Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
File: p2i77FqeEb-9rthKqNOqzaKYifk.mft (raw, json)
Hash identifier: CLXU0gVVASJPdFvFU4s1ens5+PN3DtukMZ/2RB080P0=
Subject key identifier: AB:27:85:A8:A9:0C:F4:63:28:C0:4A:16:CC:F5:B5:AC:9D:2E:E9:57
Authority key identifier: A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
Certificate issuer: /CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Certificate serial: 019FAAF599B870426D420BEB892B85BD2F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 23:00:49 +0000
Manifest this update: Tue 28 Jul 2026 23:00:49 +0000
Manifest next update: Wed 29 Jul 2026 23:00:49 +0000
Files and hashes: 1: YwiBk7F0B614LD9wQoEFnkWeQjs.roa (hash: mvD8mcgS8Z/u8tn955UOEASMu8p9nleqgNicn8XmXOw=)
2: p2i77FqeEb-9rthKqNOqzaKYifk.crl (hash: RBtNGfTCg3pe6R+GGwC1eT3LPYuHtvS6UlhzqouP9e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:99:b8:70:42:6d:42:0b:eb:89:2b:85:bd:2f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Validity
Not Before: Jul 28 23:00:49 2026 GMT
Not After : Jul 29 23:00:49 2026 GMT
Subject: CN=ab2785a8a90cf46328c04a16ccf5b5ac9d2ee957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:64:08:7a:6c:e3:8b:1a:00:9f:a3:c8:35:
60:34:5e:6c:9f:7d:3a:93:37:86:b3:9f:93:44:66:
1f:fa:56:44:dd:68:ce:c8:db:a1:cd:87:db:56:0b:
8c:da:18:84:d8:25:7c:d1:97:65:4e:ee:2b:29:aa:
d1:03:cf:0d:fc:2f:b7:6d:65:97:27:64:ef:69:95:
33:9a:0e:72:ad:a6:5b:6f:c9:96:91:48:fb:8c:cc:
c1:bd:36:8b:5a:33:c1:57:07:29:97:e8:b6:4e:18:
ce:24:6f:cd:6c:4e:54:ca:52:57:c1:f0:be:fc:a3:
f9:c3:09:d8:e9:2e:b8:2c:9d:69:80:2e:35:fe:42:
08:b4:86:1d:84:dd:cf:6a:09:ba:b1:18:b2:b8:5b:
5f:e5:5b:5c:fe:f4:9b:0e:b5:ea:08:94:9e:e1:6c:
3c:92:bf:09:bd:b2:90:37:a5:58:df:85:d5:17:f4:
2a:89:f8:ec:48:2d:f3:2c:20:85:12:ef:0a:b7:07:
97:d4:6d:6a:f6:31:ce:17:f4:7c:d7:72:ce:5a:8c:
f5:eb:2c:bf:a1:73:99:85:4b:91:af:5f:e4:14:ed:
8c:c3:ae:4f:71:14:da:89:c4:58:13:b2:1e:af:7a:
7b:d5:bb:f2:4b:57:c5:5e:75:6e:e5:51:12:e4:bb:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:27:85:A8:A9:0C:F4:63:28:C0:4A:16:CC:F5:B5:AC:9D:2E:E9:57
X509v3 Authority Key Identifier:
keyid:A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:12:8d:3c:41:bc:59:69:80:c7:0f:a4:2c:86:bb:25:1f:62:
67:42:fa:43:2d:93:53:ff:8a:8c:63:f5:14:9d:7f:06:d9:46:
e7:35:24:51:1a:43:b8:14:c0:61:5a:4f:e6:d1:56:85:27:b2:
86:3d:4c:9f:55:9b:6e:3a:86:b6:88:13:91:20:de:a0:74:2a:
4b:c6:5c:78:93:0e:75:c8:9a:c0:a0:b0:e0:43:29:01:00:ce:
d8:93:5f:ad:58:2e:c6:7e:bd:f8:52:90:db:7f:c8:d6:bc:e4:
48:c7:c2:09:98:ba:87:51:34:89:f4:a0:93:e2:2c:35:12:32:
b3:0c:1a:39:e7:3a:7b:ba:fc:cb:6d:b2:bd:c3:b2:a3:e8:a9:
8b:32:3a:89:ca:bb:6e:a8:dc:b2:81:fe:b6:ac:c2:0c:3a:ef:
5a:60:ef:b3:4c:4e:6b:c2:b9:5f:ca:6c:16:0a:35:9a:a9:ce:
ff:d6:61:5a:46:45:a8:f0:0f:d1:0b:a5:fd:68:dd:ca:7f:2f:
7f:bf:f6:04:f6:7c:8b:3a:f0:39:36:c8:70:bf:f6:55:b3:45:
67:b7:3e:45:91:d6:3f:f8:02:8a:8f:9d:cd:1d:29:26:40:9c:
e3:81:10:86:26:00:d5:c1:02:77:f3:f4:43:e9:c8:9f:9a:b7:
54:a5:b3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:41:15 2026 by rpki-client