Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier: HuuGDpcyyGYVDaloCbxM9oZYPkJ3WEqV5+vKoz0Usag=
Subject key identifier: 22:2D:3C:82:DC:9C:7F:43:15:D9:5C:99:7E:D8:4E:5F:42:04:32:A1
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial: 01A0C8580826C89E54DCDDA28E5ECA3817B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number: 0F39
Signing time: Tue 22 Sep 2026 09:00:07 +0000
Manifest this update: Tue 22 Sep 2026 09:00:07 +0000
Manifest next update: Wed 23 Sep 2026 09:00:07 +0000
Files and hashes: 1: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: rbu9J2zO2KBIzsyErt1Eu51IAcailq37rVTNBiyUG2g=)
2: 9SyzUnhmTlTJs5-Xn7cO2eyXMsA.roa (hash: 2gNqd/WCXuzG4uv+GgfK3/vw/CmTadqijVQ5eKcLJXU=)
3: nSQSUiEOU-zHAWMn8ZKwogzTrM8.roa (hash: AC48o16lY1gJTiGIXk1jqfPVhEWM02EA+wJRG7sg7HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:08:26:c8:9e:54:dc:dd:a2:8e:5e:ca:38:17:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Validity
Not Before: Sep 22 09:00:07 2026 GMT
Not After : Sep 23 09:00:07 2026 GMT
Subject: CN=222d3c82dc9c7f4315d95c997ed84e5f420432a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5f:69:eb:de:07:23:34:50:dd:9f:bf:98:3a:
b6:ce:7c:81:16:dc:79:2d:c7:4b:1f:64:df:de:2e:
ee:a8:d3:a4:5a:69:46:23:f3:d5:b6:39:41:1f:82:
e7:f9:16:19:87:11:8c:7e:7c:2b:d5:65:fe:17:2f:
b6:05:0c:08:f9:f6:07:f9:b1:e0:8f:bf:16:19:a5:
e0:17:23:01:72:99:3c:22:3a:d2:5d:dc:ae:50:5b:
73:b4:62:eb:61:b3:e6:d0:44:b6:20:6e:83:cf:5c:
a6:ad:07:13:c0:bd:49:a3:2a:86:08:4c:f9:1a:33:
03:b5:f9:9b:65:37:2b:69:9d:4f:a4:fc:c1:04:8d:
20:32:62:57:fa:ff:fc:1b:d4:f6:ea:48:9a:90:51:
0d:c7:39:62:83:56:ce:e7:6a:aa:96:92:df:13:be:
8e:76:0b:b9:4a:cc:f0:1b:32:d7:13:cf:74:71:67:
6d:4c:74:54:23:22:b8:6e:43:0b:ca:67:38:5c:3a:
68:98:48:7f:03:2e:43:63:2b:7f:70:09:61:c6:d6:
03:6b:c6:08:b2:44:19:90:99:29:89:de:4e:6a:e4:
87:05:8a:09:12:5f:45:19:79:06:19:20:5c:9d:69:
e7:a4:cd:c2:b5:b9:22:31:b2:58:6d:bc:6c:29:39:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2D:3C:82:DC:9C:7F:43:15:D9:5C:99:7E:D8:4E:5F:42:04:32:A1
X509v3 Authority Key Identifier:
keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2b:f1:87:6d:c0:ec:f6:a0:d5:4d:4c:fa:d6:5f:25:01:49:
b8:53:e1:ae:49:d6:ee:fb:a4:4e:38:01:c2:1a:06:21:8f:a3:
37:f3:90:09:08:75:06:23:c4:cd:3f:a4:89:03:f0:17:e7:e9:
33:a5:c2:51:10:52:c6:67:22:f5:89:1c:79:3a:a5:ca:5c:8d:
15:97:f4:12:06:99:d4:56:d3:4e:b1:47:1d:dd:2f:15:0f:bd:
d3:5e:32:ba:be:c9:85:98:d6:32:c2:64:23:ff:f6:3e:3c:c8:
7e:7d:c8:00:3f:d6:fe:ec:97:e1:7f:0b:1d:54:c7:96:b7:87:
ab:18:8e:1e:51:6f:a5:9b:01:75:4e:fe:3c:1b:e8:13:33:6d:
06:3b:fe:ad:b3:12:49:8b:9a:19:e4:0c:a3:6e:5e:4b:08:27:
4a:bf:23:4d:36:1d:10:cb:e5:9d:0f:44:b2:f7:2e:1e:db:f2:
1f:9c:32:c1:cd:28:bd:f3:01:4c:1f:53:32:71:bf:60:66:84:
7a:53:c0:cb:83:05:11:08:5b:c8:b5:2d:54:0e:04:70:7d:0c:
bc:15:9e:41:3d:94:ad:a9:09:06:b9:94:15:c8:b4:10:4e:50:
c3:fe:21:01:58:d9:0e:23:89:79:af:ce:ff:ae:27:9e:74:33:
3e:63:d4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:27:16 2026 by rpki-client