Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
File: 8SsbaOoQk7zueNBxkubYw_cDAs8.mft (raw, json)
Hash identifier: GdnCADDw7TYbCoJat0ot/HZxptv0DD/sTUenCot2dhU=
Subject key identifier: 74:17:E4:82:E3:10:FB:13:25:4B:F4:AB:6A:68:99:8C:08:19:DD:6A
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Certificate issuer: /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial: 019D25832C1981510AFA44AA0A3464A04845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
Manifest number: 1772
Signing time: Wed 25 Mar 2026 15:00:46 +0000
Manifest this update: Wed 25 Mar 2026 15:00:46 +0000
Manifest next update: Thu 26 Mar 2026 15:00:46 +0000
Files and hashes: 1: 8SsbaOoQk7zueNBxkubYw_cDAs8.crl (hash: j9QgGDipUSczYbwvvjhk2BICn7blG6/E9rM4F9rvLSk=)
2: IxS3kvRzUMr-NtO3nifzXWWmSJk.roa (hash: qpDGvej7zkl86WzGIYhDDPadX2GYJjhi3gTeMhgBZQc=)
3: SFE5HwFeeJrezj4ibh1knL4-c9k.roa (hash: sbuJSFJ3P5x9iliJOK4C/RfPfo5sFVvKp2ueiDAMwxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:2c:19:81:51:0a:fa:44:aa:0a:34:64:a0:48:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Validity
Not Before: Mar 25 15:00:46 2026 GMT
Not After : Mar 26 15:00:46 2026 GMT
Subject: CN=7417e482e310fb13254bf4ab6a68998c0819dd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:0b:7b:3c:0f:53:4c:ae:c7:ea:f5:3d:1d:
b7:1a:aa:a5:90:d9:2d:d9:75:b7:3e:54:d5:88:4b:
c8:77:f5:ad:44:62:0d:13:5e:58:16:7e:e4:37:ce:
2c:dc:b5:5f:1a:75:a1:ca:45:a8:db:89:f7:58:f9:
bb:3a:96:9f:9d:63:9e:40:7e:f2:33:db:ce:5b:bb:
4b:73:55:6a:56:6e:e5:5b:ec:c4:2b:53:30:d4:97:
e4:ba:0f:a9:58:fe:15:26:10:c0:7c:60:75:32:0b:
5e:64:f4:0f:81:c8:ff:0d:05:2f:ad:58:d8:a4:bd:
1f:e1:69:77:9c:98:84:e6:c9:45:6f:4c:fa:58:b4:
7a:53:f0:41:dc:49:1d:17:9b:67:46:1b:50:ff:6e:
c1:01:6b:04:36:c0:1e:ab:5e:d0:ec:2e:25:f8:97:
62:c3:c4:ff:56:a3:1b:15:30:fb:f2:b8:3b:53:48:
02:12:1e:9c:dd:0d:e7:47:14:36:9a:f9:c9:db:c8:
90:e4:ff:3e:ea:19:26:e7:0e:8c:59:54:55:f1:3e:
97:46:39:09:85:80:a4:44:89:3b:a3:a4:98:48:a0:
f8:d3:8b:a2:da:86:4a:ef:76:b0:a9:01:ae:32:c3:
2c:d2:2f:6c:26:b5:83:df:eb:7b:ca:2e:f7:1c:c9:
1b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:17:E4:82:E3:10:FB:13:25:4B:F4:AB:6A:68:99:8C:08:19:DD:6A
X509v3 Authority Key Identifier:
keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6f:4c:36:44:ab:ef:9d:e5:95:b9:f6:1d:95:91:e2:ba:71:
9d:2a:eb:cd:dd:bf:b8:4c:c0:60:ad:8e:3d:3f:3b:39:5c:5b:
11:e1:dd:1b:00:00:0d:06:fe:b0:01:2e:24:66:ad:75:95:52:
b3:17:12:d7:80:65:51:91:35:43:f1:31:b1:c0:6d:c9:fd:48:
88:d5:5c:96:b2:a0:84:ce:6c:90:37:27:f5:d8:8b:1e:a7:3a:
c5:5a:0e:59:10:7e:45:c5:60:71:80:ae:ed:ea:48:d6:25:f6:
cd:a8:b6:8c:cc:c3:40:16:d6:38:c7:5c:38:0f:c4:c0:d7:8a:
d1:03:a4:8b:7d:5b:5e:66:8b:b5:45:29:45:eb:f3:7e:6d:23:
f2:02:28:73:09:ac:a1:cc:83:6f:2e:4d:5e:79:87:bd:14:2e:
14:cc:15:1e:de:e0:d8:d8:ae:7a:67:66:23:ce:1d:65:da:78:
29:8e:92:b4:23:0d:3a:b3:ab:b5:9d:23:e1:8d:a8:c6:2f:17:
cc:66:54:93:c0:db:0a:62:0a:32:0a:fc:7f:83:a8:d8:3c:6c:
39:38:1c:34:7b:21:52:a7:31:04:2f:6b:14:58:2b:6c:47:62:
1b:9d:93:f9:4e:69:52:f2:ce:97:cc:b1:6b:c6:77:e7:a3:c2:
59:22:5d:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lgywZgVEK+kSqCjRkoEhFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMmIxYjY4ZWExMDkzYmNlZTc4ZDA3MTkyZTZkOGMzZjcw
MzAyY2YwHhcNMjYwMzI1MTUwMDQ2WhcNMjYwMzI2MTUwMDQ2WjAzMTEwLwYDVQQD
Eyg3NDE3ZTQ4MmUzMTBmYjEzMjU0YmY0YWI2YTY4OTk4YzA4MTlkZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa4LezwPU0yux+r1PR23GqqlkNkt
2XW3PlTViEvId/WtRGINE15YFn7kN84s3LVfGnWhykWo24n3WPm7OpafnWOeQH7y
M9vOW7tLc1VqVm7lW+zEK1Mw1Jfkug+pWP4VJhDAfGB1MgteZPQPgcj/DQUvrVjY
pL0f4Wl3nJiE5slFb0z6WLR6U/BB3EkdF5tnRhtQ/27BAWsENsAeq17Q7C4l+Jdi
w8T/VqMbFTD78rg7U0gCEh6c3Q3nRxQ2mvnJ28iQ5P8+6hkm5w6MWVRV8T6XRjkJ
hYCkRIk7o6SYSKD404ui2oZK73awqQGuMsMs0i9sJrWD3+t7yi73HMkbXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQX5ILjEPsTJUv0q2pomYwIGd1qMB8GA1UdIwQY
MBaAFPErG2jqEJO87njQcZLm2MP3AwLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFNzYmFPb1FrN3p1ZU5CeGt1Yll3X2NEQXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yNDg3NWMtZjE1OS00NjRmLWE4YTct
MTExOWI3ZmVkZmVjLzEvOFNzYmFPb1FrN3p1ZU5CeGt1Yll3X2NEQXM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8yNDg3NWMtZjE1OS00NjRmLWE4YTctMTExOWI3ZmVkZmVj
LzEvOFNzYmFPb1FrN3p1ZU5CeGt1Yll3X2NEQXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHG9MNkSr
753llbn2HZWR4rpxnSrrzd2/uEzAYK2OPT87OVxbEeHdGwAADQb+sAEuJGatdZVS
sxcS14BlUZE1Q/ExscBtyf1IiNVclrKghM5skDcn9diLHqc6xVoOWRB+RcVgcYCu
7epI1iX2zai2jMzDQBbWOMdcOA/EwNeK0QOki31bXmaLtUUpRevzfm0j8gIocwms
ocyDby5NXnmHvRQuFMwVHt7g2NiuemdmI84dZdp4KY6StCMNOrOrtZ0j4Y2oxi8X
zGZUk8DbCmIKMgr8f4Oo2DxsOTgcNHshUqcxBC9rFFgrbEdiG52T+U5pUvLOl8yx
a8Z356PCWSJd0A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:39 2026 by rpki-client