Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
File: 55GFFoC3LJaRIl4b82xHJg6iRPo.mft (raw, json)
Hash identifier: +mjuuthtfgTsON7Tj9lFuK9GTquL4nhSKDAlhJJvrBQ=
Subject key identifier: 1E:65:3D:41:F3:6C:AC:D5:81:BC:6E:29:21:C8:2D:0E:7C:CD:02:0F
Authority key identifier: E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
Certificate issuer: /CN=e791851680b72c9691225e1bf36c47260ea244fa
Certificate serial: 01A0C39FEFE32C490CBE67BC9D7ACD78682C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
Manifest number: 1562
Signing time: Mon 21 Sep 2026 11:00:33 +0000
Manifest this update: Mon 21 Sep 2026 11:00:33 +0000
Manifest next update: Tue 22 Sep 2026 11:00:33 +0000
Files and hashes: 1: 55GFFoC3LJaRIl4b82xHJg6iRPo.crl (hash: gm4E7waP2jSNxw1eig2biPQgLRlOpNiiPYltQ+IHGhM=)
2: JhK6gKaIDyzXMy7nriH8Zh8Wjc0.roa (hash: rObYpAP50FsAJbWUILnwA87gkFrmltk/+8uJWoHJQsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:ef:e3:2c:49:0c:be:67:bc:9d:7a:cd:78:68:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e791851680b72c9691225e1bf36c47260ea244fa
Validity
Not Before: Sep 21 11:00:33 2026 GMT
Not After : Sep 22 11:00:33 2026 GMT
Subject: CN=1e653d41f36cacd581bc6e2921c82d0e7ccd020f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:53:52:f3:46:7e:45:64:3a:30:4d:2e:0c:
2f:e7:ba:7f:20:6f:74:9a:37:50:02:99:c8:d4:42:
eb:f6:4d:2d:6e:bf:05:8e:68:eb:e2:03:fc:0a:7d:
3c:31:86:a5:2a:fa:70:81:be:56:6c:d1:f8:18:15:
3b:66:99:eb:1e:77:44:fe:86:fb:87:01:a7:b4:52:
19:f5:f2:e8:77:cc:c7:01:30:a9:fe:a6:27:5e:54:
1c:56:9e:6f:b5:85:40:57:b3:c4:41:1c:5f:4b:ff:
e3:d8:80:ee:e2:87:56:4e:86:e7:a9:88:2c:de:77:
8b:42:53:2a:67:6f:ee:c2:e5:a3:6a:22:02:e8:02:
b1:cc:fc:6a:b4:b1:74:c3:a9:52:d1:b3:50:82:57:
62:6c:49:b6:e7:a4:5a:94:cf:3a:c3:e0:8e:eb:bd:
69:9d:83:81:fb:65:08:a9:ea:d6:68:57:09:cb:e4:
4c:cd:16:cd:4f:83:4b:94:c9:cb:a2:83:87:ce:0e:
df:de:e9:f5:bd:8e:91:4a:4b:71:67:78:b4:f5:a2:
29:1d:06:d0:e7:f2:d0:3f:34:0e:36:98:9c:60:66:
1b:82:7c:1e:f9:46:ce:d7:65:63:a2:a6:bd:00:39:
a7:4e:d7:c4:af:94:fa:d1:46:5d:88:8c:cd:d8:fa:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:65:3D:41:F3:6C:AC:D5:81:BC:6E:29:21:C8:2D:0E:7C:CD:02:0F
X509v3 Authority Key Identifier:
keyid:E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ce:98:08:0f:2f:d6:0b:c1:c4:6f:38:20:19:51:4a:fa:01:
42:a9:f4:0e:69:95:17:a2:c1:df:45:2e:a6:34:0e:92:13:78:
c4:b2:f5:e3:48:af:7f:63:df:59:16:0b:84:fb:8e:84:eb:8b:
d7:29:16:c1:0f:bc:7d:ab:9d:68:47:ed:42:2e:93:2a:75:a1:
9b:68:c3:34:ce:af:9f:ad:e3:7c:6c:95:3f:0e:e9:fd:3c:77:
a8:ac:4d:ce:05:08:08:a7:a4:06:1e:ff:a5:3f:46:4b:1e:6d:
9b:93:0f:b7:72:0e:60:3c:7f:21:f9:d6:67:f2:d3:3a:8b:bb:
20:b3:33:1c:2e:d4:c7:13:24:de:6f:16:62:c1:ea:03:97:29:
a2:3a:6d:a0:9c:e5:00:d3:d0:f5:11:a0:3e:17:ad:c8:e5:dc:
ad:54:9f:f1:dd:33:c9:1b:29:c5:46:9e:12:e1:79:ff:d4:18:
fc:1b:22:f0:63:63:c2:49:43:92:04:87:89:3b:19:14:2e:66:
32:5d:59:b1:c8:79:9d:00:29:6e:fc:a8:d3:39:32:1f:09:ae:
b0:54:07:29:53:5f:88:79:3a:98:b0:7d:c6:93:d2:74:11:2e:
37:bc:a4:31:ab:32:6e:eb:e1:8d:e4:ac:88:84:a8:52:31:c7:
96:5a:b5:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDn+/jLEkMvme8nXrNeGgsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OTE4NTE2ODBiNzJjOTY5MTIyNWUxYmYzNmM0NzI2MGVh
MjQ0ZmEwHhcNMjYwOTIxMTEwMDMzWhcNMjYwOTIyMTEwMDMzWjAzMTEwLwYDVQQD
EygxZTY1M2Q0MWYzNmNhY2Q1ODFiYzZlMjkyMWM4MmQwZTdjY2QwMjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYhTUvNGfkVkOjBNLgwv57p/IG90
mjdQApnI1ELr9k0tbr8Fjmjr4gP8Cn08MYalKvpwgb5WbNH4GBU7ZpnrHndE/ob7
hwGntFIZ9fLod8zHATCp/qYnXlQcVp5vtYVAV7PEQRxfS//j2IDu4odWTobnqYgs
3neLQlMqZ2/uwuWjaiIC6AKxzPxqtLF0w6lS0bNQgldibEm256RalM86w+CO671p
nYOB+2UIqerWaFcJy+RMzRbNT4NLlMnLooOHzg7f3un1vY6RSktxZ3i09aIpHQbQ
5/LQPzQONpicYGYbgnwe+UbO12Vjoqa9ADmnTtfEr5T60UZdiIzN2PqcmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5lPUHzbKzVgbxuKSHILQ58zQIPMB8GA1UdIwQY
MBaAFOeRhRaAtyyWkSJeG/NsRyYOokT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81ZmVjNTUtNGQ0YS00ZmE1LWE3NjQt
NDJiZDkyZjMwYTk3LzEvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS81ZmVjNTUtNGQ0YS00ZmE1LWE3NjQtNDJiZDkyZjMwYTk3
LzEvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH86YCA8v
1gvBxG84IBlRSvoBQqn0DmmVF6LB30UupjQOkhN4xLL140ivf2PfWRYLhPuOhOuL
1ykWwQ+8faudaEftQi6TKnWhm2jDNM6vn63jfGyVPw7p/Tx3qKxNzgUICKekBh7/
pT9GSx5tm5MPt3IOYDx/IfnWZ/LTOou7ILMzHC7UxxMk3m8WYsHqA5cpojptoJzl
ANPQ9RGgPhetyOXcrVSf8d0zyRspxUaeEuF5/9QY/Bsi8GNjwklDkgSHiTsZFC5m
Ml1Zsch5nQApbvyo0zkyHwmusFQHKVNfiHk6mLB9xpPSdBEuN7ykMasybuvhjeSs
iISoUjHHllq1tg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:05:36 2026 by rpki-client