Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
File: 55XJYXylpqO_8mP8GDeZL9GsR_I.mft (raw, json)
Hash identifier: DBdEhldlt5xeAVCum1vmIYQ0uF/kWaXwtvByAvrBNu0=
Subject key identifier: A5:7A:B3:0F:38:E2:46:E4:10:AF:FE:A8:A1:A5:E4:DB:13:FC:79:E5
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 019CC0E0614E326795BAB52A580545F3E0F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
Manifest number: 1531
Signing time: Fri 06 Mar 2026 02:00:56 +0000
Manifest this update: Fri 06 Mar 2026 02:00:56 +0000
Manifest next update: Sat 07 Mar 2026 02:00:56 +0000
Files and hashes: 1: 1-1OC6LmWlkhKJ9j7O2V8uHCIeLQ.roa (hash: pObdATG8V/x1kQuTr2uqeIMaWJhyU9KZK2VfEs01ILg=)
2: 55XJYXylpqO_8mP8GDeZL9GsR_I.crl (hash: DQ2xzk6DMqdfuDt6cl/n4Ae0c6XACboRrlH+AGRQuXo=)
3: 8Q0plViYhTMAKVQAAXl5nNj-BBI.roa (hash: Fg0eMhaPWp57qj9BoW/Q3H9dkIdZE5CHVzhDBBdEeZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c0:e0:61:4e:32:67:95:ba:b5:2a:58:05:45:f3:e0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Mar 6 02:00:56 2026 GMT
Not After : Mar 7 02:00:56 2026 GMT
Subject: CN=a57ab30f38e246e410affea8a1a5e4db13fc79e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:b5:ea:1e:60:30:d5:63:5a:ac:fc:40:bc:
2a:a6:18:de:be:18:ad:45:a3:af:ee:76:af:9c:0f:
67:2c:fe:44:8f:2c:a8:62:76:4e:d5:79:de:c1:c1:
9f:33:53:37:00:43:94:ab:0b:a6:b3:be:8a:92:53:
2b:3e:60:4c:7d:45:29:5c:2b:43:93:7d:5f:38:bb:
f9:44:15:b0:b2:43:14:13:7b:3b:df:6e:67:2b:06:
24:ae:7e:d0:ba:9a:1c:25:23:d7:e7:a4:63:65:79:
4a:9a:ba:88:c2:c5:cf:dd:04:35:67:2f:51:ba:a6:
7f:75:59:f3:7e:f7:43:e8:b4:13:f6:25:3d:f3:04:
52:57:1f:70:95:42:53:93:45:60:52:0f:79:52:58:
a2:fa:f9:b0:ca:4c:f1:60:20:44:01:95:2d:b3:81:
5d:f6:f0:43:8a:68:23:d0:c4:8d:1a:91:65:b3:2c:
81:d4:cd:af:8c:87:0c:63:52:ae:8f:d7:a0:90:4b:
ca:b1:94:4a:9c:db:6f:f3:07:af:f9:f2:c3:76:10:
90:c8:82:7e:08:dd:c4:d1:bf:13:d9:9c:79:40:47:
39:14:1f:c2:50:0f:05:2f:0d:da:b6:1a:66:a6:5e:
58:25:9e:07:76:59:3d:b5:0d:dd:76:5c:f0:fb:d7:
e0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7A:B3:0F:38:E2:46:E4:10:AF:FE:A8:A1:A5:E4:DB:13:FC:79:E5
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:09:ed:a3:ce:c6:6c:c5:ef:b8:d9:c3:d5:84:27:48:97:76:
40:a4:bb:6d:8e:3f:95:73:2f:8f:45:56:2d:c2:9a:e3:29:13:
97:e5:d9:19:0a:de:47:00:34:af:f9:8e:1a:50:a1:77:c6:a2:
95:cd:b9:bb:47:7a:02:57:42:30:61:60:e7:4c:a9:c6:bb:79:
ac:0d:c0:94:3a:fd:c9:41:07:4d:43:d2:f1:03:26:90:01:8e:
f2:9f:4e:b4:32:c0:27:85:ae:5b:13:9b:58:f6:be:13:51:8e:
96:52:16:81:3d:08:a9:e9:a1:fa:a6:4f:29:92:0f:2c:72:70:
be:cd:a2:1d:18:1e:2d:53:ad:0f:e5:4c:5a:e1:b1:2d:0f:2b:
24:ae:b1:82:9d:cb:77:06:f6:95:2c:2b:66:ac:03:82:6f:d9:
a5:58:40:fb:5a:b7:1b:01:f0:83:3c:f2:e5:c8:e3:56:0f:6a:
c0:1e:39:b8:87:ca:15:85:ab:77:fb:49:06:33:7d:26:7c:c8:
f8:2a:fb:88:ba:48:75:85:df:10:91:c3:cf:ff:0d:05:9c:77:
10:48:f3:6c:c4:40:91:f9:08:42:db:1e:27:9d:11:48:82:bb:
34:10:f4:58:ac:77:6a:69:43:0d:1e:47:cf:b1:a1:53:a9:99:
67:07:6c:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzA4GFOMmeVurUqWAVF8+D5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OTVjOTYxN2NhNWE2YTNiZmYyNjNmYzE4Mzc5OTJmZDFh
YzQ3ZjIwHhcNMjYwMzA2MDIwMDU2WhcNMjYwMzA3MDIwMDU2WjAzMTEwLwYDVQQD
EyhhNTdhYjMwZjM4ZTI0NmU0MTBhZmZlYThhMWE1ZTRkYjEzZmM3OWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxa16h5gMNVjWqz8QLwqphjevhit
RaOv7navnA9nLP5EjyyoYnZO1XnewcGfM1M3AEOUqwums76KklMrPmBMfUUpXCtD
k31fOLv5RBWwskMUE3s7325nKwYkrn7QupocJSPX56RjZXlKmrqIwsXP3QQ1Zy9R
uqZ/dVnzfvdD6LQT9iU98wRSVx9wlUJTk0VgUg95Ulii+vmwykzxYCBEAZUts4Fd
9vBDimgj0MSNGpFlsyyB1M2vjIcMY1Kuj9egkEvKsZRKnNtv8wev+fLDdhCQyIJ+
CN3E0b8T2Zx5QEc5FB/CUA8FLw3athpmpl5YJZ4Hdlk9tQ3ddlzw+9fgFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKV6sw844kbkEK/+qKGl5NsT/HnlMB8GA1UdIwQY
MBaAFOeVyWF8paajv/Jj/Bg3mS/RrEfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85ODZkZGUtNWY2OC00YzIxLWI1NDYt
ZDU0MGRmODg2YmFiLzEvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC85ODZkZGUtNWY2OC00YzIxLWI1NDYtZDU0MGRmODg2YmFi
LzEvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQnto87G
bMXvuNnD1YQnSJd2QKS7bY4/lXMvj0VWLcKa4ykTl+XZGQreRwA0r/mOGlChd8ai
lc25u0d6AldCMGFg50ypxrt5rA3AlDr9yUEHTUPS8QMmkAGO8p9OtDLAJ4WuWxOb
WPa+E1GOllIWgT0Iqemh+qZPKZIPLHJwvs2iHRgeLVOtD+VMWuGxLQ8rJK6xgp3L
dwb2lSwrZqwDgm/ZpVhA+1q3GwHwgzzy5cjjVg9qwB45uIfKFYWrd/tJBjN9JnzI
+Cr7iLpIdYXfEJHDz/8NBZx3EEjzbMRAkfkIQtseJ50RSIK7NBD0WKx3amlDDR5H
z7GhU6mZZwdsUQ==
-----END CERTIFICATE-----
Generated at Fri Mar 6 04:00:49 2026 by rpki-client