Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
File: 55GFFoC3LJaRIl4b82xHJg6iRPo.mft (raw, json)
Hash identifier: O84gfXid+bJPJxEYvI3CHOorcfKtPx94/cK6uBomWHk=
Subject key identifier: B3:80:32:B9:48:9E:0A:D2:9A:CA:5B:0C:12:53:89:E0:31:8B:CF:B0
Authority key identifier: E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
Certificate issuer: /CN=e791851680b72c9691225e1bf36c47260ea244fa
Certificate serial: 019CAAFD88643F9F3B0FC00DB0D720B37B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
Manifest number: 1343
Signing time: Sun 01 Mar 2026 20:01:08 +0000
Manifest this update: Sun 01 Mar 2026 20:01:08 +0000
Manifest next update: Mon 02 Mar 2026 20:01:08 +0000
Files and hashes: 1: 55GFFoC3LJaRIl4b82xHJg6iRPo.crl (hash: 5HeMIT1Z06agKWkBF0p8Qyqm7s9ceKxAMj0Sfu92cCY=)
2: JhK6gKaIDyzXMy7nriH8Zh8Wjc0.roa (hash: rObYpAP50FsAJbWUILnwA87gkFrmltk/+8uJWoHJQsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:88:64:3f:9f:3b:0f:c0:0d:b0:d7:20:b3:7b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e791851680b72c9691225e1bf36c47260ea244fa
Validity
Not Before: Mar 1 20:01:08 2026 GMT
Not After : Mar 2 20:01:08 2026 GMT
Subject: CN=b38032b9489e0ad29aca5b0c125389e0318bcfb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:28:cc:0a:d0:9f:a3:bf:b6:11:19:33:b0:
bf:f1:4f:ee:c0:74:aa:39:ff:ab:26:a7:47:0c:eb:
fa:b7:1d:4f:b3:35:ac:8b:07:0f:ed:b8:60:47:64:
c7:db:88:c5:d5:16:76:02:62:db:d4:9e:a3:83:95:
fa:6c:77:3f:fa:5d:ff:68:34:a3:13:ec:a5:18:06:
16:cf:ba:bb:b3:38:b9:af:76:4b:ec:ec:bb:e1:4e:
8a:63:fe:29:bb:fb:6d:95:75:01:97:57:86:27:a2:
c8:2e:f2:8e:d0:88:7c:5c:a4:dd:f0:e6:3a:61:56:
0b:2c:ed:d4:13:cf:0b:fc:13:07:36:bd:99:85:d8:
4d:12:3a:30:2c:e5:6d:06:bf:4c:b3:9a:f3:10:e4:
c3:dc:12:fd:a0:15:35:32:7b:d0:c2:ed:82:2d:87:
56:04:fd:16:67:a0:2d:3c:2f:c9:84:1b:2e:4a:da:
4b:f5:1e:bd:dd:4a:83:d4:0b:82:dd:37:25:7a:1a:
5d:2b:e2:22:71:bc:df:c5:15:69:c9:e0:ee:30:93:
d9:4b:03:37:7e:15:0f:d3:6d:d0:ce:7f:9a:44:6d:
a3:bd:36:27:b6:f3:c0:ba:84:a6:22:d7:75:13:1e:
6b:7e:d2:48:91:0c:67:9c:d7:80:d4:9b:65:63:86:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:80:32:B9:48:9E:0A:D2:9A:CA:5B:0C:12:53:89:E0:31:8B:CF:B0
X509v3 Authority Key Identifier:
keyid:E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:28:45:2e:ac:e1:33:11:26:f7:49:0f:a4:ee:f4:82:31:1e:
29:73:90:7a:56:cf:09:1d:92:16:04:cc:05:2e:05:43:bd:32:
cc:b7:12:92:a1:a6:20:30:74:e2:49:b5:0a:6a:dc:a7:a6:ae:
09:7f:65:71:7a:91:80:3d:5e:d8:1e:48:68:c6:08:96:d5:b8:
2d:b6:99:8f:db:4b:ac:a1:da:d7:0d:27:28:56:77:67:c2:c2:
49:4d:31:22:cd:c8:dd:90:4a:54:f6:28:1c:31:d4:a7:36:4a:
bc:a9:80:a6:45:7b:1e:9e:fd:4d:88:f6:00:be:e4:d8:9e:69:
0f:46:4a:b5:84:ff:f2:ba:62:ed:48:cf:8a:1e:d0:e0:fa:63:
44:17:b2:57:79:b0:2e:95:8e:28:da:bd:e8:09:e6:00:bd:7e:
11:ee:7b:a7:a3:c6:f5:00:ee:43:47:71:01:16:be:51:e3:3d:
e8:e1:fd:9d:bc:72:7e:04:55:1b:fc:7a:74:e2:f0:7e:48:8e:
fc:e4:34:64:32:d8:bd:07:e3:97:10:1f:95:7d:f0:d0:48:48:
2f:3d:94:d6:89:84:65:f6:8f:db:56:a2:2e:a6:d1:52:8c:24:
0a:ce:ac:83:d8:f2:d9:97:31:e9:92:07:e2:9c:fb:f1:61:43:
5c:5d:87:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:55 2026 by rpki-client