Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: xzbQYcydXLB9U4RDJ7QZD7xzjrKhQtCnoPDQNJEXx/w=
Subject key identifier: E2:5C:B7:93:0B:9F:AE:EE:77:48:8D:35:43:CD:10:05:A1:C3:5C:93
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 019FA0E0D224AD2C53C74C67A4077284C11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 055D
Signing time: Mon 27 Jul 2026 00:01:56 +0000
Manifest this update: Mon 27 Jul 2026 00:01:56 +0000
Manifest next update: Tue 28 Jul 2026 00:01:56 +0000
Files and hashes: 1: 01o9QMK5i2W56VtXZmgzP-ILrQ0.roa (hash: LXimHsOHFBMbCTOin8TpUsouIX59ySFRAHVGtSHFCUU=)
2: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: mI+aHRUur6C7DIHvukf9BRDuhPHft4bl0ncTRH5ml78=)
3: 56DqMz97HUtongb-LYKLfwuTWh4.roa (hash: ogBhrs4GCRrendagpUDedYundQuUrPiR+N6SxNY/RzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:d2:24:ad:2c:53:c7:4c:67:a4:07:72:84:c1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Jul 27 00:01:56 2026 GMT
Not After : Jul 28 00:01:56 2026 GMT
Subject: CN=e25cb7930b9faeee77488d3543cd1005a1c35c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:fb:f2:81:58:55:a1:81:07:08:a5:3a:e6:
b6:2b:53:65:77:39:2c:df:ff:40:4c:b7:33:60:50:
db:be:8b:33:51:a5:f6:0c:98:78:f3:01:18:a8:cf:
6f:02:78:a4:39:d4:36:9f:87:da:f5:1f:1e:71:1c:
ea:6e:0d:b6:21:d8:ef:b2:fb:5b:39:0f:71:bf:87:
eb:f8:9c:3a:63:11:aa:e0:b1:8d:d2:b7:6e:98:d7:
5c:39:ea:09:67:63:90:ad:aa:f9:85:b8:85:1f:9c:
93:71:af:5b:64:e8:3e:ca:5d:88:73:61:f6:fd:5c:
37:89:d4:af:d5:bd:57:99:c2:ca:14:04:b9:d8:e5:
7d:45:c2:a7:71:e8:f0:ba:2b:27:ea:6e:be:1b:94:
82:d0:03:cf:06:24:d8:44:6b:d2:e5:7e:3f:33:33:
4c:1e:4c:86:13:a2:01:52:02:54:96:43:bf:9b:c0:
61:44:f7:e4:57:f7:73:6b:42:91:d5:0d:0d:df:08:
3e:00:83:5b:8c:a3:9d:97:de:b9:8a:92:5c:69:60:
28:94:b0:f3:0e:b6:72:02:5d:66:28:d2:85:d8:b6:
08:98:b8:f8:ee:3f:1d:fd:47:f9:97:e8:48:71:ee:
cf:de:c6:d2:cf:2a:41:14:0e:1d:43:1d:a0:f9:ac:
78:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5C:B7:93:0B:9F:AE:EE:77:48:8D:35:43:CD:10:05:A1:C3:5C:93
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f3:33:84:c7:e2:c9:b0:3e:d6:6d:19:2c:89:ee:63:65:d0:
a4:c1:24:5c:79:2f:b9:6e:7b:ed:bc:80:ee:af:cf:3f:5f:91:
42:07:6d:98:f7:09:63:56:55:6e:72:18:5e:58:11:f5:05:8b:
9f:8c:5a:c5:5f:84:c8:07:06:d2:fe:09:01:37:26:ef:ed:20:
fb:7b:75:40:08:86:98:f5:17:34:ca:12:e0:64:b8:25:a4:75:
f9:fc:74:fc:6e:74:8e:e8:7f:fe:95:e4:7f:82:5c:84:f1:9a:
18:58:c1:66:13:f5:23:b6:ac:d2:1b:33:07:7f:7e:3e:54:e3:
82:01:fe:d9:d3:be:b9:b1:a6:e2:7a:2d:79:76:f4:54:01:f8:
9f:85:ba:d9:e7:58:51:e8:4e:fa:4c:db:82:bf:66:bf:cd:64:
c1:36:11:26:d3:36:38:f7:0f:6a:d0:74:3a:bf:bd:0c:42:10:
dc:c2:d1:31:eb:39:6d:98:4b:5d:30:6b:26:66:7b:99:be:98:
69:71:b4:60:9c:c1:fc:f5:6d:f2:56:d5:94:43:c0:46:6d:d1:
a5:90:05:c8:bf:f4:3d:77:44:d8:1e:fc:9f:42:af:ea:39:fa:
0c:89:8a:ab:24:a3:a8:1b:ce:03:2a:76:3b:43:f0:ff:fe:91:
40:f2:3d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:42:33 2026 by rpki-client