Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
File: p_555OY70WvEI3WStoTQBDPL0PY.mft (raw, json)
Hash identifier: AIVnSO0bcVS6Rw1QnOHcr3C2/47IgdntsLUqwc9p8k0=
Subject key identifier: F5:0E:2C:45:74:1C:2B:9F:67:E1:D6:62:FC:CB:ED:6E:42:73:EF:FB
Authority key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Certificate issuer: /CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Certificate serial: 01A13936760DAE68E77B36A72EEE69442696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
Manifest number: 0BE4
Signing time: Wed 14 Oct 2026 07:00:32 +0000
Manifest this update: Wed 14 Oct 2026 07:00:32 +0000
Manifest next update: Thu 15 Oct 2026 07:00:32 +0000
Files and hashes: 1: p_555OY70WvEI3WStoTQBDPL0PY.crl (hash: lri8BiigmymGhLF3Jj0LKD3jbYcAGPZPhCIysybCOYY=)
2: t0iIVofhtE6TdyzzgrpN-tSCMIQ.roa (hash: WWFMewBWw2qSPW9cnpJJwUD4HilTFFfpXdAQVaL7YzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:36:76:0d:ae:68:e7:7b:36:a7:2e:ee:69:44:26:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Validity
Not Before: Oct 14 07:00:32 2026 GMT
Not After : Oct 15 07:00:32 2026 GMT
Subject: CN=f50e2c45741c2b9f67e1d662fccbed6e4273effb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:bc:b1:1f:02:22:d8:04:28:da:7f:a1:3e:
05:66:ad:e4:83:78:0a:f6:c2:6e:27:f3:b1:af:a2:
d6:79:fe:2b:e8:a8:9b:be:cf:90:0a:d8:ff:5f:37:
89:5c:1d:a6:a8:f1:cf:9c:87:63:1b:09:79:92:a3:
cd:5e:6d:19:fd:11:d8:5e:7e:c2:c0:0c:1e:0e:73:
fd:14:1e:fe:30:26:1f:da:61:f0:b5:43:53:b8:37:
41:12:b5:94:e2:cb:0b:94:9c:b7:12:d0:33:54:59:
12:a5:be:42:b2:34:60:1c:54:f9:7d:ed:79:5f:9a:
2d:df:92:d5:9d:5f:29:6f:53:97:c9:ea:22:71:99:
98:33:bf:7b:a5:60:40:6b:44:06:94:34:5a:e6:89:
d9:7d:d9:8c:a6:d2:42:4f:49:a1:83:b8:8f:54:d7:
80:a6:8d:55:cc:a3:7a:66:e9:8a:2d:53:bb:3a:24:
a6:59:76:63:ae:3b:27:66:49:f5:fa:bf:88:88:ff:
85:56:9b:fc:8c:1e:f0:c7:1f:35:dc:82:0e:17:28:
c8:f7:0a:49:6c:2a:a4:76:e1:45:b4:af:ac:fd:61:
fd:ce:87:5a:ed:0e:a8:de:06:f9:b2:5e:a3:62:b1:
ba:61:0b:77:8c:60:19:00:57:4d:5c:b2:20:9d:f9:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0E:2C:45:74:1C:2B:9F:67:E1:D6:62:FC:CB:ED:6E:42:73:EF:FB
X509v3 Authority Key Identifier:
keyid:A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d6:30:f0:e1:fe:d8:c7:87:f0:79:b5:a7:db:0d:1a:03:75:
7d:3b:0c:ba:22:c0:b1:64:a3:8e:1c:a8:44:bf:b9:1f:fc:af:
a1:0e:cb:99:be:f6:10:15:c8:05:c3:bc:ca:44:e4:23:1f:88:
8b:08:b0:f7:f8:c9:df:02:f9:f7:25:9a:21:69:93:5c:94:6b:
37:26:fc:57:61:c0:cb:20:58:76:9d:6b:e9:62:53:c3:0c:10:
d7:0b:6d:59:53:da:b5:2e:00:92:60:4f:f6:75:2b:20:1e:9d:
c8:c1:5f:af:13:6f:d7:db:b3:fd:df:25:11:de:37:f6:a6:be:
d1:c3:10:7d:7b:dd:15:4e:dd:ed:9e:85:15:a1:6f:0b:3e:8b:
c9:22:fd:00:1d:db:7e:fb:2a:a8:ec:bb:c0:6c:f6:9c:c6:9d:
5c:a1:7e:b6:fe:6a:d0:ee:19:2f:84:a4:49:1d:18:ec:ed:68:
b4:50:3f:4f:75:3e:78:0a:eb:f9:7b:0b:b2:c7:e2:54:80:5d:
00:da:c2:b9:d4:0f:02:84:21:61:05:ab:8b:07:b9:7e:aa:0c:
b0:ac:72:9c:c5:1a:6f:c6:da:9c:d2:e7:c8:89:57:2d:89:55:
b5:fd:8e:fc:a1:3f:c8:d2:0d:e5:a7:5e:40:f6:c2:f8:c1:20:
f1:ae:0c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:49:50 2026 by rpki-client