Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
File: p_555OY70WvEI3WStoTQBDPL0PY.mft (raw, json)
Hash identifier: yLklnYcEJH4nRBUk0j23SiymjHlSa+4neh+EgSKB5M8=
Subject key identifier: 6D:F8:BD:21:B8:37:52:C0:AB:43:B6:1A:24:34:FD:30:FD:A9:8B:E4
Authority key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Certificate issuer: /CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Certificate serial: 019D98F4D21DF0760CFB3149B6BA6BE9F2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
Manifest number: 0A03
Signing time: Fri 17 Apr 2026 01:01:14 +0000
Manifest this update: Fri 17 Apr 2026 01:01:14 +0000
Manifest next update: Sat 18 Apr 2026 01:01:14 +0000
Files and hashes: 1: p_555OY70WvEI3WStoTQBDPL0PY.crl (hash: 2g6EyBcE5UXe47m6+WoT0bIL/OsRqZESawjS3lWi+jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:d2:1d:f0:76:0c:fb:31:49:b6:ba:6b:e9:f2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Validity
Not Before: Apr 17 01:01:14 2026 GMT
Not After : Apr 18 01:01:14 2026 GMT
Subject: CN=6df8bd21b83752c0ab43b61a2434fd30fda98be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:d8:ce:d3:df:c2:71:29:38:13:ab:6d:71:
36:58:9e:93:07:ed:88:76:72:e3:2c:a0:ca:5a:59:
74:8e:58:f9:ab:1b:16:85:2a:90:65:ff:bf:30:27:
0d:f4:78:4c:94:67:62:fe:0c:60:8b:f0:e7:f7:4c:
e0:ea:83:14:84:41:fb:3f:a6:70:2b:33:88:b6:39:
c4:22:21:0f:5c:04:e1:6a:89:4f:90:72:ae:2b:ae:
f3:11:af:bf:25:a4:6c:88:9b:ce:a5:c7:07:14:e0:
7d:02:34:ec:5b:70:d8:e5:4f:49:24:00:fa:0b:71:
48:e7:aa:e9:d4:28:5d:a7:e5:ed:60:83:a4:4d:63:
7e:c5:94:17:1e:64:43:99:a8:8d:de:4a:7d:22:4d:
f2:85:16:4c:f4:c6:3a:02:46:ef:ce:98:47:2e:26:
5a:42:54:df:c2:16:9a:fe:08:67:ca:5b:4d:7c:1c:
72:2f:b1:c9:c8:0c:90:8a:3a:d0:bd:10:4d:5f:1b:
02:39:16:2f:97:f7:33:43:93:90:80:39:57:26:8d:
d0:5e:66:45:52:21:fc:ae:c5:2d:84:bd:44:a2:bd:
04:ed:c5:a5:d5:b5:c0:90:4b:18:97:49:0e:09:b0:
00:91:db:22:c1:cf:87:4a:74:60:49:c8:83:bc:67:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F8:BD:21:B8:37:52:C0:AB:43:B6:1A:24:34:FD:30:FD:A9:8B:E4
X509v3 Authority Key Identifier:
keyid:A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d6:e4:09:41:a4:c4:c4:a0:41:25:0f:c0:12:71:67:1a:17:
65:0d:ca:35:c3:2e:2f:94:27:c7:ad:3f:bb:6b:9e:82:36:6d:
ac:f5:a9:60:c6:d4:6d:0e:05:6e:e3:59:6a:c4:b6:06:bd:55:
e5:ac:fc:10:9b:70:d1:d9:d9:a6:22:17:ca:5c:17:d9:6a:0d:
d7:f8:93:84:63:96:06:4d:85:9d:8f:6d:1b:b8:85:2b:af:04:
fa:33:08:41:bd:35:fe:a2:0b:97:cb:56:a1:c3:f3:0a:97:db:
00:ef:cc:5b:b0:c4:a2:50:6b:b7:9f:8f:ae:c0:f9:73:82:39:
76:e0:93:e0:52:9d:60:ce:7f:07:cf:3a:59:2f:42:b7:e6:02:
b4:b0:f4:82:da:ae:f6:55:ac:da:40:c0:43:e3:d4:dd:af:e3:
03:f7:a9:27:6f:b6:ff:f4:84:b0:a4:aa:dc:b8:49:28:5b:93:
a3:5f:9c:59:e7:45:58:f9:e7:0e:03:d0:65:45:b4:25:04:1f:
4d:12:2a:c1:df:1a:60:ac:41:4a:7a:e5:44:f6:ae:5a:5e:1c:
83:f7:5a:48:b4:0d:9f:0f:4a:b6:e3:07:85:1a:2b:ff:12:5d:
d7:e6:99:96:00:31:a7:05:41:6b:60:b0:de:d8:67:f5:3a:3e:
5c:cb:32:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:16 2026 by rpki-client