Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
File: 55GFFoC3LJaRIl4b82xHJg6iRPo.mft (raw, json)
Hash identifier: 6JYl5boMxFMprwO0zZiqykPSyrNyEFMjKPZU6pAv/DY=
Subject key identifier: 80:35:D2:BA:FD:57:15:3A:FD:E8:D5:99:A0:E9:AA:38:3F:59:00:6A
Authority key identifier: E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
Certificate issuer: /CN=e791851680b72c9691225e1bf36c47260ea244fa
Certificate serial: 019E1BD8F3DAA8A4A97DD5FF3D302FB2D96E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
Manifest number: 1402
Signing time: Tue 12 May 2026 11:01:03 +0000
Manifest this update: Tue 12 May 2026 11:01:03 +0000
Manifest next update: Wed 13 May 2026 11:01:03 +0000
Files and hashes: 1: 55GFFoC3LJaRIl4b82xHJg6iRPo.crl (hash: kOv1n1XfysuA7l28EOhc3sVRkBTbAlrd8h45pKod6YI=)
2: JhK6gKaIDyzXMy7nriH8Zh8Wjc0.roa (hash: rObYpAP50FsAJbWUILnwA87gkFrmltk/+8uJWoHJQsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:f3:da:a8:a4:a9:7d:d5:ff:3d:30:2f:b2:d9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e791851680b72c9691225e1bf36c47260ea244fa
Validity
Not Before: May 12 11:01:03 2026 GMT
Not After : May 13 11:01:03 2026 GMT
Subject: CN=8035d2bafd57153afde8d599a0e9aa383f59006a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:ad:67:14:64:db:9e:a3:65:7e:b1:05:61:
f8:aa:e5:10:8d:ed:35:e5:10:a1:7c:a9:98:06:da:
c9:a2:10:79:6a:23:c1:b3:5d:c7:c1:bd:33:e2:36:
97:8d:1a:c2:cb:5e:17:32:5e:d7:9a:3e:23:24:0b:
53:8f:f9:04:7e:16:fe:2f:52:7f:29:69:ad:b2:6d:
c3:01:07:bb:ae:51:aa:d9:ff:27:b1:0e:88:30:f9:
11:94:f2:02:f4:2c:5c:f9:3b:ec:33:23:5b:4a:1d:
0f:a7:d8:f1:18:d3:af:8a:58:a4:26:a3:65:6a:88:
b3:bd:e9:1a:4b:19:43:d9:19:a0:5c:b0:95:fd:7f:
ab:3b:13:d1:2f:0a:92:8c:c3:d3:46:7f:82:0e:f0:
73:26:91:76:b8:76:3c:37:00:d6:63:a1:b9:05:dc:
bc:c9:04:1c:d1:59:4e:84:21:d6:38:01:b4:81:ef:
c1:8a:9e:d9:16:c1:79:c6:ce:1b:6d:22:f4:e0:31:
2a:d6:88:33:41:12:66:12:13:e4:69:af:84:44:11:
5d:9e:5b:91:5b:c2:cf:87:49:32:78:fb:b2:e5:55:
79:77:64:ba:91:39:f7:8c:42:6d:3e:62:37:9b:7f:
78:9e:e3:ac:53:77:1b:79:99:c8:b8:82:8e:1d:e4:
0c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:35:D2:BA:FD:57:15:3A:FD:E8:D5:99:A0:E9:AA:38:3F:59:00:6A
X509v3 Authority Key Identifier:
keyid:E7:91:85:16:80:B7:2C:96:91:22:5E:1B:F3:6C:47:26:0E:A2:44:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55GFFoC3LJaRIl4b82xHJg6iRPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fec55-4d4a-4fa5-a764-42bd92f30a97/1/55GFFoC3LJaRIl4b82xHJg6iRPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:70:07:5a:50:a8:78:48:7a:1c:d3:2a:7d:07:1e:36:60:b2:
7c:91:e8:5b:7a:8f:c0:3c:fd:2b:ca:c4:d2:fb:ab:bc:55:5d:
b5:22:b9:6c:37:97:27:31:89:6d:c2:a6:f1:9f:85:1d:36:d8:
49:c2:dc:32:c8:25:f9:5e:5a:52:34:83:4c:6d:0e:09:7f:8b:
42:e1:50:05:2e:86:47:a6:76:f5:0f:2e:d8:a6:e6:a0:71:43:
03:4b:9d:9f:b9:b0:88:21:67:8e:09:fc:ac:f9:74:8e:be:ec:
47:35:fe:28:b3:f1:50:23:2b:fc:53:e7:5b:13:3e:a1:a7:fb:
a9:94:b3:f8:7b:b2:a6:aa:f1:94:ac:64:91:54:f3:c6:e0:04:
51:cf:09:4d:2c:51:d2:1c:12:8c:f8:9e:fe:8d:43:cf:34:78:
ac:fc:8b:73:a5:a9:4b:2a:21:f3:e9:5e:3d:9e:de:bf:3f:87:
58:7c:9d:fd:a4:5d:0c:77:d6:19:5a:1b:6b:7a:fd:c9:30:7c:
cc:bb:17:1f:b5:f7:ae:62:0b:4e:9b:db:35:9f:42:67:d6:7b:
b6:47:e9:dc:ea:a3:df:47:ff:96:e7:1b:9f:08:5d:72:73:1e:
9d:c1:af:07:bb:d3:e5:23:d9:55:a3:db:54:ef:98:45:2b:fd:
b7:d0:6f:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2PPaqKSpfdX/PTAvstluMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OTE4NTE2ODBiNzJjOTY5MTIyNWUxYmYzNmM0NzI2MGVh
MjQ0ZmEwHhcNMjYwNTEyMTEwMTAzWhcNMjYwNTEzMTEwMTAzWjAzMTEwLwYDVQQD
Eyg4MDM1ZDJiYWZkNTcxNTNhZmRlOGQ1OTlhMGU5YWEzODNmNTkwMDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJitZxRk256jZX6xBWH4quUQje01
5RChfKmYBtrJohB5aiPBs13Hwb0z4jaXjRrCy14XMl7Xmj4jJAtTj/kEfhb+L1J/
KWmtsm3DAQe7rlGq2f8nsQ6IMPkRlPIC9Cxc+TvsMyNbSh0Pp9jxGNOvilikJqNl
aoizvekaSxlD2RmgXLCV/X+rOxPRLwqSjMPTRn+CDvBzJpF2uHY8NwDWY6G5Bdy8
yQQc0VlOhCHWOAG0ge/Bip7ZFsF5xs4bbSL04DEq1ogzQRJmEhPkaa+ERBFdnluR
W8LPh0kyePuy5VV5d2S6kTn3jEJtPmI3m394nuOsU3cbeZnIuIKOHeQM0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIA10rr9VxU6/ejVmaDpqjg/WQBqMB8GA1UdIwQY
MBaAFOeRhRaAtyyWkSJeG/NsRyYOokT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81ZmVjNTUtNGQ0YS00ZmE1LWE3NjQt
NDJiZDkyZjMwYTk3LzEvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS81ZmVjNTUtNGQ0YS00ZmE1LWE3NjQtNDJiZDkyZjMwYTk3
LzEvNTVHRkZvQzNMSmFSSWw0YjgyeEhKZzZpUlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHAHWlCo
eEh6HNMqfQceNmCyfJHoW3qPwDz9K8rE0vurvFVdtSK5bDeXJzGJbcKm8Z+FHTbY
ScLcMsgl+V5aUjSDTG0OCX+LQuFQBS6GR6Z29Q8u2KbmoHFDA0udn7mwiCFnjgn8
rPl0jr7sRzX+KLPxUCMr/FPnWxM+oaf7qZSz+HuypqrxlKxkkVTzxuAEUc8JTSxR
0hwSjPie/o1DzzR4rPyLc6WpSyoh8+lePZ7evz+HWHyd/aRdDHfWGVoba3r9yTB8
zLsXH7X3rmILTpvbNZ9CZ9Z7tkfp3Oqj30f/lucbnwhdcnMencGvB7vT5SPZVaPb
VO+YRSv9t9Bv7Q==
-----END CERTIFICATE-----
Generated at Tue May 12 21:43:07 2026 by rpki-client