Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier: LpKPZsCfOzTW0gQNWK7ggJ16DijuvlLFPCfbn+2gDcg=
Subject key identifier: 27:86:CF:DB:95:27:C9:09:D9:F2:CF:23:40:BD:4C:63:D5:70:2D:F0
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial: 019E1CB4BE63B166AA13D0D592B7F429A1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number: 0DD7
Signing time: Tue 12 May 2026 15:01:07 +0000
Manifest this update: Tue 12 May 2026 15:01:07 +0000
Manifest next update: Wed 13 May 2026 15:01:07 +0000
Files and hashes: 1: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: CbLwJGjYEPh1mzlCUMzGxcMjw/8ZtcYtj6Bqv4P411Q=)
2: 9SyzUnhmTlTJs5-Xn7cO2eyXMsA.roa (hash: 2gNqd/WCXuzG4uv+GgfK3/vw/CmTadqijVQ5eKcLJXU=)
3: nSQSUiEOU-zHAWMn8ZKwogzTrM8.roa (hash: AC48o16lY1gJTiGIXk1jqfPVhEWM02EA+wJRG7sg7HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:be:63:b1:66:aa:13:d0:d5:92:b7:f4:29:a1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Validity
Not Before: May 12 15:01:07 2026 GMT
Not After : May 13 15:01:07 2026 GMT
Subject: CN=2786cfdb9527c909d9f2cf2340bd4c63d5702df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:2f:2d:2a:80:9c:2f:7f:79:65:c5:fd:ad:
dc:7f:db:f5:bf:b5:13:4d:3b:fb:aa:a2:07:04:95:
95:6d:8b:b3:13:e8:86:c8:42:e5:c2:89:13:c9:4f:
e0:4f:56:49:2b:87:cb:d6:e9:90:b5:0c:2a:a4:fd:
0e:3c:5c:12:3f:c4:ca:c7:26:9d:2e:69:c3:d2:60:
ad:2a:a3:37:7b:15:da:ed:bf:98:9e:cc:93:e3:62:
7e:26:1b:f1:21:6f:07:41:ba:54:05:53:85:03:ce:
be:4c:df:a3:12:07:79:0b:32:57:55:d8:00:d2:74:
4f:02:66:c5:45:6d:0e:02:0a:a3:a9:76:61:9a:1a:
2b:b1:00:11:54:39:2e:c3:61:4f:4c:b3:7e:2c:22:
24:8e:1d:b4:04:c5:24:35:72:65:e5:60:e6:91:92:
9d:02:d0:73:f2:e4:46:90:58:8d:54:40:39:ee:16:
01:ae:0b:61:e5:f1:f8:a6:96:ea:02:a5:4d:d6:eb:
51:44:c9:a0:2f:c0:3d:8b:12:2e:ab:98:5c:b8:ef:
47:d9:3a:f0:e8:e1:2d:45:86:ba:24:0d:f3:70:8c:
e0:ac:e9:eb:b0:f6:0a:53:dc:36:82:f6:f1:95:af:
28:85:4a:91:89:0a:94:20:f7:14:d3:d0:5d:17:f6:
99:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:86:CF:DB:95:27:C9:09:D9:F2:CF:23:40:BD:4C:63:D5:70:2D:F0
X509v3 Authority Key Identifier:
keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:39:6d:ae:02:7c:d7:e9:eb:f8:71:82:b3:06:96:05:d7:15:
f4:20:da:39:2b:41:98:de:64:6a:b5:46:60:dd:92:2d:46:f8:
97:3a:6b:5b:bc:4c:6c:a4:26:e7:6b:ef:3b:be:77:3e:23:8f:
79:b8:fe:2c:4a:3e:c6:79:46:9c:64:fe:12:60:13:f8:f1:85:
64:8e:46:0d:82:bf:27:6d:80:bf:48:97:dd:70:6f:7a:56:9b:
7d:4f:54:c7:f7:55:1e:97:78:40:e3:c1:7d:eb:06:fb:82:9f:
fa:7e:22:af:29:ed:ef:9b:33:f9:4c:7d:0e:8a:14:fb:4d:0f:
dd:b4:55:09:7e:c5:bf:db:4a:46:bf:2d:82:51:c8:c0:ba:5d:
82:b1:f7:d5:9b:85:8a:15:63:36:c0:2b:b5:46:ae:6d:03:31:
ec:6a:6c:42:5d:c8:3f:89:81:5d:d3:df:72:9b:e7:d3:91:99:
27:cc:95:fc:d7:13:21:ad:cb:d0:eb:fd:a9:26:df:33:65:91:
cc:07:77:3b:10:57:a6:5e:8c:1c:21:e1:a3:b4:dc:fa:d4:68:
84:85:4f:7a:b1:64:55:49:27:a2:15:25:bc:0d:5e:4c:a2:e8:
46:6d:38:0b:1a:4c:6a:ca:c1:1f:51:c5:3c:68:c1:bb:d9:93:
1f:7b:f4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:48 2026 by rpki-client