Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
File: p_555OY70WvEI3WStoTQBDPL0PY.mft (raw, json)
Hash identifier: tbxNfzeSKWGqj9wOTJLl8XrDIBukDZcNvdVTIvAGHWw=
Subject key identifier: 1E:85:8E:BB:8F:92:6E:BB:8D:E5:4D:42:BA:09:53:76:41:54:F2:04
Authority key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Certificate issuer: /CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Certificate serial: 01A12BB23A7EF3EF1A35FB341548D3ECE59A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
Manifest number: 0BDD
Signing time: Sun 11 Oct 2026 16:01:02 +0000
Manifest this update: Sun 11 Oct 2026 16:01:02 +0000
Manifest next update: Mon 12 Oct 2026 16:01:02 +0000
Files and hashes: 1: p_555OY70WvEI3WStoTQBDPL0PY.crl (hash: R2NnA+G6pP5P/0usi/WnNpNZZkyemKuleKffz/DV6so=)
2: t0iIVofhtE6TdyzzgrpN-tSCMIQ.roa (hash: WWFMewBWw2qSPW9cnpJJwUD4HilTFFfpXdAQVaL7YzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:3a:7e:f3:ef:1a:35:fb:34:15:48:d3:ec:e5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Validity
Not Before: Oct 11 16:01:02 2026 GMT
Not After : Oct 12 16:01:02 2026 GMT
Subject: CN=1e858ebb8f926ebb8de54d42ba0953764154f204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:e0:ac:21:02:fb:c9:b4:e7:57:cb:bf:61:
0b:32:7e:2f:79:64:53:26:b1:ad:77:29:61:b2:12:
42:51:b4:29:45:70:3b:db:e8:d3:8f:8d:51:7f:c5:
1f:3b:bb:34:b0:f3:ae:bb:f2:3a:05:8f:ff:7b:ed:
61:b4:42:19:3e:e8:57:19:7a:ef:be:34:66:d3:03:
a4:cb:44:63:8d:bb:91:70:96:11:75:db:a3:22:0a:
fb:c2:ae:8f:a1:2b:62:f6:73:f4:e3:c3:be:7e:d8:
b3:09:58:12:f4:a6:5a:3c:84:8b:a7:f0:84:e1:fc:
3d:3f:40:9b:a4:87:89:f0:b1:ad:38:66:00:e0:60:
a4:75:e2:12:07:26:b3:07:1d:b6:f8:eb:00:1d:cb:
aa:14:1c:dc:4c:97:88:68:2a:ca:c1:38:58:c4:fc:
41:0a:65:53:15:bc:dd:3d:22:d2:fc:6b:5b:88:8c:
69:c9:37:4c:37:28:eb:f7:92:3e:56:6a:84:5d:87:
ea:3b:ef:f1:6a:8e:2d:75:88:4a:fc:cd:ca:4d:56:
a1:d1:c3:ee:44:80:b2:f8:f4:b1:73:71:d9:fc:0c:
37:e6:da:76:c5:2c:e8:e9:3f:46:08:a6:57:d8:3c:
d1:19:3a:a2:bd:a7:d3:09:b9:8e:95:19:21:c6:4e:
39:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:85:8E:BB:8F:92:6E:BB:8D:E5:4D:42:BA:09:53:76:41:54:F2:04
X509v3 Authority Key Identifier:
keyid:A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b2:07:ae:76:08:ea:5e:14:b4:f5:e9:32:96:f8:e9:9d:9d:
2e:f4:57:27:24:fd:9f:9a:8d:ab:d0:5f:37:45:26:7c:4f:9c:
22:fa:75:00:06:68:8a:da:63:40:b3:32:47:7d:9f:f3:e1:67:
39:14:01:d5:b6:51:41:ba:0a:38:81:c5:79:41:2c:4b:9b:42:
9e:5e:a0:df:01:f2:81:04:7d:f4:a5:c3:e8:71:59:a8:9d:94:
f6:58:bf:43:0f:93:06:2f:1d:6b:d8:47:c0:ae:48:4d:82:a1:
92:bf:91:33:a7:94:f7:41:00:78:21:5e:80:0f:7d:df:31:5c:
ec:68:b5:47:e6:88:a4:e4:ba:67:39:e3:f5:d3:0c:d1:99:ed:
bd:9a:07:c8:d0:dd:f7:68:34:7d:a9:ec:96:4f:60:c3:0d:ca:
1b:37:28:57:2c:f1:5e:02:7e:5d:f7:6f:0a:0c:f4:6a:bc:b2:
39:08:2c:1a:a9:91:91:83:c5:5e:7f:db:ab:e0:b8:a3:dc:35:
bf:bf:00:8b:1c:b3:13:50:c2:34:31:46:eb:e8:d2:94:21:71:
f5:f5:d2:e3:ba:b2:30:43:ed:f9:88:e3:97:52:e2:1d:fc:ca:
f7:12:71:f0:17:63:69:54:35:a6:8d:4a:65:26:37:57:c7:1a:
3a:64:4e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:31:03 2026 by rpki-client