Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.mft
File: 555owUe_lBRH7iBtYPqVYuT0foU.mft (raw, json)
Hash identifier: rByeRbhoXeJbr10ZPI7hEAbEYy1Ictdl3ksQIStES5g=
Subject key identifier: F1:D5:67:E5:36:17:D4:4B:0C:D5:2D:D0:24:24:13:79:82:93:F1:C4
Authority key identifier: E7:9E:68:C1:47:BF:94:14:47:EE:20:6D:60:FA:95:62:E4:F4:7E:85
Certificate issuer: /CN=e79e68c147bf941447ee206d60fa9562e4f47e85
Certificate serial: 01A0EFD494A77D788D82C8F68C6597BFC868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/555owUe_lBRH7iBtYPqVYuT0foU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.mft
Manifest number: E1
Signing time: Wed 30 Sep 2026 01:01:21 +0000
Manifest this update: Wed 30 Sep 2026 01:01:21 +0000
Manifest next update: Thu 01 Oct 2026 01:01:21 +0000
Files and hashes: 1: 36bkGnZI1sMd2XiaCKELpBZav5c.roa (hash: nPCSCpMlug0UaQ74dIMZciLxdtiMlquYZOOv35McBmk=)
2: 555owUe_lBRH7iBtYPqVYuT0foU.crl (hash: 6aXF9gIatU9WLHCiUxMLU9TmJjlEwrxy099BU1UZuJs=)
3: A_R0b_SSdzS-ZzdIx4cBZcRS_BE.asa (hash: QT7NxsqQ+bxynk+L0L+GBvKuJwI3nzCN47W2cDY6mWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.mft
rsync://rpki.ripe.net/repository/DEFAULT/555owUe_lBRH7iBtYPqVYuT0foU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:d4:94:a7:7d:78:8d:82:c8:f6:8c:65:97:bf:c8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79e68c147bf941447ee206d60fa9562e4f47e85
Validity
Not Before: Sep 30 01:01:21 2026 GMT
Not After : Oct 1 01:01:21 2026 GMT
Subject: CN=f1d567e53617d44b0cd52dd0242413798293f1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:dc:f6:d0:4b:40:10:57:b1:20:04:7f:8f:
2a:c3:b0:88:20:e3:0c:4f:ec:64:e6:53:2a:a8:6f:
d4:5c:82:20:6d:54:17:44:ca:e9:0f:98:a7:e6:ae:
66:ea:32:19:9a:3b:81:28:e2:9b:ba:01:e8:5a:aa:
b0:4d:44:f3:38:d2:c8:54:5f:ff:ef:f6:63:d8:81:
ba:2b:49:23:ea:4f:18:81:3d:a9:fc:81:7c:f8:81:
fd:d8:ae:88:c4:ad:22:b0:b5:3f:b6:d2:48:29:87:
1a:ca:c0:30:e3:a8:12:66:e1:a3:8d:d4:f7:a5:d6:
7e:ce:8f:91:dd:ee:61:ca:6c:83:e8:7b:20:12:6c:
ea:93:55:0d:a1:e8:05:2b:67:66:d7:4a:43:3a:e9:
fe:0a:d3:9a:a7:76:a3:52:a5:b7:0b:d6:cf:c0:9e:
b8:46:02:8e:7d:6f:44:3d:86:f6:30:09:2b:3c:dd:
13:c5:02:22:fb:20:2a:e4:d7:11:aa:56:43:01:77:
12:d8:d4:ce:30:38:ab:e4:34:48:e1:2a:99:20:5d:
f2:2f:0b:d5:3f:6b:94:45:b1:17:2e:8e:f8:67:92:
3e:bf:0a:7d:68:62:31:91:b0:b3:8a:0f:d8:19:ab:
70:b7:35:30:8b:2e:0b:07:2d:b3:56:58:08:4e:de:
be:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D5:67:E5:36:17:D4:4B:0C:D5:2D:D0:24:24:13:79:82:93:F1:C4
X509v3 Authority Key Identifier:
keyid:E7:9E:68:C1:47:BF:94:14:47:EE:20:6D:60:FA:95:62:E4:F4:7E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/555owUe_lBRH7iBtYPqVYuT0foU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:03:f4:fa:10:26:f3:fc:51:fa:b8:07:2e:18:5a:60:91:cd:
e8:b2:23:8f:c3:29:93:9f:96:ae:c7:25:c1:53:f0:ec:09:97:
66:c8:75:3b:5b:4b:7f:84:8b:45:50:64:9e:0e:83:bb:23:6a:
a3:7a:ad:74:5e:94:cb:43:a1:dd:27:37:60:e1:98:db:30:18:
3c:03:74:9a:4f:8c:6f:2e:d1:cf:d0:21:22:f2:2d:f8:d6:15:
0d:39:77:53:73:2c:1f:fb:55:e6:1d:7e:ca:da:5f:3e:74:92:
ef:2c:47:f4:10:08:32:e9:e1:63:fb:97:10:18:a7:09:d3:ed:
1b:09:1f:4f:e0:2e:72:af:83:78:5d:e8:0c:d1:a7:b0:72:2f:
cb:99:d1:29:4e:b6:df:3f:0c:7f:b5:30:c5:5d:e7:fd:3e:57:
a3:4e:07:25:0a:70:a3:57:19:c6:e6:75:14:f7:4a:e0:c6:ad:
7f:2c:44:56:01:91:fc:66:10:72:1e:af:c4:bb:b0:d3:57:33:
fe:cb:fb:24:89:87:1d:1b:38:80:ce:0f:e1:33:fc:8a:39:7d:
87:c6:54:3e:c6:f5:7b:94:11:c3:11:4c:bb:fa:b3:03:ab:a6:
78:de:aa:ef:0c:6d:cc:2d:fc:9e:4c:f4:5b:50:e2:59:64:29:
40:f9:bb:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDv1JSnfXiNgsj2jGWXv8hoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OWU2OGMxNDdiZjk0MTQ0N2VlMjA2ZDYwZmE5NTYyZTRm
NDdlODUwHhcNMjYwOTMwMDEwMTIxWhcNMjYxMDAxMDEwMTIxWjAzMTEwLwYDVQQD
EyhmMWQ1NjdlNTM2MTdkNDRiMGNkNTJkZDAyNDI0MTM3OTgyOTNmMWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw7c9tBLQBBXsSAEf48qw7CIIOMM
T+xk5lMqqG/UXIIgbVQXRMrpD5in5q5m6jIZmjuBKOKbugHoWqqwTUTzONLIVF//
7/Zj2IG6K0kj6k8YgT2p/IF8+IH92K6IxK0isLU/ttJIKYcaysAw46gSZuGjjdT3
pdZ+zo+R3e5hymyD6HsgEmzqk1UNoegFK2dm10pDOun+CtOap3ajUqW3C9bPwJ64
RgKOfW9EPYb2MAkrPN0TxQIi+yAq5NcRqlZDAXcS2NTOMDir5DRI4SqZIF3yLwvV
P2uURbEXLo74Z5I+vwp9aGIxkbCzig/YGatwtzUwiy4LBy2zVlgITt6+fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHVZ+U2F9RLDNUt0CQkE3mCk/HEMB8GA1UdIwQY
MBaAFOeeaMFHv5QUR+4gbWD6lWLk9H6FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTU1b3dVZV9sQlJIN2lCdFlQcVZZdVQwZm9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hNjc0YWMtNGNjNi00MjdjLTk4NTYt
NmEyYzIwYTZkM2ViLzEvNTU1b3dVZV9sQlJIN2lCdFlQcVZZdVQwZm9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hNjc0YWMtNGNjNi00MjdjLTk4NTYtNmEyYzIwYTZkM2Vi
LzEvNTU1b3dVZV9sQlJIN2lCdFlQcVZZdVQwZm9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwP0+hAm
8/xR+rgHLhhaYJHN6LIjj8Mpk5+WrsclwVPw7AmXZsh1O1tLf4SLRVBkng6DuyNq
o3qtdF6Uy0Oh3Sc3YOGY2zAYPAN0mk+Mby7Rz9AhIvIt+NYVDTl3U3MsH/tV5h1+
ytpfPnSS7yxH9BAIMunhY/uXEBinCdPtGwkfT+Aucq+DeF3oDNGnsHIvy5nRKU62
3z8Mf7UwxV3n/T5Xo04HJQpwo1cZxuZ1FPdK4MatfyxEVgGR/GYQch6vxLuw01cz
/sv7JImHHRs4gM4P4TP8ijl9h8ZUPsb1e5QRwxFMu/qzA6umeN6q7wxtzC38nkz0
W1DiWWQpQPm7PQ==
-----END CERTIFICATE-----
Generated at Wed Sep 30 11:25:47 2026 by rpki-client