
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
File: p72yx7M0uUvNQziPIfggktts_Uw.mft (raw, json)
Hash identifier: u2baLqTrO8crlO0TRjTlg0LEFAQ0aV8QQ5LzRf1ypRc=
Subject key identifier: AA:82:C5:EF:A5:86:06:D1:BA:19:25:0A:27:6E:FB:E5:43:61:DF:D2
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Certificate issuer: /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial: 01A17F2AC81C33716963C8477326CD366873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 21:01:12 +0000
Manifest this update: Tue 27 Oct 2026 21:01:12 +0000
Manifest next update: Wed 28 Oct 2026 21:01:12 +0000
Files and hashes: 1: 6Xsm7GtWPf6sxisdeJuLCo-3tLo.roa (hash: xdyBNDU6Kuc/zF3hUM0jBGfeZpAD6Qr+9Bqu74wdbek=)
2: p72yx7M0uUvNQziPIfggktts_Uw.crl (hash: O0n7IN+rs1uCxdS69afrqKoyNU/1fVDqGOpRfDb+GJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:c8:1c:33:71:69:63:c8:47:73:26:cd:36:68:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Validity
Not Before: Oct 27 21:01:12 2026 GMT
Not After : Oct 28 21:01:12 2026 GMT
Subject: CN=aa82c5efa58606d1ba19250a276efbe54361dfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:75:51:4e:7e:27:7d:99:07:5a:96:05:f7:
7f:8d:ac:43:f0:ea:37:e9:95:10:d6:cd:79:16:98:
8c:89:d1:1c:f1:34:21:a2:b5:c0:a9:2e:71:99:44:
b3:f8:61:1f:44:9c:9c:e9:21:c9:48:7a:96:1f:fe:
64:d7:f0:de:50:11:17:7b:fd:5e:09:2a:df:78:34:
11:67:42:d6:60:f7:2f:57:13:aa:fb:3b:00:57:c4:
8a:ca:39:9c:49:26:ea:01:bd:9d:28:a9:8f:35:6a:
00:8b:cc:76:d1:aa:80:e1:08:35:05:3e:0c:2c:ab:
bd:6e:92:7d:d1:c4:66:61:f8:db:62:00:46:30:07:
dd:de:79:48:bd:0d:c8:64:e4:14:17:bc:e2:cd:a0:
3f:fc:45:8c:ed:3f:34:e8:d7:64:ae:38:23:10:00:
30:e4:8c:41:d0:c4:99:5e:16:ac:01:61:d9:ea:a1:
89:a5:82:c0:cb:d5:d0:cf:2a:ed:54:71:75:c1:88:
58:2e:3a:3e:a7:db:24:8c:2b:71:84:27:76:6a:6b:
0c:3d:51:c0:37:df:43:a1:92:9f:c5:5a:22:0f:58:
1e:cb:90:79:c9:26:41:b3:15:d2:7d:45:fb:76:39:
62:c8:30:98:a7:f8:d4:5d:07:1e:a7:2e:39:27:28:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:82:C5:EF:A5:86:06:D1:BA:19:25:0A:27:6E:FB:E5:43:61:DF:D2
X509v3 Authority Key Identifier:
keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7a:b4:55:63:d5:ac:77:bf:be:3a:a1:c9:03:e3:43:0e:80:
3a:da:8e:73:56:ba:66:e0:9a:21:b9:71:82:61:1d:c1:58:99:
12:9d:a1:ff:8f:03:57:36:ad:da:c4:9b:a1:a9:ff:03:46:a1:
cf:d2:e8:0e:49:85:bc:1b:73:fd:72:fc:7c:04:de:e3:70:5a:
dc:34:5e:fa:4b:ba:5e:ad:40:26:0a:1a:d2:93:74:ec:e3:75:
9e:aa:53:dd:6b:8d:9d:a9:b4:bd:38:81:37:5b:b2:67:b6:17:
4c:b1:3c:a6:29:24:bc:9f:36:31:91:fe:7c:6e:41:e8:9b:db:
e7:57:04:a0:02:39:56:bb:f8:29:51:82:e5:bd:00:7e:b8:db:
4f:8b:c6:4a:4b:71:69:2c:4b:45:33:56:dd:cc:01:c5:f9:9f:
b0:85:59:f8:55:39:84:b3:a0:1d:56:22:5c:0a:03:b5:be:e7:
b6:7e:4d:9b:f3:85:dd:2d:86:d6:6a:e0:c7:22:0b:85:37:bb:
05:d9:35:35:7e:07:82:f5:8b:84:50:fb:b6:46:de:9a:9c:de:
f3:ab:6a:58:55:46:e6:14:05:4a:ad:a9:99:a8:89:4c:c8:fe:
5b:84:18:c5:76:ea:20:69:f4:57:ed:43:4d:07:93:7a:9c:1e:
db:24:10:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:51:56 2026 by rpki-client