Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
File: 55XJYXylpqO_8mP8GDeZL9GsR_I.mft (raw, json)
Hash identifier: QUJAyp+XJ7RsFRfpsKhFokjE68xb2qhLBfxjErDNQBk=
Subject key identifier: 3E:47:A8:C2:41:47:65:93:B6:74:71:27:C9:3E:8E:17:E1:9D:1C:65
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 019D29296146A8BC0C2EAF75D3BCCFF8F8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
Manifest number: 1567
Signing time: Thu 26 Mar 2026 08:01:10 +0000
Manifest this update: Thu 26 Mar 2026 08:01:10 +0000
Manifest next update: Fri 27 Mar 2026 08:01:10 +0000
Files and hashes: 1: 1-1OC6LmWlkhKJ9j7O2V8uHCIeLQ.roa (hash: pObdATG8V/x1kQuTr2uqeIMaWJhyU9KZK2VfEs01ILg=)
2: 55XJYXylpqO_8mP8GDeZL9GsR_I.crl (hash: zQ2miyIKCaDbbYxmQ3pPUWeF3Tzmp/elthJcPLX3YK8=)
3: 8Q0plViYhTMAKVQAAXl5nNj-BBI.roa (hash: Fg0eMhaPWp57qj9BoW/Q3H9dkIdZE5CHVzhDBBdEeZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:61:46:a8:bc:0c:2e:af:75:d3:bc:cf:f8:f8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Mar 26 08:01:10 2026 GMT
Not After : Mar 27 08:01:10 2026 GMT
Subject: CN=3e47a8c241476593b6747127c93e8e17e19d1c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c5:20:41:62:39:1a:a7:e8:cc:c6:ba:08:1c:
f4:5d:25:bb:1a:ec:9d:2a:d7:e1:af:db:67:09:e2:
d1:07:4b:c4:32:84:13:77:f6:4f:af:ee:80:59:a3:
65:a3:b2:68:6e:10:66:d8:57:f9:33:b1:eb:3a:78:
62:a3:7b:f5:85:01:de:67:81:b1:fa:cc:d1:6b:43:
90:3a:90:8b:dc:27:5e:2e:6e:bb:87:75:49:16:32:
29:58:a8:b0:ee:f0:aa:5c:3b:fd:fc:07:4b:02:cc:
d8:1d:ba:31:52:08:06:65:d1:7c:45:7b:20:89:49:
55:4b:58:9a:9a:73:dd:89:bd:4e:ec:d4:0d:eb:71:
d4:b3:c6:a3:d6:fc:8d:b6:f3:e9:29:80:39:7a:c4:
70:47:01:bc:ba:f3:9a:3a:56:c8:0a:60:80:43:be:
22:d3:04:fe:b3:67:2e:10:69:fb:3d:db:f1:90:56:
a1:1e:02:f7:ca:77:11:d5:f5:ff:29:f1:16:10:33:
16:37:0f:4c:ce:a7:af:81:70:49:cd:83:22:fd:c2:
bf:6f:66:96:44:07:87:b8:39:ef:d3:ab:c9:0f:5a:
c4:c0:72:78:dc:7e:e5:59:35:8e:6d:0d:ea:2d:71:
db:0e:c8:03:a0:b5:b7:ba:a7:d7:f6:be:f9:a8:5a:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:47:A8:C2:41:47:65:93:B6:74:71:27:C9:3E:8E:17:E1:9D:1C:65
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:61:ba:e5:84:a9:02:64:b6:da:a7:82:29:20:38:86:fa:60:
e4:00:00:3d:1c:d8:72:cd:74:c9:46:8a:7b:df:8e:5b:82:7e:
ee:5e:ed:0c:51:75:72:bd:07:d8:e3:13:f2:7a:ca:fc:e9:1c:
b9:7d:81:07:fe:63:ec:cc:a5:c0:28:e9:b3:01:2e:40:b0:37:
86:b2:18:01:3e:30:c5:52:b4:4b:f2:d9:37:9d:72:7f:96:c9:
80:65:ff:8e:50:4c:42:60:15:2c:57:d8:66:be:79:a2:1a:d0:
6c:65:09:e9:df:3f:cb:15:e3:e3:9a:d8:4a:44:d1:15:98:5e:
a5:c2:48:2c:1d:57:cb:0e:3c:57:5e:97:fc:0b:f2:5c:89:fd:
2f:f6:5d:43:47:0d:31:fc:fd:dd:77:13:dd:a0:49:df:76:ea:
8e:b4:49:98:38:50:22:f9:2e:4f:29:1c:4e:8e:0a:eb:2d:58:
75:25:3b:98:84:55:6e:34:96:f3:b4:d4:59:74:60:35:48:d2:
82:f1:15:ee:36:53:50:37:e9:ca:95:2e:ea:8a:de:ed:26:30:
59:4d:8d:b3:81:5b:46:9a:5c:41:6b:ab:f7:06:09:75:ad:80:
08:c5:37:77:b0:9a:5f:37:44:67:65:53:fc:bf:d2:f6:1e:ea:
87:f4:46:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:25:39 2026 by rpki-client