Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: klrcX1aO7I2jteMOm7xr3bG25PxYVv4bPoW3jvz+/fU=
Subject key identifier: FC:D7:3F:7F:53:8A:A5:4F:F2:95:59:2B:ED:C3:C2:BF:63:D9:F2:A2
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 019F8F7E5A636A817EB87049B6C84B2E0BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 0554
Signing time: Thu 23 Jul 2026 15:00:50 +0000
Manifest this update: Thu 23 Jul 2026 15:00:50 +0000
Manifest next update: Fri 24 Jul 2026 15:00:50 +0000
Files and hashes: 1: 01o9QMK5i2W56VtXZmgzP-ILrQ0.roa (hash: LXimHsOHFBMbCTOin8TpUsouIX59ySFRAHVGtSHFCUU=)
2: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: 3nq0hDgxOHcoTUIlsZCx3WvgBbcZlFr7G9P220iPfBU=)
3: 56DqMz97HUtongb-LYKLfwuTWh4.roa (hash: ogBhrs4GCRrendagpUDedYundQuUrPiR+N6SxNY/RzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:5a:63:6a:81:7e:b8:70:49:b6:c8:4b:2e:0b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Jul 23 15:00:50 2026 GMT
Not After : Jul 24 15:00:50 2026 GMT
Subject: CN=fcd73f7f538aa54ff295592bedc3c2bf63d9f2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:ba:a3:99:74:12:a3:74:3a:41:bb:b0:b8:
df:af:a3:8a:f3:a3:c9:68:05:b5:19:48:7a:44:52:
dc:21:52:a7:79:c1:d9:d3:e2:98:d4:8e:67:82:c0:
b6:01:89:96:cc:9b:70:40:47:22:55:6d:12:a5:e6:
e4:f3:1b:8a:22:cf:5d:de:f3:b5:79:ef:b9:b0:38:
d7:31:9b:c9:e8:80:4a:50:b2:02:a5:bc:ce:c4:85:
78:4c:9d:8c:61:51:51:eb:99:47:84:70:a7:16:f8:
c7:7e:27:12:49:ce:d6:bf:32:71:b6:35:b5:95:54:
3b:b3:29:e6:27:b0:a0:c0:e0:31:d0:23:a6:26:31:
15:4c:11:73:d9:af:62:d1:0c:f6:b8:65:86:e6:67:
bd:bc:90:da:f5:a0:db:f0:17:79:de:ac:4f:48:80:
c7:55:35:47:89:71:8b:48:74:57:aa:58:0d:3b:15:
b4:c1:f7:79:7e:dd:ad:6d:b4:bc:6e:89:12:53:d5:
d9:9a:1e:13:69:f2:48:b5:10:10:57:92:80:f5:f7:
61:1e:60:1a:df:5c:21:f0:a5:b4:38:5b:46:e5:60:
58:4b:be:93:cd:4d:1f:db:d2:4e:6d:e1:1a:5c:87:
67:9e:27:00:74:c9:4e:14:df:6c:a0:b8:63:81:f0:
8a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D7:3F:7F:53:8A:A5:4F:F2:95:59:2B:ED:C3:C2:BF:63:D9:F2:A2
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:dd:17:9b:3f:47:6f:f3:e4:a4:06:e5:ec:b9:01:6c:19:f0:
c1:e5:f5:26:74:5b:d2:f1:71:0b:b7:7f:b0:95:ac:04:d9:f2:
62:01:4f:9f:f9:75:bd:fb:aa:b3:50:a6:cc:0d:2b:4d:19:24:
80:17:33:92:16:e8:81:75:8c:aa:86:28:23:5c:27:11:b5:69:
59:1a:11:17:c3:36:3b:cc:b8:f6:36:0d:5f:47:bd:32:89:b7:
ba:7a:c2:38:cb:72:46:89:b9:78:71:f1:7c:58:57:f7:00:ad:
41:cc:7a:b1:14:a9:e6:3a:9d:5d:c2:e3:6d:f9:26:83:4a:34:
e6:96:0d:4f:89:2c:66:c8:f1:e2:09:7c:b7:d2:cf:34:da:9d:
b2:9f:8e:2b:13:11:d7:74:1e:d5:97:48:e9:2c:8e:96:41:c1:
d6:6d:f3:9d:3e:ed:19:24:cc:ed:49:f7:fd:6b:c4:fc:7f:32:
34:1d:5b:72:f8:af:20:d7:ac:04:b3:3b:ca:e1:22:5d:af:be:
c2:89:fd:96:73:66:55:24:bc:59:01:a0:03:11:f0:74:85:42:
b3:25:cc:bf:64:ef:9a:d1:95:fc:85:bb:62:90:16:62:82:98:
53:61:aa:38:22:e1:1d:ad:5f:e3:bd:47:ac:5a:37:a0:54:b1:
25:89:02:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:00:35 2026 by rpki-client