
1oHjiGj5pDa2TJFlXk0zAMeu6bQEFWxkWnlSHZ62lyf7hnPj1W0bUU4gHgZY8xQq
yh1p3TN1xVJ3D6SEzGkmcsRSMCDe8eoDFyDr9UIZx3Lc3ufZJ0m0hCUGUT+8ZA/T
1IsUJTz8DcIDdRflPEdmv9Dzcl0pQHcX/Wiz6B7ov+psxQ+pDmWL1olH+UzXhl+2
brPrz9F0eMWChLJXAD1X2dLT/O5ooHaw+5H6XYsKHaD2dD4aqwVg1/CGG8RTb7ik
GJrexhklX3WjvOeI2o3ajk5ANsDM3d+EFo9regZaF1Cgvfi1XnIG1EdqRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqftAAmknlSaPbcSyahTVhUrh9dMB8GA1UdIwQY
MBaAFErKBFhqhe0S6c2oNN/foRnBpYl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3NvRVdHcUY3UkxwemFnMDM5LWhHY0dsaVhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kMmUxMzctY2ViYi00Nzk0LTlhY2Ut
MWI1ZGU1Yjc2MDYyLzEvU3NvRVdHcUY3UkxwemFnMDM5LWhHY0dsaVhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9kMmUxMzctY2ViYi00Nzk0LTlhY2UtMWI1ZGU1Yjc2MDYy
LzEvU3NvRVdHcUY3UkxwemFnMDM5LWhHY0dsaVhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSxcgg0A
IZZCTpcGhfLM1vp+bu8bDGLUYpLHNkAPg0asCbcQh6l+E4bfjIRn82lnKZYI0vx7
3+jx9/bIUfnSOXXwK/+oLLF3Gb1CPReYY5ij9FMTCyUjIEC/TUrVIVMFTPWLhDYm
pEpu/07bkuL3B9fdC68qz6O9ZOWejfL8H25YJ/Sgznas+8ylk/K9KzMj2UjH+9qJ
raALdOSSB1ZEQIRt8fXsMhKGgEta0C3XWSXAT192HpT+GnWYPgtSLCePSa4hvs71
orC3O+RLMwNrhCLAjyGZPI7t+V+dcKGVLAo5FrXBIiDqt566w7suzqDRP5aie/8M
ujQNWocCyyhAOw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:54:01 2026 by rpki-client