Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: UGs8NBoFMYpxa3Wo0bEF95H8F/RVNtxkhpWBTrN3NXY=
Subject key identifier: 1A:0F:F1:F8:D7:EE:98:5D:97:47:F1:8B:DF:A4:1F:7A:82:4D:3B:20
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 019F9135C1D496984A73120C5ACFC6D4BE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 0D97
Signing time: Thu 23 Jul 2026 23:00:46 +0000
Manifest this update: Thu 23 Jul 2026 23:00:46 +0000
Manifest next update: Fri 24 Jul 2026 23:00:46 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: 4ULNqNZl++aZHJ748rIKJlLMA7pzJqstHZc5I5/c7Bk=)
2: qYLGAcvtEuF5PRAuWurjHsIKzqA.roa (hash: 5iM7z0Ocb30XgRdkW4wQqrCmbwJLHsRTyj2e6RtK/do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:c1:d4:96:98:4a:73:12:0c:5a:cf:c6:d4:be:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Jul 23 23:00:46 2026 GMT
Not After : Jul 24 23:00:46 2026 GMT
Subject: CN=1a0ff1f8d7ee985d9747f18bdfa41f7a824d3b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:5c:0e:7c:84:9c:a1:d8:6e:a1:25:a1:6b:
8d:47:0e:a5:09:8b:44:6b:5b:26:e5:97:6c:07:46:
07:94:1d:84:da:fd:50:70:5b:86:c1:42:dc:b0:bd:
46:ba:5a:57:08:c7:a8:d2:a5:51:b1:df:77:f4:11:
0d:8c:07:34:7a:54:2c:9c:18:32:10:90:8d:0f:d6:
72:39:54:99:4a:72:69:8e:0b:15:f2:90:40:85:93:
ec:0e:ea:1d:b0:e6:95:c9:18:c9:d7:00:1f:01:b8:
ee:48:c0:ff:6d:a0:85:df:d6:c4:ef:e0:1a:6f:b7:
79:16:9a:47:fa:13:e5:42:8c:1a:d5:a8:a2:fe:9f:
7e:d3:c4:85:96:7a:08:a7:e6:2b:f7:05:31:91:30:
ab:3f:ba:0b:51:d2:35:35:66:0d:e5:07:3a:37:3e:
15:ff:7f:a7:9f:eb:da:dc:95:26:aa:3a:bf:54:e4:
77:f4:dc:af:0d:0a:24:60:89:76:4e:2f:79:6b:a6:
36:85:ad:6b:a7:b5:9a:65:78:a9:40:68:19:f1:79:
ad:0e:98:02:c6:4b:40:7b:90:a4:34:e5:f5:f4:72:
e7:dc:18:ff:3c:1b:4e:3c:2f:b1:d9:42:20:9f:de:
a5:c6:bd:21:a7:27:39:28:35:fb:c7:af:77:b3:b6:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0F:F1:F8:D7:EE:98:5D:97:47:F1:8B:DF:A4:1F:7A:82:4D:3B:20
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1a:a1:3c:6d:fb:e8:ac:35:b1:dc:72:a5:f7:38:54:9a:e4:
86:dc:39:c2:db:09:bf:e0:f4:cd:47:bc:e2:d3:17:37:e1:d8:
b6:1e:e0:35:e9:97:20:b8:52:af:16:f6:22:27:8f:30:1e:30:
cd:2a:b6:c4:d3:83:fe:94:0e:41:7d:14:5a:02:8f:cf:a2:fc:
1a:43:28:2f:a3:fc:82:3d:b8:83:13:2b:27:e4:ce:07:93:ad:
1f:a1:6a:26:a5:e9:15:5e:0a:20:c8:c0:8d:43:fa:dc:c0:70:
70:85:da:c2:e9:22:97:1c:fd:63:3a:4b:7b:d7:7b:d6:b2:b3:
47:f3:ae:d6:fc:9f:ed:84:c9:3f:5a:99:82:a5:65:ee:c1:48:
0c:c3:e5:19:0f:f7:71:a1:4c:cf:a6:e0:cf:10:f9:00:d2:12:
7c:d8:9f:2f:78:6f:e0:4c:da:c8:15:a6:81:76:40:79:10:6e:
0b:33:e8:9f:73:1b:78:2b:5b:76:95:ae:3f:e9:b7:58:d7:03:
e3:8d:29:92:ae:bf:5e:e6:d9:91:d8:27:cf:cf:29:85:a6:8c:
c8:af:ff:be:99:b0:70:3d:fa:b4:5e:92:5c:41:9e:5c:55:46:
b5:4f:68:de:c1:e3:b7:c4:c1:6e:32:f5:35:05:fd:b5:bb:a3:
2c:71:0e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:54:35 2026 by rpki-client