Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
File: sSQfEp2_xKFlH-zboDEI_NLMHfI.mft (raw, json)
Hash identifier: 55TYwiiTO6UsJ14CEbwOjKBJuNVGlIfoejue3v1Oop4=
Subject key identifier: 4D:1C:67:62:12:1D:FB:5C:44:56:FD:CD:51:BD:03:C4:63:FB:F6:CF
Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
Certificate issuer: /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Certificate serial: 019D2771BE20526FCBBD9966E73F519CA62E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
Manifest number: 0C31
Signing time: Thu 26 Mar 2026 00:00:58 +0000
Manifest this update: Thu 26 Mar 2026 00:00:58 +0000
Manifest next update: Fri 27 Mar 2026 00:00:58 +0000
Files and hashes: 1: WVWzNQBj7seo8FjvmhSj1kI6sP0.roa (hash: LoWAtshb113BC94Wt1I33mRTXma6WTQ9kgqJ5YaRPcM=)
2: imh_l3g4l-v4ARvrB47zBr6npYc.roa (hash: +4LHZfbwAtdvhA+phsNIwxwF9nTHU9oJ87vaM1DwuoA=)
3: sSQfEp2_xKFlH-zboDEI_NLMHfI.crl (hash: YJOS1tkO5tP0ahyexWP8Wvv50u41zw2MU/fIygG9wDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:be:20:52:6f:cb:bd:99:66:e7:3f:51:9c:a6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Validity
Not Before: Mar 26 00:00:58 2026 GMT
Not After : Mar 27 00:00:58 2026 GMT
Subject: CN=4d1c6762121dfb5c4456fdcd51bd03c463fbf6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:77:f9:fe:34:e4:aa:4f:bb:e2:b9:71:f4:
7c:9e:ad:42:7b:b6:78:8d:59:ab:83:e3:d1:95:f2:
a3:82:fb:3f:fa:47:72:93:5c:dc:2e:32:5d:61:d3:
e9:73:66:e9:3c:d8:51:63:65:69:a8:50:0b:c7:df:
ce:55:99:e7:01:8c:83:20:d7:34:7a:51:0b:ef:3b:
32:94:39:c6:b4:62:dc:04:84:df:ca:a8:97:f7:3a:
ab:be:12:30:fb:54:e7:f3:ba:56:04:b0:49:26:89:
a6:58:51:af:59:bc:94:ea:1e:19:d4:0d:94:35:76:
20:78:7e:9e:5b:54:82:5e:88:2e:57:b6:72:fa:fb:
c6:47:f4:a7:8b:de:2d:fd:27:b9:54:ec:8c:22:33:
29:9d:9c:0a:ed:3e:34:51:6c:df:6b:fe:88:a0:05:
20:6d:97:9f:31:99:f5:47:07:bf:c1:e9:32:a4:d3:
b5:49:96:7c:d5:09:cc:30:0d:3d:da:99:7b:c2:73:
d9:83:26:6f:1f:b6:65:88:31:97:64:04:b4:9c:14:
99:ca:c9:27:f9:2f:ba:73:8c:66:63:f7:6b:3a:c3:
02:b7:b6:86:38:5a:46:57:0c:30:1d:e8:8a:8a:be:
27:d0:1e:f3:47:3a:7d:a8:cf:42:c9:04:53:0d:52:
41:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1C:67:62:12:1D:FB:5C:44:56:FD:CD:51:BD:03:C4:63:FB:F6:CF
X509v3 Authority Key Identifier:
keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:de:c3:f7:6f:30:78:a8:58:3b:bb:36:e3:a8:d1:a8:72:19:
38:84:38:7d:d4:e3:c9:fd:8e:0e:10:aa:06:f5:00:e4:28:c3:
19:88:9d:f7:cb:89:b0:c3:97:c5:fc:7f:43:e0:94:2f:ec:2e:
e2:2a:85:d9:16:0e:57:1e:e9:cf:5c:0e:7d:21:d8:f9:d2:14:
02:fc:4f:52:63:25:76:3f:99:11:07:85:e0:1d:75:4f:57:19:
2a:d2:38:dc:4c:ae:80:0c:1c:ee:66:52:21:f1:85:3a:66:35:
db:74:2f:3f:50:02:68:38:f5:65:4b:13:92:88:21:85:5a:0a:
3c:ee:3d:93:f0:bb:4e:9b:c3:0b:d1:6c:3a:3b:de:b1:64:89:
c3:2a:c4:b8:e4:8b:5c:21:79:d0:90:34:eb:16:0b:7a:41:12:
d2:58:f1:0e:76:3b:6f:13:2b:65:61:8b:f0:4e:c6:65:d5:c3:
c7:e1:26:41:06:d0:93:1a:c8:0b:c0:1e:27:64:aa:ff:9d:68:
8a:52:c0:d6:5f:56:fd:25:18:e3:26:e8:cf:81:5e:10:85:9c:
72:ab:d0:b8:c9:f8:64:54:d1:d1:af:cc:71:6c:1d:86:5f:f1:
60:b5:d2:26:37:a3:4c:4a:41:d9:75:b5:e9:eb:1c:52:e6:83:
bf:50:21:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:10 2026 by rpki-client