Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
File: p_555OY70WvEI3WStoTQBDPL0PY.mft (raw, json)
Hash identifier: Rkjwd3TlSiGGvvTyQ6lXmti8srgqjQacbgWg/mtFOU4=
Subject key identifier: E8:9A:A0:4E:8C:1C:B9:A2:C2:32:C5:0D:A3:8C:BA:CF:71:D3:FA:46
Authority key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Certificate issuer: /CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Certificate serial: 01A17137E3F075E310154C8A8D25C5A4449D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
Manifest number: 0C01
Signing time: Sun 25 Oct 2026 04:00:50 +0000
Manifest this update: Sun 25 Oct 2026 04:00:50 +0000
Manifest next update: Mon 26 Oct 2026 04:00:50 +0000
Files and hashes: 1: p_555OY70WvEI3WStoTQBDPL0PY.crl (hash: YwVRv5ujfLZRBFVhYaGPy1vxM/QjmxmONwrF37nqHqM=)
2: t0iIVofhtE6TdyzzgrpN-tSCMIQ.roa (hash: WWFMewBWw2qSPW9cnpJJwUD4HilTFFfpXdAQVaL7YzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:37:e3:f0:75:e3:10:15:4c:8a:8d:25:c5:a4:44:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Validity
Not Before: Oct 25 04:00:50 2026 GMT
Not After : Oct 26 04:00:50 2026 GMT
Subject: CN=e89aa04e8c1cb9a2c232c50da38cbacf71d3fa46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:91:0d:ad:91:28:86:12:fc:48:2c:0d:36:
5d:1e:59:d0:fe:ef:5e:a6:5e:ef:f7:6c:60:cb:86:
5a:06:39:91:6c:73:c2:65:2d:f0:17:db:09:3b:3b:
e8:65:b6:cd:f0:57:5e:aa:3e:34:f2:ae:26:f2:ec:
07:f2:47:2d:16:a7:6b:e9:c6:3d:8c:8b:e5:38:3a:
a3:8b:5e:ea:b8:3f:4d:45:26:79:fc:67:05:11:b9:
94:85:90:de:77:d0:7d:65:9e:da:fa:c0:4c:d0:05:
6b:79:36:45:c0:f5:df:d7:8f:94:33:2a:cd:28:e8:
70:17:de:e3:bd:28:94:ed:b9:76:ed:b1:a9:7e:dc:
63:39:08:30:16:82:d1:04:40:9d:89:0f:58:fb:40:
df:81:82:d3:26:cc:ee:11:a7:53:0b:e4:a5:e7:2c:
5c:86:27:ee:95:2b:94:34:d6:54:41:bf:53:8d:3c:
7d:d0:42:2a:70:cb:cc:bb:4e:d7:6a:39:1a:22:ac:
23:b2:e5:c0:92:aa:60:7a:31:36:01:9e:55:af:89:
d5:eb:0c:3a:4f:13:ed:fb:8c:80:de:26:f4:5d:b1:
42:2f:0b:7c:96:3d:5a:0a:d2:22:75:aa:69:fd:91:
ef:c8:6e:df:4e:37:93:ff:eb:6d:b2:8e:45:34:bb:
2a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:A0:4E:8C:1C:B9:A2:C2:32:C5:0D:A3:8C:BA:CF:71:D3:FA:46
X509v3 Authority Key Identifier:
keyid:A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b3:02:69:02:e4:28:b5:20:0d:09:f2:cf:73:11:fe:15:0b:
ae:ec:37:e2:17:e0:93:29:a6:18:c0:70:63:4b:04:e3:e4:7f:
f2:35:78:e8:a8:40:ab:b6:f4:64:ac:4d:00:5a:a8:56:67:1f:
80:81:17:5c:6f:62:5f:cf:15:c1:1b:f7:62:27:50:d5:a3:96:
32:d5:ae:5b:c7:6e:d1:9c:81:09:3e:ed:90:46:fb:6f:f5:57:
26:aa:27:16:8f:b8:5d:6a:ef:de:83:81:40:e8:ec:17:8c:1e:
c1:64:9b:74:02:af:c5:94:2f:fa:56:12:93:b7:ca:66:4d:18:
f0:f1:1a:20:3f:eb:a3:57:4f:af:1f:4b:72:96:ba:8f:2b:24:
f1:f3:24:16:1b:11:1e:77:3a:14:aa:d6:f9:13:06:7e:a4:8b:
ac:13:17:2f:fb:d6:0f:06:58:36:31:e4:9f:3c:17:8b:60:ca:
9c:b9:f1:33:b5:2a:77:84:b8:d3:72:6d:2b:0d:2d:8b:a3:e2:
83:62:83:fa:67:89:af:2e:1f:c4:95:f6:97:7d:e3:70:fc:b9:
9e:4f:38:b3:c5:fa:45:5d:02:57:98:d0:2a:38:ae:cc:28:7e:
69:12:7e:42:dc:29:ac:9c:fd:f6:bd:9d:7a:66:cc:06:42:42:
2e:be:e2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:48:42 2026 by rpki-client