Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
File: 55XJYXylpqO_8mP8GDeZL9GsR_I.mft (raw, json)
Hash identifier: yzacY4wdlwXf7zPp5tRsfKW0tiIcSsTUeAZpz64Xcgo=
Subject key identifier: 7C:F6:48:73:6B:5B:0A:A9:FB:AF:58:7A:13:87:68:E1:2E:B4:A1:90
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 019FA8625CC7BB6FF2A88D85DF5D0C5CEA28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
Manifest number: 16B2
Signing time: Tue 28 Jul 2026 11:00:46 +0000
Manifest this update: Tue 28 Jul 2026 11:00:46 +0000
Manifest next update: Wed 29 Jul 2026 11:00:46 +0000
Files and hashes: 1: 1-1OC6LmWlkhKJ9j7O2V8uHCIeLQ.roa (hash: pObdATG8V/x1kQuTr2uqeIMaWJhyU9KZK2VfEs01ILg=)
2: 55XJYXylpqO_8mP8GDeZL9GsR_I.crl (hash: RwlIpAj8RD5XbxDYRCRpMc4JWO/2hi5raMxzH2LFpek=)
3: 8Q0plViYhTMAKVQAAXl5nNj-BBI.roa (hash: Fg0eMhaPWp57qj9BoW/Q3H9dkIdZE5CHVzhDBBdEeZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:5c:c7:bb:6f:f2:a8:8d:85:df:5d:0c:5c:ea:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Jul 28 11:00:46 2026 GMT
Not After : Jul 29 11:00:46 2026 GMT
Subject: CN=7cf648736b5b0aa9fbaf587a138768e12eb4a190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3a:68:94:4b:70:03:93:8d:c5:3d:22:67:04:
7d:22:15:bd:bb:a7:e2:e0:9d:9a:34:d0:c7:39:59:
83:73:81:25:63:bd:85:73:ea:39:fa:2e:d9:19:cd:
51:f9:41:f1:8d:84:28:cd:1c:f6:97:e9:ef:e1:96:
24:16:45:00:fe:50:1c:dc:ed:da:b8:fd:31:6f:3a:
9f:98:17:59:f8:4d:41:ef:da:40:52:78:a3:64:16:
56:fe:07:80:a3:32:a7:30:f6:9d:40:3b:b1:1f:28:
a2:07:23:c5:3f:9d:98:db:12:99:8c:ee:8d:2a:51:
10:ba:d8:b1:db:70:a9:68:0c:de:0e:53:b7:2e:f5:
91:bf:91:57:0f:c9:86:e4:0c:30:77:44:7a:7b:3b:
40:9a:00:2c:1c:7e:48:59:54:c1:55:94:f1:a3:ab:
20:d9:54:a6:a7:1f:e3:88:0d:be:26:41:9e:e9:27:
6e:e8:23:0a:23:63:67:77:93:40:75:8d:f4:71:8b:
5b:31:82:f8:2e:35:3b:e5:9c:87:c7:b7:01:fe:95:
67:31:f9:73:b2:3a:e5:7f:fb:ef:f0:10:f9:19:83:
e6:40:89:77:a8:97:51:2b:76:09:5d:19:b7:6c:f2:
be:28:6c:4d:96:42:1a:47:7a:22:ab:c2:ad:35:62:
5c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F6:48:73:6B:5B:0A:A9:FB:AF:58:7A:13:87:68:E1:2E:B4:A1:90
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:b5:0f:47:14:7a:b3:d8:5e:dd:11:68:fa:6b:c9:fe:3b:a9:
67:d8:b4:00:f5:88:6c:bc:d5:07:69:26:97:38:da:71:08:4b:
94:d7:2d:76:c9:12:c3:26:4c:bd:87:1d:99:f7:04:3e:01:ba:
a9:8c:10:af:ac:27:09:44:96:ef:8d:00:79:1c:61:db:f9:26:
ad:d1:77:6f:bb:18:93:27:fd:d0:7c:f6:e9:5f:78:4c:75:37:
0f:ab:fc:f0:f0:8a:cc:65:91:2f:9f:9b:b7:66:1e:1c:09:27:
44:ee:d0:0b:d5:67:63:be:11:a7:a3:3b:b4:4e:b1:6d:ba:ac:
88:d1:36:53:0b:8d:9e:7f:5b:9e:19:fd:49:9a:e4:c3:de:de:
ab:9c:a9:d6:0f:a5:9c:37:a4:d1:e6:f2:79:a6:19:4c:83:4e:
92:c3:a6:14:33:89:15:a6:bd:4a:81:f0:f0:fc:17:00:d1:2d:
ec:0c:d8:85:65:00:e8:46:24:eb:59:f4:31:e4:66:12:37:72:
b6:f1:50:36:e9:10:ce:41:a7:e6:75:b2:b3:fb:3a:d1:af:70:
51:0b:b5:21:57:73:8c:7c:0a:cf:19:8f:23:b4:ca:58:4e:2a:
b3:38:aa:3d:b8:bb:b8:8b:97:a1:c5:cf:f0:ef:e1:9c:d4:8e:
55:0c:92:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:00:33 2026 by rpki-client