Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
File: p72yx7M0uUvNQziPIfggktts_Uw.mft (raw, json)
Hash identifier: SIaI50NM/kei4FF21YI+nu04zzMn9k9yHaMzOse0aqY=
Subject key identifier: 0B:B5:67:87:CC:EA:D3:56:89:54:29:EC:C3:1B:2D:6B:17:56:C8:03
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Certificate issuer: /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial: 01A0DB03FA7FD7DBAD7C0BF0FAB5B9BD3439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 00:01:06 +0000
Manifest this update: Sat 26 Sep 2026 00:01:06 +0000
Manifest next update: Sun 27 Sep 2026 00:01:06 +0000
Files and hashes: 1: 6Xsm7GtWPf6sxisdeJuLCo-3tLo.roa (hash: xdyBNDU6Kuc/zF3hUM0jBGfeZpAD6Qr+9Bqu74wdbek=)
2: p72yx7M0uUvNQziPIfggktts_Uw.crl (hash: 3NN2L74HwfTwejr0WZrw8KFHmieEA1XoRnW8REZJpa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:03:fa:7f:d7:db:ad:7c:0b:f0:fa:b5:b9:bd:34:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Validity
Not Before: Sep 26 00:01:06 2026 GMT
Not After : Sep 27 00:01:06 2026 GMT
Subject: CN=0bb56787ccead356895429ecc31b2d6b1756c803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:ba:ee:3f:98:8f:0a:0f:da:ff:31:6e:9b:
89:64:04:cf:ea:c4:14:b8:a8:cf:db:f1:aa:1a:da:
9a:bc:5d:ce:d9:10:78:75:29:22:d3:6a:15:ae:88:
43:d2:15:93:a7:f7:b7:19:3c:5b:e9:dc:28:ca:53:
12:db:bc:8b:7e:9f:89:c4:13:ea:f6:80:b1:97:1f:
c1:f7:1c:64:25:94:29:38:52:b4:d9:eb:42:9c:37:
23:bc:d0:01:e7:47:2e:17:e6:1f:15:41:55:10:26:
0e:58:eb:f4:f3:e4:4d:6d:19:50:92:b7:eb:a1:63:
10:a8:c7:06:48:e5:31:9c:24:49:57:72:00:12:92:
e3:71:4f:7a:0d:7f:38:e1:88:14:86:ff:0f:2a:2f:
f1:0b:2f:28:20:12:f1:2b:e9:4f:9e:f3:ce:49:6f:
54:df:b6:ca:4c:fd:26:f0:c5:02:15:34:62:ec:84:
1c:0b:c1:2c:ec:19:41:9e:e8:ea:7c:92:30:c1:a3:
d0:94:67:6a:e8:78:99:bf:0b:8b:8e:48:62:d7:c4:
9b:2f:e8:10:1d:dd:08:27:43:b8:c7:17:e0:fd:24:
64:27:86:ec:3d:0b:70:e9:00:d9:59:eb:1d:df:f5:
c6:87:b7:57:cc:62:91:1d:15:fc:81:a6:40:27:53:
9f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B5:67:87:CC:EA:D3:56:89:54:29:EC:C3:1B:2D:6B:17:56:C8:03
X509v3 Authority Key Identifier:
keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8f:00:ca:58:f3:04:00:8a:64:0a:e1:5c:b1:1a:b0:1f:9c:
a8:06:50:f9:e9:49:ff:28:b1:f0:9a:f3:de:89:26:15:75:b2:
2d:d9:2f:07:19:85:e7:bf:3a:d7:2b:ba:ae:e4:82:c7:31:dd:
05:f9:71:82:2f:31:2f:e5:54:5f:31:a0:13:5f:78:48:32:94:
10:3e:7b:41:58:13:88:9f:ec:ab:75:30:31:60:a7:1c:bc:3a:
23:8a:c8:ea:7e:7d:b6:64:61:3f:b6:3e:d6:59:a9:1e:f7:94:
ef:2b:9e:c8:f2:f3:5d:60:e5:c4:59:48:ab:7a:d7:e0:24:85:
d3:e8:74:90:67:dd:69:a3:7c:a4:5c:2a:15:d0:6a:47:9d:e9:
c6:db:63:d4:9f:b2:bd:61:45:f2:55:9f:af:c2:1f:05:83:35:
4a:f1:e1:c8:b0:64:a8:6d:bf:a9:3b:c3:6c:05:0c:29:31:03:
8d:d2:b0:18:ad:eb:87:4a:97:be:90:c8:68:53:e9:ce:6b:e6:
a3:21:97:32:e5:45:27:4a:71:77:46:ee:8f:17:a9:fd:49:e3:
d6:3c:1d:eb:e5:1b:41:e7:93:8b:a3:61:6d:d8:1b:5c:7f:6f:
57:d9:73:eb:bd:d0:89:9e:bc:b7:dc:c2:92:af:cf:0b:d9:17:
df:ed:b6:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbA/p/19utfAvw+rW5vTQ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YmRiMmM3YjMzNGI5NGJjZDQzMzg4ZjIxZjgyMDkyZGI2
Y2ZkNGMwHhcNMjYwOTI2MDAwMTA2WhcNMjYwOTI3MDAwMTA2WjAzMTEwLwYDVQQD
EygwYmI1Njc4N2NjZWFkMzU2ODk1NDI5ZWNjMzFiMmQ2YjE3NTZjODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEW67j+YjwoP2v8xbpuJZATP6sQU
uKjP2/GqGtqavF3O2RB4dSki02oVrohD0hWTp/e3GTxb6dwoylMS27yLfp+JxBPq
9oCxlx/B9xxkJZQpOFK02etCnDcjvNAB50cuF+YfFUFVECYOWOv08+RNbRlQkrfr
oWMQqMcGSOUxnCRJV3IAEpLjcU96DX844YgUhv8PKi/xCy8oIBLxK+lPnvPOSW9U
37bKTP0m8MUCFTRi7IQcC8Es7BlBnujqfJIwwaPQlGdq6HiZvwuLjkhi18SbL+gQ
Hd0IJ0O4xxfg/SRkJ4bsPQtw6QDZWesd3/XGh7dXzGKRHRX8gaZAJ1OfKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAu1Z4fM6tNWiVQp7MMbLWsXVsgDMB8GA1UdIwQY
MBaAFKe9ssezNLlLzUM4jyH4IJLbbP1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQt
YTk1OGJmNWFjYmVhLzEvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQtYTk1OGJmNWFjYmVh
LzEvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW48Ayljz
BACKZArhXLEasB+cqAZQ+elJ/yix8Jrz3okmFXWyLdkvBxmF57861yu6ruSCxzHd
Bflxgi8xL+VUXzGgE194SDKUED57QVgTiJ/sq3UwMWCnHLw6I4rI6n59tmRhP7Y+
1lmpHveU7yueyPLzXWDlxFlIq3rX4CSF0+h0kGfdaaN8pFwqFdBqR53pxttj1J+y
vWFF8lWfr8IfBYM1SvHhyLBkqG2/qTvDbAUMKTEDjdKwGK3rh0qXvpDIaFPpzmvm
oyGXMuVFJ0pxd0bujxep/Unj1jwd6+UbQeeTi6NhbdgbXH9vV9lz673QiZ68t9zC
kq/PC9kX3+22Cg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:01:48 2026 by rpki-client