Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
File: SSqOSCqB2QxFxNkKxmij8iRcDW0.mft (raw, json)
Hash identifier: jvBsSIqo9xnZDagxI8xS5Lb9sFTluDyYCFGzO8D6+jM=
Subject key identifier: 2A:5E:7C:0B:D8:42:18:71:FE:28:C0:65:7A:59:C7:01:F9:03:5D:B7
Authority key identifier: 49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D
Certificate issuer: /CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d
Certificate serial: 019D2AE0C71EB80133EAC766CDA8EA838BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 16:01:07 +0000
Manifest this update: Thu 26 Mar 2026 16:01:07 +0000
Manifest next update: Fri 27 Mar 2026 16:01:07 +0000
Files and hashes: 1: SSqOSCqB2QxFxNkKxmij8iRcDW0.crl (hash: fvNifPOxBkM63Ju47R3tXxCs0uzZyykom6VLVlyDwXE=)
2: Zly76sR93xiLWK-6z00JINgQw0s.roa (hash: Cwnf2YJcr7xtYOcQAYO59i1uM8hPOiSg7BcnRFcg/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:c7:1e:b8:01:33:ea:c7:66:cd:a8:ea:83:8b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492a8e482a81d90c45c4d90ac668a3f2245c0d6d
Validity
Not Before: Mar 26 16:01:07 2026 GMT
Not After : Mar 27 16:01:07 2026 GMT
Subject: CN=2a5e7c0bd8421871fe28c0657a59c701f9035db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:ae:53:19:9b:66:dc:55:34:52:c3:4c:19:
98:87:6f:8f:0c:b0:b7:70:b9:e4:ac:b6:20:3a:5a:
e0:81:25:14:ca:8b:36:e2:d6:39:6b:0d:29:b7:c9:
a4:77:8e:fb:ee:f8:ca:33:1e:61:d9:6f:9f:a9:bb:
11:91:99:6e:30:a9:e0:e4:b7:cd:93:b5:ac:1c:86:
32:40:3f:b1:08:8d:1b:e4:00:31:76:c3:e7:1e:2d:
f0:bc:72:c7:32:75:2e:73:86:c6:5b:e6:98:f8:fc:
18:d4:dc:3d:d7:14:7a:12:25:d3:fe:ee:55:5d:86:
6b:13:99:66:7a:87:6a:12:57:9e:22:47:92:52:c7:
d1:be:55:3d:c6:dd:4b:f4:d1:55:7b:73:4b:31:36:
2d:5a:69:58:d9:32:17:ce:f3:4d:c0:81:74:55:c7:
00:88:51:a0:d0:ed:0e:4d:11:5d:b0:41:a9:fc:12:
48:e0:43:1e:bc:c8:4d:81:10:6e:86:58:73:0a:f1:
87:48:df:46:e9:11:72:40:42:aa:db:ae:2f:72:04:
8a:25:ed:c8:58:8f:f2:a7:e5:22:07:58:77:5a:4f:
15:bb:76:f3:1b:6a:5e:46:47:70:f3:e0:6c:25:70:
a8:97:74:4f:b8:95:11:cd:f9:4d:80:19:bf:ad:03:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5E:7C:0B:D8:42:18:71:FE:28:C0:65:7A:59:C7:01:F9:03:5D:B7
X509v3 Authority Key Identifier:
keyid:49:2A:8E:48:2A:81:D9:0C:45:C4:D9:0A:C6:68:A3:F2:24:5C:0D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSqOSCqB2QxFxNkKxmij8iRcDW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b8eadf-8037-4fae-8d2c-e0a3cbd04796/1/SSqOSCqB2QxFxNkKxmij8iRcDW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:67:aa:6b:cd:0a:46:7e:6f:29:f7:a2:a8:b3:de:04:25:ea:
92:ca:ef:66:ee:32:47:a5:6f:49:01:47:e7:75:d2:e8:6d:3f:
90:eb:d5:d8:bb:05:bd:1b:55:70:d3:07:de:94:49:80:f7:d0:
89:6b:22:41:17:30:b0:d5:53:cd:43:89:a1:e5:17:cf:0f:2b:
3a:7a:27:2d:2b:0d:c4:5c:e9:8a:a6:81:21:4b:f0:ef:d7:aa:
7e:70:2a:c5:e2:c0:b9:84:97:cc:2d:05:2c:03:7b:3f:3b:2a:
ab:c7:ab:ed:ea:05:fa:f9:0d:47:bb:74:82:f4:90:d0:94:8d:
71:2b:7d:24:bf:d0:c2:19:7d:13:8b:01:c9:45:1f:c7:ea:ab:
8f:d4:79:b1:09:1e:9c:97:16:87:c8:28:71:0e:70:05:5d:8c:
dd:91:6b:c5:de:4b:e9:ec:31:61:e8:b1:48:46:09:bc:a6:3d:
bd:c9:77:8a:7a:82:67:e1:93:e7:35:fe:eb:6e:da:c9:3b:0c:
6b:e6:2f:4e:96:16:e5:39:df:1d:65:43:07:05:30:1f:08:14:
32:82:16:5a:4c:87:1e:4e:c1:92:41:b8:b7:9a:0f:04:b1:08:
ef:c6:fb:42:4c:87:0d:11:69:26:e5:ce:19:3c:0f:75:da:98:
eb:70:b6:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4MceuAEz6sdmzajqg4v9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MmE4ZTQ4MmE4MWQ5MGM0NWM0ZDkwYWM2NjhhM2YyMjQ1
YzBkNmQwHhcNMjYwMzI2MTYwMTA3WhcNMjYwMzI3MTYwMTA3WjAzMTEwLwYDVQQD
EygyYTVlN2MwYmQ4NDIxODcxZmUyOGMwNjU3YTU5YzcwMWY5MDM1ZGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyeuUxmbZtxVNFLDTBmYh2+PDLC3
cLnkrLYgOlrggSUUyos24tY5aw0pt8mkd4777vjKMx5h2W+fqbsRkZluMKng5LfN
k7WsHIYyQD+xCI0b5AAxdsPnHi3wvHLHMnUuc4bGW+aY+PwY1Nw91xR6EiXT/u5V
XYZrE5lmeodqEleeIkeSUsfRvlU9xt1L9NFVe3NLMTYtWmlY2TIXzvNNwIF0VccA
iFGg0O0OTRFdsEGp/BJI4EMevMhNgRBuhlhzCvGHSN9G6RFyQEKq264vcgSKJe3I
WI/yp+UiB1h3Wk8Vu3bzG2peRkdw8+BsJXCol3RPuJURzflNgBm/rQM/KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpefAvYQhhx/ijAZXpZxwH5A123MB8GA1UdIwQY
MBaAFEkqjkgqgdkMRcTZCsZoo/IkXA1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NxT1NDcUIyUXhGeE5rS3htaWo4aVJjRFcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iOGVhZGYtODAzNy00ZmFlLThkMmMt
ZTBhM2NiZDA0Nzk2LzEvU1NxT1NDcUIyUXhGeE5rS3htaWo4aVJjRFcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9iOGVhZGYtODAzNy00ZmFlLThkMmMtZTBhM2NiZDA0Nzk2
LzEvU1NxT1NDcUIyUXhGeE5rS3htaWo4aVJjRFcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGeqa80K
Rn5vKfeiqLPeBCXqksrvZu4yR6VvSQFH53XS6G0/kOvV2LsFvRtVcNMH3pRJgPfQ
iWsiQRcwsNVTzUOJoeUXzw8rOnonLSsNxFzpiqaBIUvw79eqfnAqxeLAuYSXzC0F
LAN7Pzsqq8er7eoF+vkNR7t0gvSQ0JSNcSt9JL/Qwhl9E4sByUUfx+qrj9R5sQke
nJcWh8gocQ5wBV2M3ZFrxd5L6ewxYeixSEYJvKY9vcl3inqCZ+GT5zX+627ayTsM
a+YvTpYW5TnfHWVDBwUwHwgUMoIWWkyHHk7BkkG4t5oPBLEI78b7QkyHDRFpJuXO
GTwPddqY63C2YQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:03 2026 by rpki-client