Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.mft
File: 555owUe_lBRH7iBtYPqVYuT0foU.mft (raw, json)
Hash identifier: TxBNS8VGdLOxyKdVk1tKzB0Spbgo940CSCh+UylPHM8=
Subject key identifier: EC:CD:58:86:7F:8D:B2:9C:8F:A4:8A:C7:4A:97:C6:9D:A6:39:35:45
Authority key identifier: E7:9E:68:C1:47:BF:94:14:47:EE:20:6D:60:FA:95:62:E4:F4:7E:85
Certificate issuer: /CN=e79e68c147bf941447ee206d60fa9562e4f47e85
Certificate serial: 019FF8A370D0035908425DE3BD29A5208709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/555owUe_lBRH7iBtYPqVYuT0foU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.mft
Manifest number: 61
Signing time: Thu 13 Aug 2026 01:01:28 +0000
Manifest this update: Thu 13 Aug 2026 01:01:28 +0000
Manifest next update: Fri 14 Aug 2026 01:01:28 +0000
Files and hashes: 1: 36bkGnZI1sMd2XiaCKELpBZav5c.roa (hash: nPCSCpMlug0UaQ74dIMZciLxdtiMlquYZOOv35McBmk=)
2: 555owUe_lBRH7iBtYPqVYuT0foU.crl (hash: 3xPatckqiXf6YZrPSjWohG+D2ivMDLuBBua+Xx89YXs=)
3: A_R0b_SSdzS-ZzdIx4cBZcRS_BE.asa (hash: QT7NxsqQ+bxynk+L0L+GBvKuJwI3nzCN47W2cDY6mWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.mft
rsync://rpki.ripe.net/repository/DEFAULT/555owUe_lBRH7iBtYPqVYuT0foU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:a3:70:d0:03:59:08:42:5d:e3:bd:29:a5:20:87:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79e68c147bf941447ee206d60fa9562e4f47e85
Validity
Not Before: Aug 13 01:01:28 2026 GMT
Not After : Aug 14 01:01:28 2026 GMT
Subject: CN=eccd58867f8db29c8fa48ac74a97c69da6393545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:71:4f:8d:1d:d5:eb:e3:3e:c6:54:eb:ed:
73:39:37:f2:3e:7c:a1:fb:25:a9:76:7a:1c:8c:db:
78:4f:b5:3b:16:13:1a:2a:d6:c1:6f:17:50:94:2d:
b1:9f:50:ee:d7:a9:09:f3:2e:75:05:e5:60:5e:e5:
af:da:60:a8:05:d7:88:3c:43:fa:67:2c:c5:c6:32:
60:ca:1f:d8:f6:2d:ea:63:59:05:02:fd:6b:59:0a:
60:2b:75:52:20:e2:d5:f9:90:65:4b:0d:55:60:61:
ef:6c:41:3d:1b:2f:2e:bf:46:ca:d8:9a:9c:79:12:
fc:50:e1:3a:70:16:d2:37:25:ec:8b:df:9c:7b:73:
1b:62:32:3e:7f:58:82:bc:31:fb:d8:f7:db:5b:80:
7f:ac:95:33:52:32:2e:39:82:d0:77:e0:c6:2d:c5:
f6:81:b2:64:0a:fd:99:c2:f4:f8:60:35:71:d9:1f:
f9:10:6c:6e:cd:7c:74:58:38:9a:dc:ca:85:b0:5d:
73:3d:3b:78:08:f2:14:f7:68:28:c1:83:43:96:bc:
40:e5:f4:d0:89:f2:77:a4:1e:f6:97:a1:f2:51:57:
f5:e8:17:3e:a7:93:7b:11:ef:a3:80:c0:c7:2f:a1:
23:d7:a7:9b:55:d6:b9:44:d7:35:e6:2e:a9:91:df:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CD:58:86:7F:8D:B2:9C:8F:A4:8A:C7:4A:97:C6:9D:A6:39:35:45
X509v3 Authority Key Identifier:
keyid:E7:9E:68:C1:47:BF:94:14:47:EE:20:6D:60:FA:95:62:E4:F4:7E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/555owUe_lBRH7iBtYPqVYuT0foU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6c:b3:b2:e1:85:7d:1a:a5:04:7f:20:e9:63:70:a1:b0:c0:
23:0b:22:bc:42:7b:63:d5:07:54:c1:7d:4a:bf:ca:ae:c5:5e:
4b:18:22:17:4d:40:6c:bd:ed:c6:e5:ea:d5:98:08:0a:d9:a1:
e6:58:0a:6c:fd:ef:ba:0f:2e:4c:ec:2a:7a:e3:91:57:d3:02:
bf:00:50:f3:d3:34:26:a7:b3:4d:5c:e5:28:65:d0:16:c3:1d:
b6:0d:80:5e:56:d1:2a:a3:57:ed:3b:eb:b2:1d:58:30:af:43:
e4:86:b1:3b:da:a1:76:19:23:24:ae:c1:ed:5e:0d:47:45:eb:
4b:80:db:3f:42:56:0b:a8:ec:33:19:92:73:1c:13:07:30:36:
eb:f1:d6:2f:62:7f:ce:2f:e4:a0:1d:16:e4:10:c6:1a:a2:df:
bc:1f:3c:ce:b4:28:29:7c:07:8b:d2:10:0a:a5:ba:90:35:59:
fe:5a:64:b6:bd:55:dd:6c:08:43:7e:c2:f0:0c:15:bb:06:53:
64:e8:3d:44:06:4e:22:84:64:80:a4:42:eb:ca:44:4b:80:55:
1d:45:4b:1a:0b:48:5b:ba:bd:10:45:34:d7:e7:c6:48:ff:21:
53:2d:e5:35:e1:ec:b4:62:be:06:c5:fb:e6:16:44:62:ed:10:
e6:2e:53:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:47:25 2026 by rpki-client