Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
File: 55rcKmJwJwixoO4N87TPkiiW3NY.mft (raw, json)
Hash identifier: pZ2uyXJqdqNvnVcIjbAgt1AmO/pXoUuT3Ekao7kc17Q=
Subject key identifier: 5F:11:69:C3:24:81:F0:D8:0E:A6:C9:3F:CD:52:D6:36:45:D7:EA:A0
Authority key identifier: E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
Certificate issuer: /CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
Certificate serial: 019D389C4520C664ECAFE9B68B25EFB7899E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
Manifest number: 05DE
Signing time: Sun 29 Mar 2026 08:00:58 +0000
Manifest this update: Sun 29 Mar 2026 08:00:58 +0000
Manifest next update: Mon 30 Mar 2026 08:00:58 +0000
Files and hashes: 1: 55rcKmJwJwixoO4N87TPkiiW3NY.crl (hash: D57GF2S3rcSON/Bd1+DlYz1x9Z7wITwr38OPEJ8Sks0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:45:20:c6:64:ec:af:e9:b6:8b:25:ef:b7:89:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
Validity
Not Before: Mar 29 08:00:58 2026 GMT
Not After : Mar 30 08:00:58 2026 GMT
Subject: CN=5f1169c32481f0d80ea6c93fcd52d63645d7eaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:4e:77:ef:c5:a8:2b:58:67:69:af:b8:e7:
33:86:cc:36:b1:8d:11:f9:b2:67:39:7a:98:df:01:
60:81:1d:7f:9f:eb:cf:cb:6b:e5:5c:ee:e3:cc:96:
8d:0b:4e:e7:99:c8:f2:f6:37:06:7e:4c:5b:e0:3d:
75:71:25:78:2c:f3:e7:da:97:d1:b3:9e:17:d1:df:
30:74:b4:10:f3:7c:02:50:9d:95:52:31:5b:08:b9:
9a:28:59:0d:c7:07:2e:9e:8e:13:63:ff:77:50:f4:
66:a7:6b:ed:78:71:27:c9:1c:6d:76:5b:db:04:a3:
bc:14:95:7e:bb:a0:90:3a:6f:78:18:19:21:91:b7:
cd:83:bb:81:1d:9e:6e:9d:5f:e1:db:93:2a:34:2a:
8b:98:45:6d:c9:04:fe:e9:49:6f:6d:46:ec:3d:cb:
f3:6b:0c:46:1b:22:4c:0a:21:91:e8:2a:93:b2:d0:
62:e1:79:e1:12:1e:24:81:12:75:d8:ad:36:b8:e7:
39:c3:a3:bc:4f:cf:f9:55:26:a9:c0:30:5b:8e:90:
82:cc:26:90:19:33:80:f2:53:2b:e3:be:21:11:2d:
db:8e:28:0a:86:49:12:f8:aa:71:a1:63:64:35:e2:
e4:98:e5:dc:c2:a9:59:75:bc:f5:df:4a:f5:45:63:
4e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:11:69:C3:24:81:F0:D8:0E:A6:C9:3F:CD:52:D6:36:45:D7:EA:A0
X509v3 Authority Key Identifier:
keyid:E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d6:e4:91:45:66:20:6b:f8:c9:53:38:23:52:c0:db:2e:4f:
1f:00:cd:b3:95:97:e4:7a:37:0d:dd:0f:ae:18:4a:d9:d7:67:
ee:5a:e2:57:09:23:8a:3c:a8:8e:9b:eb:f0:90:ed:c6:47:6f:
55:85:8f:82:d0:42:16:d1:cd:e4:0d:82:9a:2b:6b:7e:8b:f3:
bd:ab:c4:da:35:cf:a5:25:89:90:f9:11:7a:cb:21:aa:de:6c:
9e:df:9a:8e:0f:13:82:9a:a7:01:25:b6:ee:52:14:eb:04:e7:
50:59:a1:e1:36:01:05:b1:66:ac:5d:35:fe:2b:92:81:48:ac:
cc:6f:c3:b9:3f:f9:f4:3b:f3:39:4a:8c:9f:7e:41:e3:c5:33:
73:e9:56:f5:c1:d9:d5:9c:dd:47:57:e1:0c:32:34:ad:54:e9:
20:09:45:52:b4:7b:29:cb:32:af:98:03:58:75:88:4a:68:99:
a3:ad:df:16:2d:0c:a8:74:d9:15:e4:0d:40:00:f7:17:07:49:
20:16:17:30:a4:65:da:d0:ea:9c:63:de:cf:dd:f8:20:9a:a7:
be:25:8c:68:56:06:66:f5:fb:b9:6a:5e:54:aa:95:cc:72:72:
f6:ba:1f:fb:22:2b:af:51:67:17:ce:00:68:7b:09:be:5b:49:
74:a5:ea:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:57 2026 by rpki-client