Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.mft
File: 555owUe_lBRH7iBtYPqVYuT0foU.mft (raw, json)
Hash identifier: rwu8Wvl94NscXn6umjXZ7kZNOA11cXZfseqb1UKWXlY=
Subject key identifier: 33:63:FF:E6:67:0C:5F:33:4D:FB:93:94:52:3D:D4:B2:5E:83:72:EE
Authority key identifier: E7:9E:68:C1:47:BF:94:14:47:EE:20:6D:60:FA:95:62:E4:F4:7E:85
Certificate issuer: /CN=e79e68c147bf941447ee206d60fa9562e4f47e85
Certificate serial: 019FA7B5C2046D1FDB8D5838285CB2351E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/555owUe_lBRH7iBtYPqVYuT0foU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.mft
Manifest number: 37
Signing time: Tue 28 Jul 2026 07:52:14 +0000
Manifest this update: Tue 28 Jul 2026 07:52:14 +0000
Manifest next update: Wed 29 Jul 2026 07:52:14 +0000
Files and hashes: 1: 36bkGnZI1sMd2XiaCKELpBZav5c.roa (hash: nPCSCpMlug0UaQ74dIMZciLxdtiMlquYZOOv35McBmk=)
2: 555owUe_lBRH7iBtYPqVYuT0foU.crl (hash: 9TMGUazTtm92DUtXdTXzYdMjESJXlNwV21iabHjuo9c=)
3: A_R0b_SSdzS-ZzdIx4cBZcRS_BE.asa (hash: QT7NxsqQ+bxynk+L0L+GBvKuJwI3nzCN47W2cDY6mWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.mft
rsync://rpki.ripe.net/repository/DEFAULT/555owUe_lBRH7iBtYPqVYuT0foU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:b5:c2:04:6d:1f:db:8d:58:38:28:5c:b2:35:1e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79e68c147bf941447ee206d60fa9562e4f47e85
Validity
Not Before: Jul 28 07:52:14 2026 GMT
Not After : Jul 29 07:52:14 2026 GMT
Subject: CN=3363ffe6670c5f334dfb9394523dd4b25e8372ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c9:f1:5a:25:97:43:d0:d4:82:18:70:92:15:
bf:cb:44:4e:cb:f1:80:84:9d:13:ee:30:7a:9e:02:
0b:5c:e8:13:9d:83:e6:7b:c9:be:43:43:17:3e:ca:
1b:da:2f:bb:68:b2:1d:d2:9c:5a:ea:b2:f5:7c:28:
01:d7:34:bc:7e:59:ed:4f:bd:94:1f:d4:93:ae:8c:
69:97:d0:20:ee:61:b3:a0:a1:1b:a4:71:11:d4:7d:
95:a3:37:13:1a:18:41:a0:f8:34:11:f5:50:8e:ff:
6f:92:29:94:27:49:8e:34:78:37:13:b6:24:86:1c:
81:cf:4b:a5:cc:66:77:40:3e:af:d9:a7:a2:e8:6f:
94:c3:27:13:81:47:42:fd:c3:81:de:b6:db:67:d7:
e8:aa:d4:e6:4f:0d:a1:04:83:30:e7:75:c0:13:f9:
44:e4:04:fe:2f:52:17:fa:ae:7b:9b:3b:90:31:9f:
49:2b:25:44:be:a0:c1:1d:f3:d0:8f:25:6d:da:d1:
ba:37:7c:55:7c:b0:4a:e3:eb:f1:fc:89:ca:85:80:
81:8d:8b:d7:d3:3b:d9:10:4e:01:8f:e2:d6:d4:c0:
6f:bc:f1:4e:b0:15:08:c3:82:af:ca:a0:75:4c:62:
f0:0e:9b:ec:10:a1:91:88:fc:60:7f:2e:2c:e2:5c:
99:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:63:FF:E6:67:0C:5F:33:4D:FB:93:94:52:3D:D4:B2:5E:83:72:EE
X509v3 Authority Key Identifier:
keyid:E7:9E:68:C1:47:BF:94:14:47:EE:20:6D:60:FA:95:62:E4:F4:7E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/555owUe_lBRH7iBtYPqVYuT0foU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:5e:c7:40:6d:7c:87:83:ab:51:77:2b:1a:ad:06:30:7d:f1:
d5:05:0d:37:26:c8:50:67:94:73:dc:37:22:fb:1d:e2:6f:9f:
e6:9c:de:81:da:eb:05:ee:fc:7f:99:42:68:d8:b5:85:5f:2c:
14:37:e7:10:d1:88:76:3a:67:a0:18:71:d5:4a:99:03:da:33:
2c:f9:8e:b7:50:4d:4d:71:f1:51:28:8d:af:13:79:7d:de:3c:
c1:be:c4:60:31:1d:01:9c:de:27:e8:9e:e2:ba:47:ac:58:6a:
9a:bc:52:06:61:60:e3:3c:eb:4a:2a:ef:e2:68:8c:54:cf:1f:
2a:56:17:ec:da:5f:b9:ea:a0:d9:a0:43:03:b6:0f:b5:fa:c0:
f8:53:1e:bd:60:c4:23:59:54:69:51:cb:f7:86:3c:17:58:33:
7b:a7:8e:4e:5f:0f:16:5d:da:4b:59:17:63:d4:84:ab:82:95:
12:3a:01:01:24:0b:60:9c:70:2a:4a:db:8b:0c:0c:b7:d3:1d:
92:8f:1d:b7:7e:89:ac:01:b4:36:5a:aa:e5:77:91:d0:39:13:
f7:3a:bd:5e:4d:26:35:c0:7d:7c:33:ba:22:d2:59:af:61:46:
81:5f:81:ff:c9:bc:06:c3:68:bd:bf:28:05:00:87:c6:5e:e7:
8a:31:84:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:41:59 2026 by rpki-client