Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
File: 977TP_AejgncT-3NAROcDneFSq4.mft (raw, json)
Hash identifier: gIEzDM2sf0sd0YnL4l2IBoG1v0mRxtSToqiF7234NTs=
Subject key identifier: D2:97:96:72:AB:18:6A:44:2A:14:BA:71:F5:35:F9:63:92:2A:AF:28
Authority key identifier: F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
Certificate issuer: /CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Certificate serial: 019FA82B2B03672EE39592D2F54C6F3973B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
Manifest number: 19DA
Signing time: Tue 28 Jul 2026 10:00:29 +0000
Manifest this update: Tue 28 Jul 2026 10:00:29 +0000
Manifest next update: Wed 29 Jul 2026 10:00:29 +0000
Files and hashes: 1: 977TP_AejgncT-3NAROcDneFSq4.crl (hash: xsc//fno8lqmUNsc7FYhDWn7bP1EZLVWwIZV7d0fl+U=)
2: K9ARhNUPke1FUpRD3jCOS20cCT8.roa (hash: xemlBpuRtqlzVTp6vvfqrvYIR9l5jVMyrtmPWS3Y4YY=)
3: uGNfdvA7X3WyOFyt75e9tVBH91A.roa (hash: 5//JVVveSwHR2hj+bfwWqReYip5bDufgsCMYkbkcBgE=)
4: w_HVWxfgMKccvm-uPAq_mXE30RI.roa (hash: nRyRk7kTehxIu33cjbfvuUdw6sNcxsEjbFzAJfWoy80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:2b:03:67:2e:e3:95:92:d2:f5:4c:6f:39:73:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Validity
Not Before: Jul 28 10:00:29 2026 GMT
Not After : Jul 29 10:00:29 2026 GMT
Subject: CN=d2979672ab186a442a14ba71f535f963922aaf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:da:29:ed:89:be:63:88:b2:b9:75:26:e4:71:
6d:8e:38:dd:1a:68:b7:a7:ef:81:48:1f:fa:03:73:
74:f0:d8:f3:d6:dc:85:7b:a1:6b:52:33:db:fe:9b:
bd:60:0e:b7:39:cb:d4:7f:ce:d5:18:95:30:bb:a5:
44:8f:c3:8e:d7:dd:16:0d:23:81:35:59:3a:67:1f:
ff:a9:ec:e1:3a:6f:f3:ae:49:15:e0:17:75:da:fb:
ac:67:3a:ea:20:b2:c8:be:c7:6f:30:47:9e:85:c1:
c9:3b:6a:82:ea:25:5f:db:af:96:43:9d:82:b0:77:
cd:a1:c0:65:1b:f2:69:56:10:9a:d4:82:07:4d:9c:
f4:37:70:db:4a:e8:77:cc:e0:4a:de:ac:6d:b5:47:
61:b8:00:cf:7e:1d:4e:3f:5d:3e:6c:81:67:8a:95:
48:ec:3a:b7:12:5d:70:2b:b3:8d:25:cb:64:c6:74:
ec:01:04:c4:ee:f1:e1:82:5c:94:a2:df:8a:86:dd:
94:3c:2d:cf:10:d8:8e:07:d9:f0:b4:0d:3c:90:b4:
65:58:55:3d:c5:a4:48:ce:f5:19:65:a4:da:e4:7a:
87:c8:94:01:5b:85:f2:7f:94:f7:c2:be:e3:ed:02:
41:5c:c3:85:96:ef:69:bf:72:4c:b8:87:69:30:f3:
ad:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:97:96:72:AB:18:6A:44:2A:14:BA:71:F5:35:F9:63:92:2A:AF:28
X509v3 Authority Key Identifier:
keyid:F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ac:c4:18:54:00:3d:6f:4c:a3:95:f0:b4:52:ea:22:3c:45:
c4:7c:2c:c7:09:db:27:d5:2f:dc:3b:32:49:c8:3f:91:ec:4b:
88:1e:83:0c:24:f8:fb:d5:61:7d:f5:6a:57:59:f0:1a:7e:9a:
11:63:70:83:09:b9:a2:6b:75:0f:ca:fc:c0:8f:79:f4:bc:c9:
8b:9a:46:e7:ee:b4:31:a4:00:5b:af:d9:15:f7:a4:b9:01:2f:
d1:d4:7e:6a:58:4b:1c:ff:a8:d2:89:c1:e9:29:89:95:d7:0f:
14:d0:8b:52:94:1e:42:cd:a0:9f:c6:43:0b:30:5c:24:49:7d:
10:8e:15:27:52:3d:ad:2d:ae:54:8b:11:3d:bc:6c:90:51:85:
b7:52:10:dc:15:42:85:1d:aa:37:95:9c:22:9d:f9:24:63:8b:
22:57:c2:4a:ff:f5:5c:8a:2f:f7:38:73:ee:db:01:f3:69:a9:
9d:86:6a:79:8d:50:a3:38:d6:70:23:d4:22:61:ed:d0:6c:77:
7f:d8:cb:d9:69:47:96:0e:39:7b:fb:7e:45:40:ce:94:65:95:
9c:15:b6:ef:b5:1c:9d:c4:8c:be:0b:c6:e1:3d:f6:28:1a:35:
f9:2f:55:aa:c2:96:99:12:64:fd:aa:a4:3c:0f:ff:89:14:90:
1e:50:f0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:04 2026 by rpki-client