Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.mft
File: 555owUe_lBRH7iBtYPqVYuT0foU.mft (raw, json)
Hash identifier: 8Iw9loRuVyYGd8f3G3H9IXMyXdo12Ic0O2Bk5yP9zzY=
Subject key identifier: 9A:D3:01:C7:62:3A:36:DC:5C:41:56:65:BA:01:21:C2:3A:CE:3E:33
Authority key identifier: E7:9E:68:C1:47:BF:94:14:47:EE:20:6D:60:FA:95:62:E4:F4:7E:85
Certificate issuer: /CN=e79e68c147bf941447ee206d60fa9562e4f47e85
Certificate serial: 019F9022C967244C3076CAA0C70B43DABDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/555owUe_lBRH7iBtYPqVYuT0foU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.mft
Manifest number: 2A
Signing time: Thu 23 Jul 2026 18:00:26 +0000
Manifest this update: Thu 23 Jul 2026 18:00:26 +0000
Manifest next update: Fri 24 Jul 2026 18:00:26 +0000
Files and hashes: 1: 36bkGnZI1sMd2XiaCKELpBZav5c.roa (hash: nPCSCpMlug0UaQ74dIMZciLxdtiMlquYZOOv35McBmk=)
2: 555owUe_lBRH7iBtYPqVYuT0foU.crl (hash: Krk2oWql5sY4iEowEGkmvnd3+gX3U3rJNUcY6/T09YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.mft
rsync://rpki.ripe.net/repository/DEFAULT/555owUe_lBRH7iBtYPqVYuT0foU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:c9:67:24:4c:30:76:ca:a0:c7:0b:43:da:bd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79e68c147bf941447ee206d60fa9562e4f47e85
Validity
Not Before: Jul 23 18:00:26 2026 GMT
Not After : Jul 24 18:00:26 2026 GMT
Subject: CN=9ad301c7623a36dc5c415665ba0121c23ace3e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:ef:94:68:1c:87:93:33:cd:44:de:a1:4b:
cf:b1:b1:4c:24:78:e1:bb:62:4d:07:0a:2f:52:c3:
ed:51:34:9d:1d:98:a4:6d:41:c0:6d:81:49:0c:dd:
d4:a8:38:2a:6e:4f:6c:69:67:45:9e:b4:c5:f3:c7:
e8:b9:53:2b:1b:d8:b7:2c:76:11:fa:6a:08:e6:b9:
db:fa:51:a3:0f:e2:76:57:5d:ed:62:85:05:e7:cc:
80:34:2d:77:ed:2c:74:18:e7:46:80:28:25:18:a9:
ba:48:08:e0:5c:0a:1d:fe:cb:40:82:61:0a:89:bb:
26:57:ea:0a:a6:12:be:35:26:f0:3e:bc:2c:4b:8e:
8a:4f:fe:3e:fc:e7:4d:ea:63:e2:82:c4:de:34:df:
b6:c0:aa:7c:45:76:7e:31:f0:1a:ce:54:56:b8:d7:
13:26:56:64:ac:e9:50:25:d9:e1:78:90:08:4c:32:
6d:5f:d8:94:b2:c6:69:22:b1:c8:b5:63:1d:72:94:
f0:9c:e2:27:b7:b5:2c:ad:66:82:d9:d0:9a:9e:2e:
99:c8:c1:40:f7:78:38:f1:73:08:51:1e:f3:6a:96:
36:ab:7b:5a:ef:ac:fb:c3:d9:97:ec:4f:68:43:6a:
a8:ac:f0:3a:c1:40:84:99:9c:30:cd:22:ee:e4:d1:
02:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D3:01:C7:62:3A:36:DC:5C:41:56:65:BA:01:21:C2:3A:CE:3E:33
X509v3 Authority Key Identifier:
keyid:E7:9E:68:C1:47:BF:94:14:47:EE:20:6D:60:FA:95:62:E4:F4:7E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/555owUe_lBRH7iBtYPqVYuT0foU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e6:68:44:e6:b5:e8:63:32:ae:d5:3c:0b:77:9c:38:42:9a:
c3:ce:cf:75:15:4a:78:40:65:e3:66:49:7c:2b:76:b9:f6:81:
70:86:50:b0:dc:d8:05:64:15:20:06:a3:34:92:47:16:cc:05:
f7:43:57:35:d9:ba:35:b4:d1:a5:9b:b3:12:95:86:00:9e:67:
14:46:21:6a:5d:a2:37:21:42:7a:cc:5d:60:e1:11:d6:a4:f6:
3e:f6:9e:36:64:bc:00:92:46:11:05:ab:48:20:fe:a4:c6:45:
da:be:b9:81:09:47:4e:73:bd:d3:d1:4d:b2:58:f0:00:40:ee:
46:90:8f:e3:78:d9:a9:a2:a3:71:bf:d5:89:52:f6:24:d0:c3:
0d:56:d1:83:63:46:a7:2c:a2:20:58:41:1a:1a:2c:1c:94:8d:
ab:1b:03:fe:91:23:c3:05:75:38:28:fa:2d:5e:68:92:a7:16:
85:32:65:d1:8b:22:31:a8:78:24:7b:55:62:e5:7b:9a:e0:ab:
af:4d:6e:9c:5e:1f:03:eb:3e:90:9c:92:49:7e:35:11:bd:29:
8d:21:a7:9a:44:d0:dc:1a:01:51:07:d3:13:41:c5:ed:8e:f2:
bf:b9:33:41:b5:9c:2f:ed:df:90:70:28:a2:62:0e:71:3d:8c:
db:ff:37:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:01:53 2026 by rpki-client