
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
File: p72yx7M0uUvNQziPIfggktts_Uw.mft (raw, json)
Hash identifier: cbZRyMd2mXXCxNYf+pqF96ZG5VqK2qeKA3ueNSebCLo=
Subject key identifier: 1E:2C:23:DC:6D:E1:D4:AF:BC:88:71:C0:67:4E:17:87:92:23:AF:69
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Certificate issuer: /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial: 019CAB34847101E73B767B9E5A96D17A6C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:01:11 +0000
Manifest this update: Sun 01 Mar 2026 21:01:11 +0000
Manifest next update: Mon 02 Mar 2026 21:01:11 +0000
Files and hashes: 1: 6Xsm7GtWPf6sxisdeJuLCo-3tLo.roa (hash: xdyBNDU6Kuc/zF3hUM0jBGfeZpAD6Qr+9Bqu74wdbek=)
2: p72yx7M0uUvNQziPIfggktts_Uw.crl (hash: 2iHrMPT+FZr595qSk5d6wE77ITnX3vwPn3UL6pu2Mis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:84:71:01:e7:3b:76:7b:9e:5a:96:d1:7a:6c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Validity
Not Before: Mar 1 21:01:11 2026 GMT
Not After : Mar 2 21:01:11 2026 GMT
Subject: CN=1e2c23dc6de1d4afbc8871c0674e17879223af69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:a3:4b:c2:70:85:05:75:e3:8c:a9:9a:65:
12:8a:56:d5:11:85:59:08:1b:6e:e1:59:0e:af:b1:
48:30:30:eb:0c:15:a9:67:08:ed:d7:6e:df:05:84:
50:c9:69:fd:db:bd:a8:58:b6:52:71:9e:22:85:31:
a8:5c:ea:ea:84:85:af:f2:58:54:3e:ff:4b:05:cf:
92:6b:f2:8e:8b:3e:0e:f9:03:a5:6f:22:5d:e1:4d:
7b:28:f6:16:f1:03:34:b7:47:7d:b5:94:18:ce:e3:
b7:5d:05:c0:58:20:2c:42:24:ee:02:ba:e3:eb:00:
cc:6a:b2:8e:51:b2:3a:d0:fb:17:22:ff:d8:b0:4f:
90:44:11:a3:85:58:56:be:29:8d:67:65:7f:0a:6a:
34:1a:1a:ec:8f:7e:6f:8a:fd:fe:c2:55:65:f4:de:
fe:8b:b1:4d:ad:17:09:82:00:76:52:e8:2f:b0:ca:
71:b1:96:17:b3:a5:bd:b8:ee:3e:a0:bd:32:c2:61:
30:9d:38:25:7a:f3:3e:1a:99:4f:45:1f:fd:e4:3b:
88:ee:39:39:6d:99:ba:77:68:a2:f6:67:4e:59:0c:
7a:8a:b5:79:67:07:18:8e:ac:a7:15:30:3b:fd:68:
70:14:75:34:f0:4a:84:2c:57:e6:47:3e:f4:92:67:
80:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2C:23:DC:6D:E1:D4:AF:BC:88:71:C0:67:4E:17:87:92:23:AF:69
X509v3 Authority Key Identifier:
keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:06:40:db:b5:99:00:11:89:3f:f3:3f:85:fd:f8:77:4a:08:
36:db:6d:d5:60:aa:31:f4:e7:05:fd:e9:c1:74:eb:a7:df:3a:
1f:ae:51:d7:84:9d:eb:d3:a4:b2:b7:f4:fd:8d:e4:9b:a0:c2:
4d:17:06:25:fb:d9:de:10:27:a3:bd:d8:ae:48:9d:71:62:9b:
63:6a:26:2c:59:dc:42:40:33:a1:90:54:52:56:80:fe:5a:50:
bf:56:07:d0:63:f1:ce:0d:c4:69:a8:27:57:8f:34:3b:1d:2a:
48:79:96:6c:6c:e7:cd:8c:e5:fc:8e:29:24:09:b5:77:25:39:
47:ac:79:27:57:1e:a7:d4:46:af:6f:3d:df:cd:c1:52:1f:78:
d3:a1:51:c2:2e:c1:41:27:6d:cf:60:b0:0f:cc:a0:78:8e:20:
9f:7f:75:35:9e:05:69:8a:d1:b3:da:fc:20:fb:0d:22:03:47:
ce:b6:90:64:86:59:6e:77:60:8f:c8:2d:dc:ab:27:9e:a8:00:
6e:b1:e4:b2:be:11:5f:4c:1a:49:9f:f0:32:e4:69:d4:e9:fc:
1f:e1:7e:39:29:6f:a3:f1:6c:8e:66:b2:59:ad:13:5d:a5:77:
e3:58:a9:ce:38:65:a0:6b:dc:52:63:3f:f0:15:7f:81:62:c4:
20:42:b8:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNIRxAec7dnueWpbRemw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YmRiMmM3YjMzNGI5NGJjZDQzMzg4ZjIxZjgyMDkyZGI2
Y2ZkNGMwHhcNMjYwMzAxMjEwMTExWhcNMjYwMzAyMjEwMTExWjAzMTEwLwYDVQQD
EygxZTJjMjNkYzZkZTFkNGFmYmM4ODcxYzA2NzRlMTc4NzkyMjNhZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTSjS8JwhQV144ypmmUSilbVEYVZ
CBtu4VkOr7FIMDDrDBWpZwjt127fBYRQyWn9272oWLZScZ4ihTGoXOrqhIWv8lhU
Pv9LBc+Sa/KOiz4O+QOlbyJd4U17KPYW8QM0t0d9tZQYzuO3XQXAWCAsQiTuArrj
6wDMarKOUbI60PsXIv/YsE+QRBGjhVhWvimNZ2V/Cmo0Ghrsj35viv3+wlVl9N7+
i7FNrRcJggB2UugvsMpxsZYXs6W9uO4+oL0ywmEwnTglevM+GplPRR/95DuI7jk5
bZm6d2ii9mdOWQx6irV5ZwcYjqynFTA7/WhwFHU08EqELFfmRz70kmeAqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4sI9xt4dSvvIhxwGdOF4eSI69pMB8GA1UdIwQY
MBaAFKe9ssezNLlLzUM4jyH4IJLbbP1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQt
YTk1OGJmNWFjYmVhLzEvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQtYTk1OGJmNWFjYmVh
LzEvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQZA27WZ
ABGJP/M/hf34d0oINttt1WCqMfTnBf3pwXTrp986H65R14Sd69Oksrf0/Y3km6DC
TRcGJfvZ3hAno73YrkidcWKbY2omLFncQkAzoZBUUlaA/lpQv1YH0GPxzg3Eaagn
V480Ox0qSHmWbGznzYzl/I4pJAm1dyU5R6x5J1cep9RGr289383BUh9406FRwi7B
QSdtz2CwD8ygeI4gn391NZ4FaYrRs9r8IPsNIgNHzraQZIZZbndgj8gt3KsnnqgA
brHksr4RX0waSZ/wMuRp1On8H+F+OSlvo/FsjmayWa0TXaV341ipzjhloGvcUmM/
8BV/gWLEIEK4jA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:30 2026 by rpki-client