Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
File: p72yx7M0uUvNQziPIfggktts_Uw.mft (raw, json)
Hash identifier: P+anqVmM8TaCURQ6N2va4tteUgf4bQKqFVqbtiW+rXQ=
Subject key identifier: 0F:A0:D6:72:66:00:B8:C4:9E:28:D7:82:D8:C6:97:F1:DF:F1:E6:39
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Certificate issuer: /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial: 01A17770BD6F3DCD2D80C7D6DB66B49E08FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
Manifest number: 1AC3
Signing time: Mon 26 Oct 2026 09:00:39 +0000
Manifest this update: Mon 26 Oct 2026 09:00:39 +0000
Manifest next update: Tue 27 Oct 2026 09:00:39 +0000
Files and hashes: 1: 6Xsm7GtWPf6sxisdeJuLCo-3tLo.roa (hash: xdyBNDU6Kuc/zF3hUM0jBGfeZpAD6Qr+9Bqu74wdbek=)
2: p72yx7M0uUvNQziPIfggktts_Uw.crl (hash: 6c1M/C13ji4RRGiRrh+ShTVZ5z6Qz6uSdmryCRF/UlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:70:bd:6f:3d:cd:2d:80:c7:d6:db:66:b4:9e:08:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Validity
Not Before: Oct 26 09:00:39 2026 GMT
Not After : Oct 27 09:00:39 2026 GMT
Subject: CN=0fa0d6726600b8c49e28d782d8c697f1dff1e639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:c7:45:a6:51:62:41:1e:dc:ab:be:e0:52:
3b:db:70:6a:7c:53:15:d0:d9:0f:fd:3e:48:70:70:
c5:8f:58:a9:1e:10:0a:be:2e:27:92:a8:d1:46:f9:
d3:23:b5:eb:11:0b:51:33:93:ce:e4:fb:c5:56:b3:
cc:86:bd:2f:f6:7a:57:e4:58:65:82:ab:91:ad:d0:
04:fe:7b:ba:8b:b1:40:b9:ca:7d:1e:fd:bd:74:41:
30:52:ff:3e:7a:be:08:58:96:c7:e9:76:5b:ed:bd:
fe:d7:6d:de:8d:56:e6:4d:a3:9e:c0:2d:04:ab:18:
ac:4e:4b:fa:f3:7f:3b:1e:3e:ec:52:3a:04:b6:57:
1d:b9:c1:8d:39:ba:80:26:33:38:dc:18:c3:6a:c8:
ad:c6:12:5f:5d:f1:3d:44:fa:68:75:0b:d4:0e:88:
bd:1f:d0:f1:07:89:00:3b:97:09:5e:3c:01:7f:95:
14:68:b8:d0:f7:94:89:ef:51:aa:5d:70:ee:53:68:
93:6c:47:f2:8b:6e:76:e4:83:b2:fd:30:f1:9f:18:
93:cf:ec:e8:c0:39:03:1c:41:e9:19:11:0d:7b:60:
05:ae:a5:53:ff:c6:a0:a5:7f:7d:f3:41:4a:dc:e3:
2e:f4:40:fc:39:12:b5:19:65:36:b0:d6:8c:34:06:
ae:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A0:D6:72:66:00:B8:C4:9E:28:D7:82:D8:C6:97:F1:DF:F1:E6:39
X509v3 Authority Key Identifier:
keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a4:c4:52:91:b8:72:9a:d2:1a:44:13:83:66:10:e6:85:1a:
57:2d:6b:e4:94:a1:86:60:22:d8:2c:ea:b7:05:26:80:c1:9e:
42:df:9c:7c:3b:e8:40:12:1b:9d:24:10:25:0a:f6:18:10:8d:
b4:34:4f:d6:02:8d:6e:18:4e:40:cc:b9:df:6d:b4:e7:be:bb:
3a:11:70:4d:a6:c0:3f:1a:16:b3:5b:1e:b0:06:1a:8f:35:a7:
84:9d:21:5c:b1:95:52:4d:6b:1d:70:75:32:46:81:71:57:32:
da:7f:39:7b:c2:a4:75:8e:92:84:6d:e0:c8:9d:b7:f0:fd:62:
86:38:a7:17:a5:7c:ad:58:8d:43:2e:6a:4a:96:30:ef:02:a7:
d8:03:76:08:01:74:f2:5a:c3:38:c4:c2:d7:86:d8:ce:d3:da:
31:08:93:e1:f0:3a:b8:58:b1:25:06:c5:af:ae:79:cb:0b:9b:
17:88:4d:4b:45:11:b6:b5:7a:35:bf:b6:57:bc:ed:9b:d1:11:
eb:d5:21:e8:b4:54:8f:26:ef:80:81:7e:34:aa:15:47:75:6c:
a7:c8:66:66:38:fc:2c:90:49:ef:2e:bc:3c:f2:a6:d5:d5:3a:
06:d7:69:f3:7d:65:c0:02:47:06:4d:9f:08:b2:f0:56:2c:5a:
75:d0:20:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3cL1vPc0tgMfW22a0ngj/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YmRiMmM3YjMzNGI5NGJjZDQzMzg4ZjIxZjgyMDkyZGI2
Y2ZkNGMwHhcNMjYxMDI2MDkwMDM5WhcNMjYxMDI3MDkwMDM5WjAzMTEwLwYDVQQD
EygwZmEwZDY3MjY2MDBiOGM0OWUyOGQ3ODJkOGM2OTdmMWRmZjFlNjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI7HRaZRYkEe3Ku+4FI723BqfFMV
0NkP/T5IcHDFj1ipHhAKvi4nkqjRRvnTI7XrEQtRM5PO5PvFVrPMhr0v9npX5Fhl
gquRrdAE/nu6i7FAucp9Hv29dEEwUv8+er4IWJbH6XZb7b3+123ejVbmTaOewC0E
qxisTkv68387Hj7sUjoEtlcducGNObqAJjM43BjDasitxhJfXfE9RPpodQvUDoi9
H9DxB4kAO5cJXjwBf5UUaLjQ95SJ71GqXXDuU2iTbEfyi2525IOy/TDxnxiTz+zo
wDkDHEHpGRENe2AFrqVT/8agpX9980FK3OMu9ED8ORK1GWU2sNaMNAauLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+g1nJmALjEnijXgtjGl/Hf8eY5MB8GA1UdIwQY
MBaAFKe9ssezNLlLzUM4jyH4IJLbbP1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQt
YTk1OGJmNWFjYmVhLzEvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQtYTk1OGJmNWFjYmVh
LzEvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoaTEUpG4
cprSGkQTg2YQ5oUaVy1r5JShhmAi2CzqtwUmgMGeQt+cfDvoQBIbnSQQJQr2GBCN
tDRP1gKNbhhOQMy532205767OhFwTabAPxoWs1sesAYajzWnhJ0hXLGVUk1rHXB1
MkaBcVcy2n85e8KkdY6ShG3gyJ238P1ihjinF6V8rViNQy5qSpYw7wKn2AN2CAF0
8lrDOMTC14bYztPaMQiT4fA6uFixJQbFr655ywubF4hNS0URtrV6Nb+2V7ztm9ER
69Uh6LRUjybvgIF+NKoVR3Vsp8hmZjj8LJBJ7y68PPKm1dU6Btdp831lwAJHBk2f
CLLwVixaddAg+Q==
-----END CERTIFICATE-----
Generated at Mon Oct 26 16:57:44 2026 by rpki-client