
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier: vKhWRQ79qM1TNqXwYeekd6wj5nTwOZGV7aiZcrmoYtI=
Subject key identifier: 6F:8A:5E:8D:B2:CB:9E:42:BD:A9:3B:BC:1C:C7:AB:86:28:A7:4D:B6
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial: 019DD91E29B245F195DB3DEBA7A4ACB237AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number: 0DB4
Signing time: Wed 29 Apr 2026 12:02:05 +0000
Manifest this update: Wed 29 Apr 2026 12:02:05 +0000
Manifest next update: Thu 30 Apr 2026 12:02:05 +0000
Files and hashes: 1: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: uWSZ+k+GfdiapOWyxTHkz+SurE8HcPVJpjL2Cb3JrqQ=)
2: 9SyzUnhmTlTJs5-Xn7cO2eyXMsA.roa (hash: 2gNqd/WCXuzG4uv+GgfK3/vw/CmTadqijVQ5eKcLJXU=)
3: nSQSUiEOU-zHAWMn8ZKwogzTrM8.roa (hash: AC48o16lY1gJTiGIXk1jqfPVhEWM02EA+wJRG7sg7HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 12:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:1e:29:b2:45:f1:95:db:3d:eb:a7:a4:ac:b2:37:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Validity
Not Before: Apr 29 12:02:05 2026 GMT
Not After : Apr 30 12:02:05 2026 GMT
Subject: CN=6f8a5e8db2cb9e42bda93bbc1cc7ab8628a74db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:29:af:dc:fe:0b:61:32:50:5e:01:ed:1a:e6:
26:6e:2e:9c:45:7c:fd:1c:a4:02:a4:e5:54:d6:93:
c0:c1:4a:ef:ab:25:73:5a:95:82:f7:eb:c5:04:c5:
d0:35:95:39:87:3b:36:99:4b:6f:fb:b7:a0:2b:67:
cc:83:22:a8:46:61:56:5e:ea:ae:6c:a3:5f:ae:4c:
6e:13:86:5b:f8:6c:5b:56:4b:47:2c:eb:7c:2c:4b:
34:74:f0:4c:ca:e9:08:45:2b:f1:a1:11:8c:41:13:
cd:1e:4b:b7:55:70:98:84:5a:d0:41:3e:e3:09:35:
17:4e:a7:41:fe:09:86:8f:b9:04:8d:6a:1a:c5:0f:
cb:ec:24:ac:27:1f:6e:16:f3:e8:ae:4f:08:3f:2a:
96:44:20:9b:24:ea:a3:2a:63:68:53:a1:f3:de:cb:
10:93:a4:4b:6b:0e:c4:a6:c7:20:0a:b5:68:ea:b3:
6c:28:71:29:dc:cb:47:40:e4:24:a0:34:1d:01:e1:
5f:1e:6b:f0:59:78:49:dd:7c:60:13:fe:cf:de:51:
e1:d5:d8:41:08:f1:1b:da:1b:8b:0b:b2:a3:09:2c:
2f:2b:d9:29:bd:6d:9f:89:c2:73:02:9e:21:23:aa:
6c:3b:81:5d:0d:a6:f4:32:10:7c:02:a8:7d:55:4d:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8A:5E:8D:B2:CB:9E:42:BD:A9:3B:BC:1C:C7:AB:86:28:A7:4D:B6
X509v3 Authority Key Identifier:
keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:61:b6:1f:16:af:a7:03:2e:93:a4:a4:14:35:99:74:ed:af:
38:a0:46:ee:ff:41:60:ae:82:8e:dd:09:2a:7f:c9:b8:2f:91:
e1:36:a4:e6:8b:d2:26:da:ca:37:81:55:87:3d:a0:39:a0:e7:
f1:3d:2b:65:76:5e:55:3e:63:ba:50:eb:e4:78:48:f2:8c:57:
0c:2b:c9:57:a1:2e:8c:6c:eb:7b:4d:b8:68:8b:f6:89:5c:8f:
93:ad:a3:ca:cc:72:6e:da:fc:fe:35:12:c4:ee:dc:7d:11:f3:
f7:83:97:54:33:a4:c6:dd:2f:09:21:2f:1b:c1:1c:ad:25:2e:
c1:6c:38:7a:8c:af:df:ca:9e:8b:53:8e:5c:d3:2c:de:9d:37:
6d:72:a4:6e:f4:03:cd:ac:a6:c1:85:c5:eb:c3:8a:1f:53:28:
b6:cc:ec:c4:23:0c:6d:f7:03:25:12:0e:b6:cf:0a:bf:f1:12:
48:88:b7:c9:bf:fc:7f:91:c6:9a:02:8b:2d:a8:17:e2:7b:ca:
df:57:bc:9e:6a:16:e9:b6:48:50:6f:e9:e3:78:2a:ed:f0:da:
45:9e:1f:b8:2d:1b:21:d6:5e:56:fe:16:56:a1:79:b0:28:0b:
b1:63:a4:0d:4f:ad:53:48:43:c9:2d:7d:5e:06:be:13:83:02:
27:ff:2e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 21:14:06 2026 by rpki-client