Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: 8PPXWKq3GZREN1MHpKHtpZo+yC35OFW4NOgSoaFEglA=
Subject key identifier: 81:5C:F2:6A:C4:3B:55:BC:1B:F3:9B:9A:9C:0D:E2:89:D0:25:F1:71
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 019D273AEA52A77275B8AA44C8846CAB273E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 0C57
Signing time: Wed 25 Mar 2026 23:01:05 +0000
Manifest this update: Wed 25 Mar 2026 23:01:05 +0000
Manifest next update: Thu 26 Mar 2026 23:01:05 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: hEbR4E+kvUb8GM0CRCKA1+4/PJKroL5JbQhKP6OqJMQ=)
2: qYLGAcvtEuF5PRAuWurjHsIKzqA.roa (hash: 5iM7z0Ocb30XgRdkW4wQqrCmbwJLHsRTyj2e6RtK/do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ea:52:a7:72:75:b8:aa:44:c8:84:6c:ab:27:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Mar 25 23:01:05 2026 GMT
Not After : Mar 26 23:01:05 2026 GMT
Subject: CN=815cf26ac43b55bc1bf39b9a9c0de289d025f171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:8a:53:7f:95:d0:91:e3:47:59:7f:bb:26:
ba:51:af:b4:fe:9d:d5:38:5a:44:84:4d:3a:02:69:
81:28:91:d0:52:7a:9b:f1:77:06:94:90:c8:00:dd:
80:2c:42:2f:64:da:1b:86:a4:52:67:b8:78:76:9c:
26:a6:0a:f6:bb:f8:3d:9e:75:c1:8b:c9:ca:05:f7:
6d:86:cb:30:60:36:b9:8f:55:8c:f5:38:9a:da:c3:
d6:aa:5f:85:76:19:b9:aa:3c:81:8a:d5:d4:52:52:
01:4f:6a:d0:2b:94:77:95:59:75:df:b1:f1:90:51:
33:cd:44:a9:ec:91:64:1f:30:ae:de:6a:5a:23:8e:
83:e7:43:f0:6f:35:60:33:95:ba:da:24:38:df:70:
92:48:a4:39:84:70:38:fd:24:81:fb:4a:b1:24:98:
aa:89:13:3f:de:f3:70:21:68:e8:34:c6:63:9a:9e:
d8:52:b8:fb:28:4d:fc:8c:6b:87:3b:34:46:3c:78:
53:9e:ef:c9:51:b8:22:f7:63:fc:d1:1a:79:be:b7:
10:57:73:eb:d0:de:67:47:83:74:64:7d:37:68:74:
80:9b:93:56:25:2c:4c:fb:32:ef:fc:a8:0f:60:8e:
ce:07:ca:ab:7c:cd:61:70:07:a5:06:47:d0:c9:0d:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5C:F2:6A:C4:3B:55:BC:1B:F3:9B:9A:9C:0D:E2:89:D0:25:F1:71
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8f:39:a5:83:27:7e:0e:aa:f5:b0:17:c1:db:70:1a:20:3e:
5d:2a:88:2c:f9:34:67:b3:26:5f:a5:41:da:8c:cc:d9:f4:42:
2b:39:c5:cd:70:dc:ee:b8:07:5d:86:8c:60:5d:5a:68:3d:77:
87:55:52:5e:b2:b7:ad:05:e8:8a:73:13:ed:b5:c2:26:f6:d5:
10:d6:2b:c7:6b:fa:9b:36:32:a1:bf:fb:6e:90:9d:ec:7d:9b:
84:d9:e7:57:5d:c5:c7:e7:db:52:87:cb:46:7f:6c:6f:31:f3:
7c:ce:5c:94:86:f0:a9:f0:47:cc:b3:22:1e:3a:4d:50:4c:be:
ae:39:62:6e:9c:37:eb:24:8d:55:37:2b:d6:ae:fe:7f:71:43:
37:9a:72:d8:30:a9:ed:15:64:e9:24:84:a2:a4:cb:5e:fc:53:
0b:77:d7:87:67:8d:d7:10:fb:9f:54:cc:9e:0e:35:1e:aa:f5:
03:02:fa:2b:b3:85:b7:4f:fb:da:1a:82:65:2c:35:52:99:7f:
32:2a:a0:68:5d:eb:35:5b:7a:f2:86:d8:49:fd:b0:e1:61:78:
e8:85:9f:16:85:cc:cc:b3:10:44:3a:cd:6e:3f:74:04:86:a4:
89:e5:0a:0d:5d:9b:8e:4d:22:c4:fc:96:66:61:d9:4c:6b:c7:
33:68:cf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:58 2026 by rpki-client