Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
File: p_555OY70WvEI3WStoTQBDPL0PY.mft (raw, json)
Hash identifier: Tb+kwx08QrBFgrnkv23ZLiAuWZR2XVtzXxD8+5OLuYs=
Subject key identifier: E3:36:6A:E1:D8:20:CF:03:AE:63:23:D2:94:DB:34:B9:52:BA:EA:C3
Authority key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Certificate issuer: /CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Certificate serial: 019CAB6B90807BA6E2FE6592BF63F9B202B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
Manifest number: 0988
Signing time: Sun 01 Mar 2026 22:01:19 +0000
Manifest this update: Sun 01 Mar 2026 22:01:19 +0000
Manifest next update: Mon 02 Mar 2026 22:01:19 +0000
Files and hashes: 1: p_555OY70WvEI3WStoTQBDPL0PY.crl (hash: CtN0DJfprmliRY3i9FID5VuS6J31mYfG3WRGsJTVLf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:90:80:7b:a6:e2:fe:65:92:bf:63:f9:b2:02:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Validity
Not Before: Mar 1 22:01:19 2026 GMT
Not After : Mar 2 22:01:19 2026 GMT
Subject: CN=e3366ae1d820cf03ae6323d294db34b952baeac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:4c:30:06:16:db:82:32:b7:f8:a0:9f:03:
f9:8f:51:dd:7c:de:52:45:48:33:ac:29:a5:e1:39:
a3:fd:41:d7:ea:9e:1d:15:1e:f4:0d:c4:4a:e2:2d:
a4:2c:73:9d:7c:6e:8f:39:83:ec:c6:c2:c1:e9:4a:
93:67:39:c6:a7:61:e4:96:2f:d1:15:71:c9:3c:07:
9a:91:38:c4:fc:8c:e2:f6:0d:7d:fc:24:5f:e9:31:
08:ed:ce:04:6e:db:c3:53:e1:1d:5f:22:15:e8:9b:
80:b3:b5:c5:1f:b3:3a:1f:ea:48:00:e8:3a:c7:49:
ae:ce:07:3e:50:23:53:73:a7:27:cc:a6:be:1f:b0:
5c:e2:6d:a9:d8:01:4e:0c:0d:e6:ad:9f:97:f1:50:
a4:32:4b:46:22:c1:5a:4e:36:df:01:14:80:6b:00:
fd:2e:82:88:5c:5a:ce:21:0f:ab:b1:a7:3c:c4:85:
da:f6:fa:14:64:8d:58:9e:cf:90:b9:23:24:a2:25:
0b:a9:85:26:54:d1:4b:c0:52:75:ef:68:c9:46:e6:
bc:3f:76:e9:d1:5e:be:8d:d9:44:5e:db:1a:d9:5f:
0f:08:e3:21:82:34:95:f1:2f:9e:41:e8:ad:62:da:
90:1e:a5:c7:e0:5c:fb:2a:61:a7:1e:4e:ee:f0:89:
08:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:36:6A:E1:D8:20:CF:03:AE:63:23:D2:94:DB:34:B9:52:BA:EA:C3
X509v3 Authority Key Identifier:
keyid:A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c4:bb:52:27:fe:92:ff:cb:37:a5:4e:f1:e0:07:33:5b:f9:
fa:fa:72:11:06:c8:d3:76:d0:13:f9:01:45:3e:ce:13:3a:91:
7c:94:79:13:c8:67:4c:bd:4a:c9:bd:29:90:1d:43:07:2d:8e:
14:93:06:b3:68:d9:2d:85:fa:ce:5b:a3:67:b7:07:35:af:28:
f5:c2:9b:05:c6:2a:4d:9c:99:28:fa:9d:fd:ac:a1:d5:a1:75:
2b:d0:dc:31:40:c7:d6:5f:c2:bf:44:d8:ae:4b:b8:90:48:bf:
19:e5:88:3b:5f:96:81:4a:60:6f:b3:87:04:3e:19:9e:3c:00:
ca:43:b9:90:2b:3e:37:4c:0e:00:79:b2:33:e9:27:4b:2b:40:
de:5f:a1:aa:a8:75:eb:87:bf:df:c5:85:9e:e3:10:cc:9c:91:
b8:42:c3:49:60:f4:7f:06:0a:aa:f6:57:6a:02:e8:0a:a4:60:
91:61:56:c5:2e:0b:9d:00:78:a5:bf:11:7a:0f:57:87:aa:ba:
1b:1d:d0:1e:6c:ae:47:0c:ac:68:89:00:90:27:81:14:04:af:
e5:aa:77:9f:fa:b3:67:b7:b4:40:34:67:66:36:38:82:9a:66:
86:2d:86:55:ff:e6:e0:13:14:ba:52:90:01:77:3d:f5:ed:cb:
90:ec:2f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:50 2026 by rpki-client