Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: wU3zfio6wIM9MllGPji7umJIYnILaSTAlrdzCtMTqLs=
Subject key identifier: BF:1C:35:C8:5B:C8:E9:65:ED:62:EB:EF:3A:65:F2:EC:89:35:20:54
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 01A0E8F6B325273AAD54DC480DA38B1F9C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 0E49
Signing time: Mon 28 Sep 2026 17:01:16 +0000
Manifest this update: Mon 28 Sep 2026 17:01:16 +0000
Manifest next update: Tue 29 Sep 2026 17:01:16 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: sPYyY3vPA5QOZUK8Ic4OgNnEsAIxdnHStzZmUgJFRu0=)
2: qYLGAcvtEuF5PRAuWurjHsIKzqA.roa (hash: 5iM7z0Ocb30XgRdkW4wQqrCmbwJLHsRTyj2e6RtK/do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 17:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:b3:25:27:3a:ad:54:dc:48:0d:a3:8b:1f:9c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Sep 28 17:01:16 2026 GMT
Not After : Sep 29 17:01:16 2026 GMT
Subject: CN=bf1c35c85bc8e965ed62ebef3a65f2ec89352054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6b:4b:4e:0e:90:9d:5a:6d:87:a9:1f:82:29:
7b:c9:c5:c9:ea:6e:01:c3:ba:95:2f:41:b8:92:e0:
b3:d9:9d:6c:fb:3a:b4:4d:42:a0:0d:23:de:ce:7a:
87:b2:40:9f:4c:a8:80:7b:6f:44:ea:83:b7:d5:b2:
4e:71:97:c8:ce:f2:60:c6:3e:53:81:70:ac:dd:a1:
8a:e5:75:13:95:04:46:c8:06:4b:95:6f:42:99:22:
ba:d3:44:e9:a3:cc:39:d3:5e:bc:93:81:c1:9a:ab:
3e:cd:32:65:1f:41:4c:82:c1:aa:f8:35:01:2b:fb:
67:de:4f:85:0a:5b:a1:89:8f:d3:3c:85:5d:c7:9b:
7a:1f:fc:69:45:d5:56:9f:b4:47:69:14:27:38:9e:
cd:83:85:17:7e:2a:3d:97:85:fe:6d:34:0f:9b:5d:
dd:08:4d:f3:ee:df:a8:ee:9c:39:39:e6:8e:1a:30:
49:56:a7:6c:fb:7e:0c:db:26:e9:2b:01:e2:41:87:
72:27:d5:5c:bd:1b:04:60:d3:8c:1c:cc:cc:bb:8c:
b8:ed:61:eb:7e:42:e9:fb:25:ee:e4:70:13:40:ff:
67:c4:1a:b0:c9:e7:7f:a3:1c:41:fa:29:81:f7:75:
58:2c:4a:c4:1c:cf:b6:9d:cc:4e:e0:cf:ea:ae:14:
2e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1C:35:C8:5B:C8:E9:65:ED:62:EB:EF:3A:65:F2:EC:89:35:20:54
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2e:7c:60:d1:b7:45:63:b4:be:3a:3d:6d:ea:82:33:a7:59:
24:75:02:7b:4a:50:b4:c4:dd:9e:f3:ef:09:69:a4:7c:de:c9:
fe:bb:39:87:fa:bd:c6:ca:89:f9:e7:4d:db:c2:78:8f:20:a9:
14:80:a4:cb:88:03:59:d4:73:c5:55:e8:0a:74:62:11:fc:90:
75:a6:4e:c9:ab:4b:93:60:6c:5d:8e:87:f6:f4:71:70:be:9c:
67:c7:e9:4f:7a:50:93:61:26:a3:40:2d:6f:d7:b4:5f:d3:a1:
87:56:67:d1:67:2d:b8:4d:3e:26:e7:33:4e:8a:c8:09:3a:68:
95:30:d4:02:ec:b3:30:43:38:29:d5:1b:8c:e5:d5:6f:52:bd:
1b:63:d1:b6:de:ce:df:03:87:b9:a0:21:21:5a:23:2b:4f:e9:
61:4f:d5:9a:25:5c:fd:fa:7d:91:bc:1c:fb:04:a9:fe:fd:e5:
77:ad:63:0e:e0:4e:d7:27:2e:2e:37:7a:36:3a:b4:7c:69:27:
db:45:92:0c:ae:09:b0:c3:c0:35:23:35:9d:51:25:8a:03:f4:
16:20:3f:04:77:f0:f0:6d:55:38:83:7f:ef:55:14:4d:38:c0:
38:97:3a:f1:8b:90:47:29:5e:e2:5d:19:5a:8e:13:5d:ab:10:
52:be:27:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:13:23 2026 by rpki-client