Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
File: 55XJYXylpqO_8mP8GDeZL9GsR_I.mft (raw, json)
Hash identifier: B1ftaGM8Z8sjTh3MIasBkhC5qmp/NpyszGLnaZGHVhw=
Subject key identifier: 10:52:F2:65:5B:BF:18:1D:09:36:36:DE:39:7A:C4:90:94:92:06:9E
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 019E905C4E0C242D16E178D14A396243A680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
Manifest number: 1621
Signing time: Thu 04 Jun 2026 02:00:28 +0000
Manifest this update: Thu 04 Jun 2026 02:00:28 +0000
Manifest next update: Fri 05 Jun 2026 02:00:28 +0000
Files and hashes: 1: 1-1OC6LmWlkhKJ9j7O2V8uHCIeLQ.roa (hash: pObdATG8V/x1kQuTr2uqeIMaWJhyU9KZK2VfEs01ILg=)
2: 55XJYXylpqO_8mP8GDeZL9GsR_I.crl (hash: vLQZj2epV7ksYSp+J+vcDbNYeWUa76DvfR1lPmyGdds=)
3: 8Q0plViYhTMAKVQAAXl5nNj-BBI.roa (hash: Fg0eMhaPWp57qj9BoW/Q3H9dkIdZE5CHVzhDBBdEeZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:5c:4e:0c:24:2d:16:e1:78:d1:4a:39:62:43:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Jun 4 02:00:28 2026 GMT
Not After : Jun 5 02:00:28 2026 GMT
Subject: CN=1052f2655bbf181d093636de397ac4909492069e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d2:02:98:ef:ed:21:37:e3:86:61:ea:c5:e7:
34:57:06:dd:37:65:4e:44:a2:bc:1b:b2:bf:4a:1e:
0f:07:21:e5:8c:96:ac:bb:52:fc:94:27:fe:6e:ec:
ce:17:25:29:7f:34:7f:02:8e:ae:44:ef:3c:6f:03:
07:6b:56:15:70:c7:a3:da:d1:b1:2e:40:7a:44:68:
64:31:1a:98:d9:36:9e:e5:b0:b3:60:40:e9:13:1c:
30:19:e7:3d:56:7e:34:90:b4:5d:f1:c7:07:d3:63:
a6:86:86:46:d1:d6:24:2f:9e:dc:cb:2f:49:7b:40:
1c:69:12:77:07:ff:4c:5d:ee:0e:3f:ce:20:b6:0c:
ba:9a:bc:9c:07:bf:c0:88:3b:bb:70:e4:8a:f3:38:
e4:ad:34:cf:d8:1f:ee:77:91:6c:6a:cc:a6:70:aa:
dd:ef:a1:2c:fe:bc:11:c1:2c:23:4d:e8:99:a9:bd:
4b:2a:1a:b7:5a:77:de:b9:45:ac:01:a7:29:ab:c1:
91:ed:c9:93:a8:0f:08:25:ed:fe:31:71:50:bc:92:
94:04:e4:fc:cb:53:75:8c:81:cd:67:28:65:a5:1d:
98:aa:90:09:93:6c:34:fc:ed:0b:62:4d:0d:9e:d5:
c6:29:15:48:a7:b2:29:92:ea:64:76:8b:6b:4d:4f:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:52:F2:65:5B:BF:18:1D:09:36:36:DE:39:7A:C4:90:94:92:06:9E
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:cc:3e:a2:d8:07:80:8a:48:8e:6d:e8:c8:78:d7:24:4d:72:
33:33:9f:0d:1b:08:3b:c3:c5:8c:1d:09:c0:f8:38:fe:1d:56:
f3:87:38:12:d3:79:b9:d0:3b:08:c9:0f:70:d6:8a:8f:e5:96:
b1:4b:e8:ed:21:76:4c:b6:55:4d:51:5a:f9:22:ee:43:1c:d7:
10:db:db:f1:9c:4d:03:f8:54:d1:01:e9:31:b0:18:21:4f:8d:
a5:5f:db:5c:7f:3c:4a:ef:32:6f:3e:05:47:ba:eb:54:f9:97:
8a:61:2b:a6:d7:73:e3:24:86:8a:0b:ad:ef:e4:96:6e:1b:98:
68:c0:3e:c2:28:5b:32:84:3d:81:1c:9a:b9:45:cb:d0:3b:f8:
29:36:5a:e6:17:06:7a:f6:14:bb:39:f4:30:d9:4c:68:d6:1d:
84:14:cf:7c:17:d1:6e:f4:81:ab:a3:81:9b:53:55:78:d7:d6:
d0:84:c5:93:ed:cb:a5:48:26:e1:73:cd:a0:17:7d:57:7d:92:
2e:ce:11:ae:b3:5c:9f:1c:e2:9b:21:12:ac:b2:bb:f7:a0:14:
dd:6b:b4:66:42:99:b9:ac:32:a1:6b:37:56:b8:78:db:e6:bc:
0f:b0:90:3e:da:ee:0b:6e:cb:d4:02:95:d5:dd:b8:6f:b5:94:
93:ee:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:09:31 2026 by rpki-client