Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
File: p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json)
Hash identifier: kWPqO+Oq1X4pzCv7WxjAgyqAHw4IL2F12AKndYZ+71Y=
Subject key identifier: 84:6F:CF:79:41:54:64:58:94:0C:E4:DD:6F:A7:5E:79:3E:3B:05:F8
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial: 019D9886E1C071974BD12DB9942E319B8AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
Manifest number: 09B1
Signing time: Thu 16 Apr 2026 23:01:09 +0000
Manifest this update: Thu 16 Apr 2026 23:01:09 +0000
Manifest next update: Fri 17 Apr 2026 23:01:09 +0000
Files and hashes: 1: 9H2Cao4L9seLn80FxSiOGYvYmbE.roa (hash: 6fh3UPrvbfpSC3IgcyXg2AEmgPfBi1rjETuQ8TwnWs8=)
2: J616ho14DKGXrY52dTz4rECA6rg.roa (hash: Pr/K62ihwSA6YnMNqUbbcVQlKEbx5zr2tsgN3ot1lW4=)
3: JzRoxhNcR2kzwArFwmc0pS-ExCs.roa (hash: KJ1WUHpaALO4NgyLeM/jwu4bNeSWXf1o/mMEG/mPGY8=)
4: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: 3BjpafQJ/J3EuNBvstgwHRvOLXFeL9JLdOyvWNZ0+NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:e1:c0:71:97:4b:d1:2d:b9:94:2e:31:9b:8a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Validity
Not Before: Apr 16 23:01:09 2026 GMT
Not After : Apr 17 23:01:09 2026 GMT
Subject: CN=846fcf7941546458940ce4dd6fa75e793e3b05f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c1:a4:11:7f:43:55:cb:15:68:29:8e:3d:4e:
f9:fe:94:40:01:c7:1e:1e:31:90:a2:1b:6b:ca:c1:
b9:b5:c0:a3:ca:31:c9:0c:f1:a1:eb:88:17:b0:4c:
3c:52:5e:43:87:72:ab:a7:29:1d:b8:56:4e:83:18:
46:3b:81:ca:61:12:73:05:e0:94:5f:60:4d:24:b7:
6d:b9:f8:2c:75:70:06:03:6f:89:7c:e2:87:df:6b:
b0:7c:b6:6f:b3:38:8c:f6:0d:d7:51:c4:43:ac:33:
e7:cd:78:1a:f3:04:c0:fa:10:0c:e5:31:9a:f5:17:
fd:d3:12:52:47:0d:ce:ea:40:b1:1a:38:51:02:f2:
11:04:45:64:77:2d:84:bb:02:8e:f7:fa:db:1d:8e:
b4:11:c1:20:d4:43:e6:45:d2:a7:ef:5d:c8:cd:a7:
1a:df:c1:4e:0b:84:82:d6:dc:cc:d3:13:00:21:7c:
ab:96:5d:67:54:c5:3c:12:42:28:fa:2c:54:7f:bf:
e3:7c:47:47:fe:03:13:13:9f:f5:e8:c1:e0:27:20:
ee:8f:24:ce:7f:13:08:bb:2f:17:7e:b7:f4:09:a6:
97:f1:a9:26:c3:d8:a5:23:55:7b:ad:00:1e:46:2f:
aa:18:70:9b:91:79:09:c1:5f:f6:db:6d:52:eb:f7:
3b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6F:CF:79:41:54:64:58:94:0C:E4:DD:6F:A7:5E:79:3E:3B:05:F8
X509v3 Authority Key Identifier:
keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2f:6f:fe:db:c4:5a:1d:b9:1f:ec:dc:a1:b1:04:5b:31:ed:
f3:07:ce:2e:ec:ec:b9:33:27:e4:10:fd:f5:65:06:c8:4c:ea:
01:15:db:4e:2f:3e:24:94:8d:08:31:24:8c:23:7a:8e:4e:b6:
b9:b5:76:ae:8c:1e:8a:7f:11:ba:2e:9d:33:a8:d2:50:53:0a:
ed:64:eb:86:2a:87:68:11:ae:06:e8:02:ec:ed:3b:ee:84:ad:
e0:de:00:22:6a:f1:cd:b2:43:7c:02:5d:35:32:0f:90:78:83:
80:dc:c5:88:f8:6c:51:4c:c2:a0:a1:69:90:a8:5a:c5:37:c3:
56:9b:5b:3b:7e:6f:8b:bc:f9:12:cb:15:e0:22:99:38:07:59:
f0:59:57:b1:3e:03:8e:f9:fe:c7:aa:91:f2:dc:0a:28:de:b0:
21:e0:1c:62:28:15:01:c5:26:b2:fd:10:83:d7:e5:25:90:2c:
59:86:98:6a:f4:51:e0:92:e8:6e:11:31:55:77:00:96:d2:12:
c6:68:5d:00:15:ac:25:e0:f5:53:dc:3d:1d:b2:ae:a6:44:40:
ca:f5:8f:d2:fa:93:23:c7:08:75:cb:18:95:b6:35:20:b4:50:
ed:0f:1e:64:4e:e9:69:80:a5:82:fb:9f:26:34:a8:b0:fe:fe:
65:c2:ca:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:44 2026 by rpki-client