Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
File: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json)
Hash identifier: 5Td+91t/YhLCQkA9WbRNMXKqrOQ5rlJaGNuix2ESJjs=
Subject key identifier: 42:4C:5D:EA:F5:23:07:46:D6:4B:BB:F1:6C:62:E5:97:0D:24:76:F0
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Certificate issuer: /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial: 01A0CDEC8CAF731C22351A75308E06326A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
Manifest number: 11F3
Signing time: Wed 23 Sep 2026 11:00:26 +0000
Manifest this update: Wed 23 Sep 2026 11:00:26 +0000
Manifest next update: Thu 24 Sep 2026 11:00:26 +0000
Files and hashes: 1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: GqWtbSBnrNU2DrJuKGeNUkz46LRH1vEO/5Zi7/5Vzak=)
2: KFS9AT9Dh5IYqtvylPcHNAxeD1Q.roa (hash: aPsZ9SwAfwr9bP1Lvnapo0qJgXtXh+rAUimtLCb9z5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:8c:af:73:1c:22:35:1a:75:30:8e:06:32:6a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Validity
Not Before: Sep 23 11:00:26 2026 GMT
Not After : Sep 24 11:00:26 2026 GMT
Subject: CN=424c5deaf5230746d64bbbf16c62e5970d2476f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:b6:c9:a4:ba:95:fc:e1:57:68:95:33:00:
34:f9:3c:0a:ca:c1:cb:da:70:1a:48:12:74:51:16:
9b:ba:4e:2f:76:36:28:d6:1f:d1:21:55:c9:11:87:
4f:2b:0f:cc:1d:32:c4:cf:81:1a:d6:20:d7:db:1c:
21:6d:b8:2d:00:c6:44:79:9c:f9:f7:97:fd:d7:69:
94:c7:27:d9:35:d6:e7:61:44:75:75:01:24:c1:f3:
30:42:a7:7b:64:49:4e:55:c5:4a:76:ff:09:db:8a:
5d:93:73:8e:50:80:07:c7:f5:de:a5:ed:fa:26:3a:
44:24:8f:c6:49:4b:1c:3e:6c:72:9d:44:b9:b7:c4:
e2:f3:38:a1:4a:53:ca:de:ed:18:95:11:75:73:e8:
25:2c:76:3c:a3:a7:39:2b:27:c4:95:eb:70:b4:42:
3a:17:e9:5e:23:7e:1d:84:2d:57:67:0a:e1:53:bc:
23:a3:c5:ae:c2:d0:c4:2b:b8:4c:ce:94:72:6d:5a:
aa:80:d4:55:c3:67:89:9b:8e:8e:05:17:64:3b:2f:
a6:dd:d3:4c:e2:2b:0a:9b:d8:ce:4e:de:30:9b:35:
23:69:eb:27:73:40:3a:5a:b6:98:4b:98:76:55:14:
e1:b2:29:33:0c:8b:6a:13:4a:5a:b6:09:d7:5e:a1:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4C:5D:EA:F5:23:07:46:D6:4B:BB:F1:6C:62:E5:97:0D:24:76:F0
X509v3 Authority Key Identifier:
keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6b:22:f8:b3:5d:45:07:59:44:b7:4f:03:a9:dd:a4:84:a2:
63:ce:23:b3:bd:55:4f:1e:e1:8b:17:20:46:25:d5:7d:a3:2d:
b8:7a:8c:fa:70:e3:0b:ea:31:21:fb:23:a3:39:91:61:06:d9:
44:1e:56:dc:b2:ce:de:44:06:5e:98:32:4d:30:25:dc:37:e3:
c9:73:9e:9e:d7:38:cf:35:f0:38:10:48:79:5d:c3:9f:c3:eb:
6a:e2:87:47:bb:5a:87:5e:20:a7:00:7e:16:79:5d:f6:02:3e:
42:5b:e0:83:35:30:97:2f:82:a6:d1:d3:03:ef:42:68:4c:05:
60:62:a6:90:52:54:34:bf:5a:5b:d3:a7:2c:5b:88:28:09:33:
70:b5:5a:f9:c1:5a:79:1e:a0:26:b5:b8:de:05:99:33:e9:de:
c3:70:92:30:62:24:df:af:c7:b1:60:25:50:ff:3c:55:80:3c:
35:17:07:86:36:48:65:60:46:b8:cc:d1:46:52:05:93:03:64:
9e:e2:77:f0:03:00:c3:15:23:8b:21:c2:52:64:d9:14:be:9e:
0a:32:66:f6:cf:6c:d4:5b:dd:ff:98:ab:63:e9:ca:86:2f:5c:
62:c4:b2:87:7c:ca:9e:02:28:ef:9f:9e:a2:d8:8b:6f:d9:ac:
b3:31:f0:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDN7IyvcxwiNRp1MI4GMmoWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MjRhODNmZmYyZjAwMGU5OWMxZjI4ZWMxOTY0ODk4NmY4
ZGRjMzcwHhcNMjYwOTIzMTEwMDI2WhcNMjYwOTI0MTEwMDI2WjAzMTEwLwYDVQQD
Eyg0MjRjNWRlYWY1MjMwNzQ2ZDY0YmJiZjE2YzYyZTU5NzBkMjQ3NmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8C2yaS6lfzhV2iVMwA0+TwKysHL
2nAaSBJ0URabuk4vdjYo1h/RIVXJEYdPKw/MHTLEz4Ea1iDX2xwhbbgtAMZEeZz5
95f912mUxyfZNdbnYUR1dQEkwfMwQqd7ZElOVcVKdv8J24pdk3OOUIAHx/Xepe36
JjpEJI/GSUscPmxynUS5t8Ti8zihSlPK3u0YlRF1c+glLHY8o6c5KyfEletwtEI6
F+leI34dhC1XZwrhU7wjo8WuwtDEK7hMzpRybVqqgNRVw2eJm46OBRdkOy+m3dNM
4isKm9jOTt4wmzUjaesnc0A6WraYS5h2VRThsikzDItqE0patgnXXqEbuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJMXer1IwdG1ku78Wxi5ZcNJHbwMB8GA1UdIwQY
MBaAFNUkqD//LwAOmcHyjsGWSJhvjdw3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVNTb1BfOHZBQTZad2ZLT3daWkltRy1OM0RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kYmFmY2QtYTUxZC00NDZiLTljZDct
NDRkNDBkMWM0NmQ1LzEvMVNTb1BfOHZBQTZad2ZLT3daWkltRy1OM0RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kYmFmY2QtYTUxZC00NDZiLTljZDctNDRkNDBkMWM0NmQ1
LzEvMVNTb1BfOHZBQTZad2ZLT3daWkltRy1OM0RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsmsi+LNd
RQdZRLdPA6ndpISiY84js71VTx7hixcgRiXVfaMtuHqM+nDjC+oxIfsjozmRYQbZ
RB5W3LLO3kQGXpgyTTAl3DfjyXOentc4zzXwOBBIeV3Dn8PrauKHR7tah14gpwB+
Fnld9gI+QlvggzUwly+CptHTA+9CaEwFYGKmkFJUNL9aW9OnLFuIKAkzcLVa+cFa
eR6gJrW43gWZM+new3CSMGIk36/HsWAlUP88VYA8NRcHhjZIZWBGuMzRRlIFkwNk
nuJ38AMAwxUjiyHCUmTZFL6eCjJm9s9s1Fvd/5irY+nKhi9cYsSyh3zKngIo75+e
otiLb9msszHwYw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 17:25:22 2026 by rpki-client