Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
File: s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft (raw, json)
Hash identifier: ISHeJy6sWR7udeCmMJDPzBGTMV2WyH3+d1ktYqqMDHc=
Subject key identifier: 00:91:6A:71:E7:D7:7A:36:D4:D9:8D:25:61:6F:2D:3F:E2:3C:BA:2C
Authority key identifier: B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36
Certificate issuer: /CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
Certificate serial: 019D27A9457036F12320D61159240024129E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
Manifest number: 0EA4
Signing time: Thu 26 Mar 2026 01:01:37 +0000
Manifest this update: Thu 26 Mar 2026 01:01:37 +0000
Manifest next update: Fri 27 Mar 2026 01:01:37 +0000
Files and hashes: 1: s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl (hash: i6UxohFNZeX1LR2mXFsyACyXoLaMLvW+6HVpFHnygt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:45:70:36:f1:23:20:d6:11:59:24:00:24:12:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036
Validity
Not Before: Mar 26 01:01:37 2026 GMT
Not After : Mar 27 01:01:37 2026 GMT
Subject: CN=00916a71e7d77a36d4d98d25616f2d3fe23cba2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b5:86:4a:d7:2f:08:85:1b:3f:c3:52:d0:5b:
2c:33:96:04:fc:68:93:95:32:96:23:e1:33:7d:fc:
12:29:4a:7e:1a:33:09:81:1e:31:4b:ad:15:6a:b2:
d5:4b:13:c5:93:d3:1b:05:93:a3:c4:5b:ac:74:20:
c6:d4:7c:89:6d:54:33:10:ba:79:b1:df:6b:d0:06:
6e:b2:a2:a7:fb:e1:a9:76:45:6f:02:7e:f3:50:a1:
51:21:65:29:cb:6a:c6:f8:b1:67:c4:48:bd:d3:b4:
19:94:4a:33:6a:51:2b:c7:70:6d:11:dc:11:bf:a8:
7d:35:9f:1a:76:db:8a:5d:89:45:76:c3:24:cf:39:
43:8b:de:90:25:56:fd:2d:9a:da:8f:4f:b1:05:81:
f3:23:45:0e:1e:63:67:fe:0b:72:40:59:16:12:db:
70:41:46:2a:da:d2:76:87:b2:07:c7:06:8f:e7:f1:
d3:13:eb:a1:7a:ee:84:b9:99:5b:1c:f4:76:3c:78:
58:0c:17:e1:23:69:e1:67:e2:cd:bc:56:91:21:a4:
b7:45:cf:a9:0f:4a:69:1c:78:22:40:6f:f3:5d:df:
10:af:87:59:9b:2d:03:12:e8:ab:23:7b:8a:dd:f1:
71:10:4e:89:f9:7a:77:06:20:fb:03:4e:0c:fc:fb:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:91:6A:71:E7:D7:7A:36:D4:D9:8D:25:61:6F:2D:3F:E2:3C:BA:2C
X509v3 Authority Key Identifier:
keyid:B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e4:a9:40:d2:75:b4:aa:06:ed:15:b0:ea:2f:6d:ab:84:c1:
15:31:23:81:92:5e:34:d4:a7:85:5a:2b:8d:6b:3b:c0:bf:7f:
8d:56:92:6d:4e:f6:0f:32:e3:8e:51:21:af:54:a9:73:7b:75:
b3:4f:c4:87:95:4d:71:3c:a6:21:2a:0b:7c:b3:0f:88:71:05:
0f:65:bd:ef:4d:4c:fb:40:85:cc:ec:8b:21:39:3d:dc:9f:44:
8f:ca:8a:ed:52:a6:11:9c:07:e1:58:36:63:6e:1a:37:c1:5b:
8c:ea:29:ab:45:47:e8:a5:7c:b5:0c:55:71:a9:06:24:a7:d4:
53:fe:40:d9:28:32:4f:e7:57:11:49:76:96:7d:a8:2f:4b:f1:
32:37:62:7b:54:3b:c8:8c:12:eb:86:3d:20:ba:84:42:fc:81:
a4:30:1e:dd:c3:b4:00:6b:b5:af:11:87:d9:48:4b:6b:c8:ed:
e0:20:04:91:a0:15:b2:ee:05:9f:79:66:7e:6d:20:ad:7e:3b:
b6:42:a5:59:8e:cc:2d:be:8b:12:b7:a5:df:18:ec:45:cd:7d:
75:4e:03:97:19:78:d7:cb:e2:f0:fd:1e:51:68:56:1e:48:06:
0f:30:a7:d3:49:9f:f4:46:a0:64:bd:cc:a8:5b:67:05:bc:ee:
bb:e2:7f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:36 2026 by rpki-client