Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
File: 55XJYXylpqO_8mP8GDeZL9GsR_I.mft (raw, json)
Hash identifier: /ihRT8BJ6m5BrSv1PFNo09qOwYqulcmDh4Fp1Qk+HLQ=
Subject key identifier: D3:9F:9B:8D:BB:3A:D4:0A:70:27:B4:C7:CB:DA:79:D1:C8:27:54:50
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 01A0DF4EB85FFCA41B6BE317D52A88FCF034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
Manifest number: 1753
Signing time: Sat 26 Sep 2026 20:01:13 +0000
Manifest this update: Sat 26 Sep 2026 20:01:13 +0000
Manifest next update: Sun 27 Sep 2026 20:01:13 +0000
Files and hashes: 1: 1-1OC6LmWlkhKJ9j7O2V8uHCIeLQ.roa (hash: pObdATG8V/x1kQuTr2uqeIMaWJhyU9KZK2VfEs01ILg=)
2: 55XJYXylpqO_8mP8GDeZL9GsR_I.crl (hash: WjIfHfGq8n64/h93dsvQo4DOkRGu+yLZ4ypOq8D4Btw=)
3: 8Q0plViYhTMAKVQAAXl5nNj-BBI.roa (hash: Fg0eMhaPWp57qj9BoW/Q3H9dkIdZE5CHVzhDBBdEeZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4e:b8:5f:fc:a4:1b:6b:e3:17:d5:2a:88:fc:f0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Sep 26 20:01:13 2026 GMT
Not After : Sep 27 20:01:13 2026 GMT
Subject: CN=d39f9b8dbb3ad40a7027b4c7cbda79d1c8275450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f5:f3:30:7b:67:17:15:30:6b:47:12:93:56:
11:81:7a:ec:6f:8e:da:8b:b0:eb:5b:01:5d:aa:9c:
8b:19:28:1b:f0:4d:2b:24:1e:2e:ca:0e:c9:97:fb:
ab:a3:9b:81:8c:0f:52:f3:c9:6b:de:2c:20:bf:a5:
11:3e:ba:1a:3d:c0:f1:ad:62:f8:cb:01:91:98:f0:
80:5b:30:86:f8:cb:49:77:14:ee:55:17:9f:f7:f0:
41:bc:a9:2f:36:76:a3:27:1a:a8:64:54:3d:ef:df:
a9:0d:21:10:b4:82:5b:d0:16:16:8f:08:f3:21:b1:
a1:c8:a3:af:ff:23:2f:50:f1:33:9e:44:fa:5b:a4:
20:34:e2:03:32:35:c0:86:48:c6:47:62:95:47:06:
5a:5d:d1:95:9e:85:70:f0:2b:0c:b1:8a:21:de:9d:
0d:91:2e:6c:e5:a1:7d:4b:13:a1:a3:81:ce:bf:dc:
90:cd:4e:0c:26:92:77:c8:c4:b2:df:06:7d:30:82:
0c:2f:da:ee:4a:f4:45:38:f5:3f:4b:9d:80:00:91:
60:b1:9f:e8:30:d2:5a:e5:1a:0e:37:55:44:fa:1c:
bc:9e:1e:38:37:00:b0:61:e6:90:a3:dd:31:de:8f:
19:4a:55:ee:98:5b:0c:06:8f:c1:52:ed:64:6a:22:
84:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9F:9B:8D:BB:3A:D4:0A:70:27:B4:C7:CB:DA:79:D1:C8:27:54:50
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:27:9f:93:e0:e6:5a:9c:36:d4:c6:f4:bf:23:13:45:1c:c6:
c9:45:a4:d6:50:29:4a:a1:a7:d0:2e:f8:d8:ac:0a:4e:96:b9:
8f:92:00:2e:1c:46:74:d8:1b:5e:6b:cd:81:79:dd:f6:8d:3c:
f2:1e:6b:29:f9:a4:71:f4:77:c3:fe:62:1c:04:e7:d2:b7:82:
bc:95:3e:b0:a6:95:f6:c5:87:5c:3c:9c:a6:69:71:5b:66:4d:
44:ff:28:c5:e0:02:86:b6:e2:92:8b:40:b5:1b:61:8f:c7:4c:
e0:35:b4:cd:a4:a7:3d:c8:d6:6c:cc:67:f7:4f:b4:33:64:59:
03:20:cd:cd:6d:c1:62:27:3d:f0:2c:b0:03:63:1e:ea:dd:a9:
47:e8:4b:8e:9e:2b:08:f3:e8:56:65:cb:86:7d:8f:ea:a1:1c:
b5:aa:04:93:d5:44:74:5c:59:84:11:25:be:e9:53:f2:4f:ce:
cd:40:91:08:c7:ed:34:00:0d:61:97:a9:61:f7:d5:21:07:df:
c7:27:2f:50:43:a0:a2:94:92:b8:f3:9c:8d:5c:0c:eb:1b:ee:
65:c0:1c:49:87:2d:34:c4:e1:bb:b7:60:b3:b7:50:a8:f7:a3:
ba:05:db:38:ee:36:18:a6:c7:83:19:68:25:cf:3d:4a:b3:57:
bb:2c:0f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:29:17 2026 by rpki-client