Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
File: p2i77FqeEb-9rthKqNOqzaKYifk.mft (raw, json)
Hash identifier: pZjui0O7uizYIDd035nisGQ/xfNIpkoRzl32eaiVewQ=
Subject key identifier: BD:08:3A:00:C8:70:E9:73:1C:6A:4C:54:38:A7:BD:6C:D6:3B:37:06
Authority key identifier: A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
Certificate issuer: /CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Certificate serial: 01A0CAB47F559CA0726B749C7CD071BD7E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 20:00:21 +0000
Manifest this update: Tue 22 Sep 2026 20:00:21 +0000
Manifest next update: Wed 23 Sep 2026 20:00:21 +0000
Files and hashes: 1: YwiBk7F0B614LD9wQoEFnkWeQjs.roa (hash: mvD8mcgS8Z/u8tn955UOEASMu8p9nleqgNicn8XmXOw=)
2: p2i77FqeEb-9rthKqNOqzaKYifk.crl (hash: 1jzA0c+N6Tm6N/zhpIRsVEhmX/pDMC7GI5X/MRgriDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:7f:55:9c:a0:72:6b:74:9c:7c:d0:71:bd:7e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Validity
Not Before: Sep 22 20:00:21 2026 GMT
Not After : Sep 23 20:00:21 2026 GMT
Subject: CN=bd083a00c870e9731c6a4c5438a7bd6cd63b3706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:8a:93:2f:de:56:06:ee:38:ab:58:ba:dd:
72:67:15:ab:8d:20:45:a7:9c:20:93:8f:fb:78:76:
28:09:c2:de:92:54:e2:14:04:2c:94:e7:8c:0f:04:
6c:82:40:78:ca:89:9c:13:67:8e:4a:d4:03:58:6d:
b5:da:2a:e4:c0:93:c5:b1:31:53:c6:15:76:26:2e:
0c:87:78:70:cb:b7:38:c7:75:f5:32:66:92:9a:2f:
a8:3f:98:8e:03:74:cc:38:af:58:2a:fb:08:3d:d4:
9d:e7:44:2e:72:ba:ad:3f:62:56:71:b2:2b:09:38:
17:c8:e7:17:c0:f4:e4:0a:13:b9:b8:75:03:6a:af:
41:97:24:32:da:d3:a0:3f:69:c6:f6:2a:46:7d:8a:
03:a7:7b:d4:7c:4a:91:7a:e8:09:df:4f:9e:8c:a6:
36:13:db:5d:45:95:cc:71:57:29:1b:8f:6c:0f:11:
db:9f:6a:1c:46:33:a1:ad:1c:58:16:83:82:f3:66:
82:31:c9:d8:f2:3b:d1:0c:e9:e1:04:b7:da:4a:65:
21:97:dc:6a:80:e4:0d:b8:74:a2:15:7b:42:15:e9:
ee:39:3f:b6:0d:30:11:f9:5e:56:54:98:c3:de:de:
90:10:2f:ea:69:7c:a4:b4:b9:18:4d:18:a8:cb:a1:
59:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:08:3A:00:C8:70:E9:73:1C:6A:4C:54:38:A7:BD:6C:D6:3B:37:06
X509v3 Authority Key Identifier:
keyid:A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c8:e5:8e:13:e1:19:95:f1:8d:4e:14:5a:38:19:72:d4:34:
5c:d9:89:4e:32:f5:a0:f9:24:a1:f6:3b:2a:c4:c0:63:51:d8:
bd:b2:97:eb:55:ff:62:af:65:2f:74:2f:d3:57:5b:99:68:30:
d7:79:ad:62:e7:43:2e:9b:23:95:5e:37:5b:dd:af:84:5e:75:
38:95:14:4a:f9:35:a0:67:95:8f:c0:91:3a:ad:d5:70:3a:90:
79:df:26:19:fa:dd:2c:6d:4d:bc:c1:8b:1c:fc:68:2a:cc:47:
a7:68:ae:39:b9:c8:1b:17:af:5f:52:32:f6:e7:94:b1:1f:f3:
73:15:e9:e0:2d:66:d0:a9:fd:d8:42:db:cf:fd:25:32:16:b1:
b3:ad:1a:47:d4:3f:7b:dd:1e:19:2d:75:4f:c5:65:7d:7c:df:
c3:f5:7f:4a:85:f3:99:52:a3:3c:03:e4:32:93:89:69:a5:d1:
33:a3:a5:19:04:fd:d2:db:2b:ab:a3:a0:ea:14:9a:75:0a:d3:
f5:a1:58:60:84:29:bc:94:27:4f:18:e9:e3:ab:05:31:da:87:
70:74:b1:31:96:b1:d7:d7:ef:d2:3f:ed:d0:f8:57:b9:5d:17:
36:85:0f:6a:a4:b6:45:18:a4:fd:8d:2b:f8:79:f6:0f:b8:b2:
e9:08:e5:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKtH9VnKBya3ScfNBxvX6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NjhiYmVjNWE5ZTExYmZiZGFlZDg0YWE4ZDNhYWNkYTI5
ODg5ZjkwHhcNMjYwOTIyMjAwMDIxWhcNMjYwOTIzMjAwMDIxWjAzMTEwLwYDVQQD
EyhiZDA4M2EwMGM4NzBlOTczMWM2YTRjNTQzOGE3YmQ2Y2Q2M2IzNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqauKky/eVgbuOKtYut1yZxWrjSBF
p5wgk4/7eHYoCcLeklTiFAQslOeMDwRsgkB4yomcE2eOStQDWG212irkwJPFsTFT
xhV2Ji4Mh3hwy7c4x3X1MmaSmi+oP5iOA3TMOK9YKvsIPdSd50QucrqtP2JWcbIr
CTgXyOcXwPTkChO5uHUDaq9BlyQy2tOgP2nG9ipGfYoDp3vUfEqReugJ30+ejKY2
E9tdRZXMcVcpG49sDxHbn2ocRjOhrRxYFoOC82aCMcnY8jvRDOnhBLfaSmUhl9xq
gOQNuHSiFXtCFenuOT+2DTAR+V5WVJjD3t6QEC/qaXyktLkYTRioy6FZKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0IOgDIcOlzHGpMVDinvWzWOzcGMB8GA1UdIwQY
MBaAFKdou+xanhG/va7YSqjTqs2imIn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDJpNzdGcWVFYi05cnRoS3FOT3F6YUtZaWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lYWMxZjQtYWNlMS00Y2UxLWExODEt
Y2ZjYWJiMTlmOTg5LzEvcDJpNzdGcWVFYi05cnRoS3FOT3F6YUtZaWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lYWMxZjQtYWNlMS00Y2UxLWExODEtY2ZjYWJiMTlmOTg5
LzEvcDJpNzdGcWVFYi05cnRoS3FOT3F6YUtZaWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsjljhPh
GZXxjU4UWjgZctQ0XNmJTjL1oPkkofY7KsTAY1HYvbKX61X/Yq9lL3Qv01dbmWgw
13mtYudDLpsjlV43W92vhF51OJUUSvk1oGeVj8CROq3VcDqQed8mGfrdLG1NvMGL
HPxoKsxHp2iuObnIGxevX1Iy9ueUsR/zcxXp4C1m0Kn92ELbz/0lMhaxs60aR9Q/
e90eGS11T8VlfXzfw/V/SoXzmVKjPAPkMpOJaaXRM6OlGQT90tsrq6Og6hSadQrT
9aFYYIQpvJQnTxjp46sFMdqHcHSxMZax19fv0j/t0PhXuV0XNoUPaqS2RRik/Y0r
+Hn2D7iy6Qjl0g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 03:45:09 2026 by rpki-client