Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
File: 55XJYXylpqO_8mP8GDeZL9GsR_I.mft (raw, json)
Hash identifier: OQxzBrauW8EBePQqo/SFwKWOaUB6dpnVuF2f+sJ6BUo=
Subject key identifier: 22:C8:3A:AE:D7:83:10:50:3E:D0:76:D1:B3:43:52:D3:B0:5E:C0:47
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 019DA89E42468E581D2A98BAAD9E3E2523D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
Manifest number: 15A9
Signing time: Mon 20 Apr 2026 02:00:37 +0000
Manifest this update: Mon 20 Apr 2026 02:00:37 +0000
Manifest next update: Tue 21 Apr 2026 02:00:37 +0000
Files and hashes: 1: 1-1OC6LmWlkhKJ9j7O2V8uHCIeLQ.roa (hash: pObdATG8V/x1kQuTr2uqeIMaWJhyU9KZK2VfEs01ILg=)
2: 55XJYXylpqO_8mP8GDeZL9GsR_I.crl (hash: bp0oTtPiOgjBIQ8jNaXUKBR1cn8HyKFXmpgZsnzfgEE=)
3: 8Q0plViYhTMAKVQAAXl5nNj-BBI.roa (hash: Fg0eMhaPWp57qj9BoW/Q3H9dkIdZE5CHVzhDBBdEeZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:9e:42:46:8e:58:1d:2a:98:ba:ad:9e:3e:25:23:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Apr 20 02:00:37 2026 GMT
Not After : Apr 21 02:00:37 2026 GMT
Subject: CN=22c83aaed78310503ed076d1b34352d3b05ec047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:ce:20:8d:49:55:a6:fa:6e:5a:a9:a7:a2:
b8:14:bb:ed:6a:30:f7:97:d8:0c:64:c8:db:d6:a8:
1b:a8:81:7f:cd:6b:e3:80:09:cb:1b:cb:91:50:c9:
6d:e1:7c:df:95:5f:1e:7e:70:a2:91:82:ed:e7:fa:
8c:af:b4:bf:29:cc:4c:bf:32:7a:dd:95:53:64:9a:
73:06:6d:28:f8:ce:f9:79:79:a6:23:cf:c7:27:da:
e5:a1:c2:75:cc:84:89:78:a8:49:7e:38:fb:ac:12:
7e:8c:76:f5:68:a3:28:e7:cb:5c:02:25:cb:34:54:
50:d7:04:38:68:c2:fc:0a:3b:6e:e8:5a:e0:d8:bd:
23:6c:cd:2f:c1:fe:d2:24:01:45:49:7c:c0:4c:3a:
b8:92:fd:25:4d:19:e5:53:45:5e:f1:8f:d6:e3:8e:
69:9d:c7:3a:5a:50:1e:56:96:c4:3d:b3:44:e0:2b:
76:9f:d0:07:b1:30:0c:17:6f:6d:86:65:e1:00:19:
16:c4:6f:4a:e3:df:d0:cb:eb:3e:71:be:55:00:b4:
1f:31:dc:9f:f4:ef:8d:9a:fc:24:61:a3:5a:d1:21:
1f:f7:9c:14:96:fb:de:f6:a5:d2:30:be:af:86:69:
05:cc:1c:96:c1:9a:fb:96:c7:99:66:4e:e6:30:fc:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C8:3A:AE:D7:83:10:50:3E:D0:76:D1:B3:43:52:D3:B0:5E:C0:47
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e1:c5:d5:be:0c:fc:cb:28:e6:16:07:0b:84:72:0a:7f:b5:
ab:3d:52:92:c7:5e:d2:ec:36:37:e2:c1:b7:09:33:a3:30:5a:
d7:a5:7f:d6:c0:4e:fd:83:62:c6:29:bb:37:b9:71:1e:bb:71:
64:3f:3c:52:bc:ea:57:ed:5e:8e:4d:f7:23:93:0d:74:e1:73:
50:87:88:2d:8d:ca:56:2c:91:21:08:f6:28:ad:10:ee:fb:c4:
92:7e:c4:2a:f5:a9:19:aa:f9:c5:71:d5:b9:53:a9:0c:0e:47:
36:0a:41:15:f1:3c:1d:6c:bb:c7:f1:ba:22:6a:5a:be:49:c1:
81:bd:3d:85:d6:d7:bc:bc:20:73:4b:13:bc:ca:40:bb:9b:56:
01:65:08:1e:7f:f7:c2:eb:e4:13:57:70:fc:ac:ee:48:a0:d4:
8b:a6:9c:2d:92:fa:27:81:6d:b0:ac:63:b2:20:8a:63:04:1d:
2d:08:0d:6e:97:6d:5a:6a:59:9c:10:55:33:90:25:df:cb:2f:
94:1b:72:48:e5:a5:f7:cf:c0:94:4c:e0:24:7c:4f:52:e4:35:
91:5b:b9:ff:5c:a0:e2:e7:a8:16:33:b4:38:20:3a:a3:3c:00:
6a:47:62:6b:fd:2d:9d:1b:d9:ec:80:f3:9f:a2:01:67:e0:6f:
29:c2:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:35:21 2026 by rpki-client