Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
File: p72yx7M0uUvNQziPIfggktts_Uw.mft (raw, json)
Hash identifier: Z3c709pteI9R74GKWJ1x85tP5BOzlIde59oCTEz7VlY=
Subject key identifier: 01:CE:B6:BA:B2:69:CC:D6:F4:BD:65:21:75:5A:BA:3D:D2:22:4C:91
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Certificate issuer: /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial: 019D382E49293637E14D87889859A1D09E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:50 +0000
Manifest this update: Sun 29 Mar 2026 06:00:50 +0000
Manifest next update: Mon 30 Mar 2026 06:00:50 +0000
Files and hashes: 1: 6Xsm7GtWPf6sxisdeJuLCo-3tLo.roa (hash: xdyBNDU6Kuc/zF3hUM0jBGfeZpAD6Qr+9Bqu74wdbek=)
2: p72yx7M0uUvNQziPIfggktts_Uw.crl (hash: DZ0+s7+8mBvZn368/y5/2L6SZ0Wny4XsbgvcJuRp6bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:49:29:36:37:e1:4d:87:88:98:59:a1:d0:9e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Validity
Not Before: Mar 29 06:00:50 2026 GMT
Not After : Mar 30 06:00:50 2026 GMT
Subject: CN=01ceb6bab269ccd6f4bd6521755aba3dd2224c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:db:9d:00:aa:36:a3:1f:3d:29:bc:02:d5:29:
c6:57:00:5a:d7:7b:a2:d1:b3:e3:6a:1f:59:be:9a:
fb:51:2b:5f:c4:81:48:94:05:89:f5:6c:bc:8e:a7:
78:14:fe:66:d6:07:20:bf:a6:90:7b:a6:a9:bd:fb:
88:d3:b7:83:46:f1:ef:ce:c7:01:4a:da:b9:60:7b:
97:cd:66:c7:a7:d4:d9:61:4e:72:8a:12:7b:b2:e3:
9c:7d:8d:d9:10:a6:d3:0f:fb:48:1f:f4:74:ae:1a:
28:95:68:ac:47:09:e5:7c:f2:06:85:1d:57:0e:83:
b7:83:72:3e:4b:e3:ee:0b:c5:50:54:40:3a:b8:23:
75:7f:74:ce:fd:8c:22:7e:27:56:db:20:78:a9:fe:
ee:9b:f9:27:ea:9d:ab:aa:15:e5:ea:57:68:d8:88:
69:fd:30:20:a7:fa:33:b7:36:6f:0f:5c:a9:ab:2a:
9f:8f:09:50:f8:ce:a8:97:8f:6c:4d:aa:d6:aa:b1:
ac:0e:df:d4:a7:1e:75:91:df:5c:51:6c:c4:fd:74:
52:b3:bf:aa:7c:10:c4:d1:58:41:d3:a9:ab:f8:26:
63:af:66:4e:9c:a0:3d:08:ad:b5:24:a4:d9:e9:9d:
40:67:cd:4e:35:78:1a:60:7e:d5:99:62:6c:26:2b:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CE:B6:BA:B2:69:CC:D6:F4:BD:65:21:75:5A:BA:3D:D2:22:4C:91
X509v3 Authority Key Identifier:
keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:da:89:89:cb:bf:b9:95:f7:55:f2:90:22:d0:2b:96:ff:21:
18:d2:e2:f2:69:a8:e8:d8:f6:59:1d:e2:49:cd:c9:56:b8:14:
fc:9a:47:f3:ad:40:00:05:44:92:f2:0f:37:16:d5:38:13:2e:
1c:fb:5f:a1:04:43:6a:53:ee:44:ae:81:32:f1:25:fb:d1:26:
05:0a:73:7f:5b:bb:53:f6:45:c9:ad:95:5c:4d:b0:93:2a:cd:
e6:da:6a:a9:2b:c3:1f:55:4a:12:29:c8:b1:e1:3f:b4:54:b4:
f9:10:b5:53:c9:00:a4:bf:4f:f0:50:e1:7b:08:c4:a6:d6:6f:
19:26:d6:a1:68:57:4f:c8:88:59:9a:18:03:78:f6:d7:29:17:
52:3e:2b:4f:c3:c6:8f:fc:b4:12:62:21:24:56:e8:54:e9:a1:
e2:fd:59:d4:5e:5f:42:9f:69:62:ee:f5:22:b7:82:29:83:73:
fb:fe:a5:6b:8d:78:5b:71:89:89:9f:73:bf:e1:2f:6f:82:11:
00:f3:7d:82:91:cc:34:5f:15:e4:c5:ec:08:73:cc:d5:46:0e:
c2:58:54:ec:c1:c3:2c:83:d8:a5:a2:e7:fb:87:88:3b:f7:18:
84:09:6b:3f:a7:bb:de:78:18:cd:7d:ec:d5:a8:35:02:cf:7a:
0f:74:98:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:47:58 2026 by rpki-client