Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
File: 421ZT1_jgr7Czo46Majyjm2XwB4.mft (raw, json)
Hash identifier: jXy79cOJpkHN49URGtjOZ8dEgchOCu53hJyne8pfLbk=
Subject key identifier: 55:AD:5E:08:4B:8F:B9:FD:18:B0:11:40:BE:AB:E5:B2:6A:A5:20:C1
Authority key identifier: E3:6D:59:4F:5F:E3:82:BE:C2:CE:8E:3A:31:A8:F2:8E:6D:97:C0:1E
Certificate issuer: /CN=e36d594f5fe382bec2ce8e3a31a8f28e6d97c01e
Certificate serial: 019F122E90A0F1D38805BB59778ABB01D256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
Manifest number: 25
Signing time: Mon 29 Jun 2026 07:01:09 +0000
Manifest this update: Mon 29 Jun 2026 07:01:09 +0000
Manifest next update: Tue 30 Jun 2026 07:01:09 +0000
Files and hashes: 1: 421ZT1_jgr7Czo46Majyjm2XwB4.crl (hash: NY5/GG6ih7jMggYM2wY1VfMfqfxCFOdlKBqOXKTvP/k=)
2: 4kp9Gd2mxG804RIdTKshm3Dwmdo.asa (hash: eGP/nycwexU78v/Fn01o7w+Fu0NVubrmTB5+YYDpoOY=)
3: a835romKiKyDsWhLVFBGzimfo5Q.roa (hash: NH/Bb+RpBScI1VSoFGtRzq5S+fLF3ORr7Z1sBrpa2MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:90:a0:f1:d3:88:05:bb:59:77:8a:bb:01:d2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36d594f5fe382bec2ce8e3a31a8f28e6d97c01e
Validity
Not Before: Jun 29 07:01:09 2026 GMT
Not After : Jun 30 07:01:09 2026 GMT
Subject: CN=55ad5e084b8fb9fd18b01140beabe5b26aa520c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:a8:f9:08:70:da:ec:50:84:7b:00:39:ba:
0a:fc:fb:37:33:88:55:ea:d6:59:cc:8a:92:31:cd:
e7:98:b2:57:64:79:04:e3:99:16:d1:90:05:1e:e8:
3e:31:9b:e7:9c:53:c0:68:fd:ea:de:da:e7:22:41:
18:6f:ab:ba:13:fe:08:bb:14:95:a6:e5:b4:7d:8e:
10:50:78:59:59:9b:62:2b:bf:ae:bf:67:b9:8e:2e:
c3:58:19:a9:dc:4c:2d:97:b1:2c:79:94:65:52:27:
6c:65:7a:7d:d2:51:84:56:42:7b:15:f6:5e:aa:fe:
5e:ce:37:50:6e:55:14:11:8e:b3:94:cc:bd:d1:e0:
03:3b:71:08:93:64:ad:c3:01:a7:1d:6a:80:26:28:
96:a6:7b:8f:09:71:4b:2d:6f:32:5c:7f:e9:f4:95:
92:9d:25:ff:c4:c0:f4:36:1f:d2:bd:23:c0:3f:1a:
4b:eb:90:ac:11:f7:99:7b:0f:14:09:09:37:8e:2e:
5e:fc:41:c4:09:87:76:1a:ed:e2:73:f6:e3:05:97:
a8:f3:85:01:e2:a4:ed:e6:80:79:cb:f9:00:ae:b2:
3f:00:63:13:f7:96:8b:a9:f3:6c:70:20:a9:59:ba:
cb:33:75:84:cd:29:6a:95:47:26:29:af:56:93:41:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AD:5E:08:4B:8F:B9:FD:18:B0:11:40:BE:AB:E5:B2:6A:A5:20:C1
X509v3 Authority Key Identifier:
keyid:E3:6D:59:4F:5F:E3:82:BE:C2:CE:8E:3A:31:A8:F2:8E:6D:97:C0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b2:4e:69:6f:76:72:5c:66:98:d2:ec:f2:50:1c:3e:8b:f8:
89:dc:69:fd:62:c1:bb:50:12:8e:b5:01:d1:e1:9f:85:81:fd:
4a:bf:bf:cc:49:5c:24:e0:ff:d9:4e:dc:22:6f:d7:76:f3:74:
d4:31:47:03:30:fa:10:69:58:25:03:36:5d:ba:8f:ee:e4:b7:
5b:8b:65:9b:66:7a:c2:af:78:8a:70:5a:3c:a0:d0:d8:36:cd:
ef:16:cc:1b:e4:45:59:f3:38:5a:ce:56:29:2d:1a:4e:18:6f:
61:91:67:37:be:2d:da:3e:b3:39:be:0a:0d:2c:89:6f:77:0f:
7f:f8:89:04:6e:69:da:87:2a:58:d5:d3:f5:24:10:8d:7b:83:
4c:51:30:a7:fb:e1:08:2c:4d:c2:0d:19:04:b5:10:81:55:23:
93:c2:58:9c:ff:f8:c2:02:c0:10:8f:44:9b:3a:aa:5f:d9:fd:
80:47:b9:9d:fc:5d:19:51:98:c0:00:c4:d7:37:49:25:97:32:
b1:85:e4:70:e6:90:17:5e:36:25:91:bd:99:6a:0e:9a:34:73:
dd:3c:5b:76:bf:da:c2:11:b8:11:68:f9:9d:6f:fe:57:e2:55:
0a:fd:f2:d6:21:56:eb:91:5d:a4:8e:21:f4:89:b1:a8:ff:8a:
08:8c:ac:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:32:01 2026 by rpki-client