Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/2/559992E9723DF6CBA0618FF60190728D55026CCA.mft
File: 559992E9723DF6CBA0618FF60190728D55026CCA.mft (raw, json)
Hash identifier: NCvTYpK9yqpwyLVALBY3guVXkcXXGcLYHi5mEIkDaDk=
Subject key identifier: 18:54:25:A6:11:52:EC:17:F6:9B:25:A6:BF:3A:CC:7E:9A:89:3E:E3
Authority key identifier: 55:99:92:E9:72:3D:F6:CB:A0:61:8F:F6:01:90:72:8D:55:02:6C:CA
Certificate issuer: /CN=559992e9723df6cba0618ff60190728d55026cca
Certificate serial: 22539DC995EAD04B94DC50F967F1707492B2D751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZmS6XI99sugYY_2AZByjVUCbMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/2/559992E9723DF6CBA0618FF60190728D55026CCA.mft
Manifest number: 5D
Signing time: Tue 28 Jul 2026 07:29:50 +0000
Manifest this update: Tue 28 Jul 2026 07:24:50 +0000
Manifest next update: Wed 29 Jul 2026 10:32:50 +0000
Files and hashes: 1: 559992E9723DF6CBA0618FF60190728D55026CCA.crl (hash: uOgu/LOtl5TzOQi76uhy6Zw4Bx6wSOJuFBBJo2kQ6NA=)
2: AS198078.asa (hash: fDa05p/Agsdsrc9Fnyp/NPUFhpGq6mLJCII8lchSl+U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/2/559992E9723DF6CBA0618FF60190728D55026CCA.crl
rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/2/559992E9723DF6CBA0618FF60190728D55026CCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZmS6XI99sugYY_2AZByjVUCbMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:53:9d:c9:95:ea:d0:4b:94:dc:50:f9:67:f1:70:74:92:b2:d7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559992e9723df6cba0618ff60190728d55026cca
Validity
Not Before: Jul 28 07:24:50 2026 GMT
Not After : Jul 29 10:32:50 2026 GMT
Subject: CN=185425A61152EC17F69B25A6BF3ACC7E9A893EE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f8:2e:26:e4:83:33:ce:03:66:f0:d8:d7:04:
83:cb:f4:6a:4c:69:0c:05:fd:02:f3:6c:42:81:d0:
5d:91:ec:d4:f8:a1:98:13:00:46:d1:78:15:57:f4:
7c:26:b4:24:35:3e:ba:5d:7d:60:5b:31:34:56:ec:
b9:47:9a:08:7a:a4:94:21:f6:90:2c:40:ce:c9:f6:
26:85:51:e2:fe:02:4b:b3:49:ae:5b:61:5b:95:35:
bc:e7:9f:d9:64:d1:50:1c:19:dd:63:34:53:a9:1f:
64:e9:4c:57:59:79:d0:d6:f7:58:f2:ad:2b:38:cb:
29:ac:db:e1:61:4a:7f:a8:ea:e9:23:6e:f2:7c:0d:
a5:ea:3a:50:4e:92:46:73:87:ec:ee:ed:a7:fa:1f:
ae:22:be:a0:d2:b9:af:bf:b0:9a:b4:fd:f7:62:0f:
e1:4a:34:b4:85:59:05:32:71:f5:87:ed:c5:f6:c6:
2f:86:72:5e:b9:3e:74:9f:8c:a4:72:e3:00:46:58:
fe:67:38:97:fc:9a:0e:36:5f:0b:1c:1c:4f:e2:58:
5e:d2:88:4d:b6:e6:fe:77:cb:3b:dc:a3:77:83:29:
6e:c7:a3:b4:7b:da:4d:ee:1d:c3:76:92:1c:c9:51:
f3:a0:d8:10:5e:8f:e2:b6:17:6a:b2:18:35:a0:e2:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:54:25:A6:11:52:EC:17:F6:9B:25:A6:BF:3A:CC:7E:9A:89:3E:E3
X509v3 Authority Key Identifier:
keyid:55:99:92:E9:72:3D:F6:CB:A0:61:8F:F6:01:90:72:8D:55:02:6C:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/2/559992E9723DF6CBA0618FF60190728D55026CCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZmS6XI99sugYY_2AZByjVUCbMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/2/559992E9723DF6CBA0618FF60190728D55026CCA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:71:10:23:e8:32:cd:20:a9:09:54:b0:fa:8c:e6:1b:3f:39:
cf:5b:85:95:5e:81:51:62:6e:18:0c:07:03:50:96:e5:8e:ef:
1b:59:af:d5:1e:e4:70:bf:23:5b:f6:3b:ad:d0:92:02:09:fb:
59:3c:3a:fc:22:61:23:3f:b2:11:71:cc:ee:96:63:6d:c7:37:
a6:cc:ea:bf:6a:79:c6:27:78:35:61:da:46:fb:61:9e:a6:48:
43:fb:e4:8d:d4:f0:7e:ed:cc:3f:ee:2b:32:ab:0b:39:12:0b:
ab:2d:b8:94:f6:a4:05:30:80:a8:af:e6:95:8b:39:90:fa:fe:
eb:f7:7c:bd:5e:dd:a6:5f:00:2e:05:48:b8:9f:f5:1f:91:d0:
44:14:4c:d6:4d:66:9f:99:2f:c4:9c:e6:d4:74:cd:01:82:38:
43:79:bb:55:bc:ee:69:91:1f:4f:55:6a:6b:b2:ec:da:3a:3a:
af:f4:11:8f:52:aa:a7:c8:b6:73:6f:e8:85:9a:39:79:4a:43:
eb:71:81:53:a2:44:30:af:bb:e2:7c:3c:f1:bc:6a:b3:f0:99:
ab:42:34:94:e3:d7:d0:22:fa:2f:35:d6:97:a2:06:0d:6e:84:
af:a9:d2:94:bd:3b:e4:6b:ea:6d:01:7f:09:39:60:2f:65:96:
ac:ad:25:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:37:03 2026 by rpki-client