Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
File: p_555OY70WvEI3WStoTQBDPL0PY.mft (raw, json)
Hash identifier: PBwnbq6g4z6zYMqsZMF+aj8OVLxqXhYpvAzc5Oo7U10=
Subject key identifier: DF:67:07:AF:1E:F6:53:EB:31:0C:CD:88:6F:DA:7E:ED:04:0A:40:3F
Authority key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Certificate issuer: /CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Certificate serial: 019D28F2D6971A1EE038E0E2346F31487463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
Manifest number: 09C9
Signing time: Thu 26 Mar 2026 07:01:36 +0000
Manifest this update: Thu 26 Mar 2026 07:01:36 +0000
Manifest next update: Fri 27 Mar 2026 07:01:36 +0000
Files and hashes: 1: p_555OY70WvEI3WStoTQBDPL0PY.crl (hash: ojsRBllg1qYAxRyGCBjSn9kRcmkMdYrgMAooVTsMZsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:d6:97:1a:1e:e0:38:e0:e2:34:6f:31:48:74:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Validity
Not Before: Mar 26 07:01:36 2026 GMT
Not After : Mar 27 07:01:36 2026 GMT
Subject: CN=df6707af1ef653eb310ccd886fda7eed040a403f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bc:82:91:ce:29:9d:1b:ac:5d:f7:25:3f:01:
b8:1d:cc:5c:5f:37:f0:d0:4e:83:38:11:b6:ce:e5:
9c:f0:0f:67:1f:90:04:56:cd:a0:b1:2d:f2:66:9c:
ac:f3:cc:b4:a0:cb:c4:a1:f6:24:90:18:fd:4b:72:
3a:eb:22:06:b8:19:45:4f:02:58:75:36:ad:02:b2:
ec:fd:b8:cd:3f:65:2e:a2:d2:f5:b7:c3:65:0e:d9:
23:2b:3b:74:90:14:4d:ab:9e:02:4d:d4:15:ad:e8:
40:1a:bb:d6:9e:99:7a:dd:dd:6e:56:9a:ff:aa:42:
27:78:4b:06:bc:c7:80:95:5b:03:7d:1b:7b:3d:46:
07:ae:d4:de:41:4b:75:ad:f8:ad:be:d1:34:b7:89:
0d:15:8d:1b:34:26:6a:85:84:45:eb:fa:af:1c:8a:
ff:3a:1b:11:dd:6c:db:78:20:52:20:aa:b5:52:40:
23:bc:76:94:6e:65:2c:f8:dc:5c:1f:88:d3:c2:cb:
38:a7:9c:58:05:d8:b1:44:5d:36:6c:8a:3a:04:1e:
2d:d8:18:e1:f9:21:f9:5f:f8:5f:3f:cb:2c:ac:85:
4a:bf:41:5c:09:c8:d2:0e:93:ad:61:bd:54:93:cd:
5e:e1:d1:20:fb:6d:81:66:a0:c8:b9:cb:59:eb:bc:
33:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:67:07:AF:1E:F6:53:EB:31:0C:CD:88:6F:DA:7E:ED:04:0A:40:3F
X509v3 Authority Key Identifier:
keyid:A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4c:d9:80:ec:b8:52:36:f1:3b:17:dc:8d:50:b8:9f:62:d4:
0b:83:0f:8b:c4:66:aa:f1:38:09:e8:2c:59:f8:e5:60:08:94:
a7:8b:49:7e:85:30:1e:be:af:8b:73:34:73:39:8e:f6:23:42:
ac:fc:93:a7:bc:70:d5:8a:9c:32:9d:f3:01:aa:c2:32:79:89:
4f:01:1d:06:a8:35:64:98:01:2d:7e:e1:16:90:a8:a2:dc:23:
cf:bd:c4:c0:30:68:27:17:2c:f6:d4:75:d4:5a:8d:42:ab:c9:
14:ca:49:47:d0:1a:ca:e5:7d:b6:c0:55:6f:32:7e:37:5e:95:
13:d6:40:a3:a6:5d:21:9f:f7:c6:ef:da:fa:c5:ef:da:bb:5b:
36:d9:1e:1b:38:fc:b6:21:de:ac:7d:36:c3:66:b3:0d:70:a9:
b9:10:ce:92:ce:d4:24:f4:31:3a:ad:3e:f8:3c:79:d8:2d:64:
85:d9:27:2c:4c:45:fa:81:2b:b8:60:c1:da:68:5b:0f:77:46:
54:91:03:d7:8a:4f:91:fb:0a:cd:fd:e5:92:f4:d9:3f:ff:b0:
a6:43:72:3f:28:d3:20:55:5a:cb:b7:2e:1a:63:7b:5d:e9:20:
6f:2b:46:e9:0f:65:15:31:8a:c0:64:33:4a:5a:1d:3b:3f:19:
2f:07:4b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:17:33 2026 by rpki-client