Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
File: p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft (raw, json)
Hash identifier: +PpM71OG5xdAQFiSYgoZqZVJ6ki25i2SxoF1W3vXfVk=
Subject key identifier: 11:45:EB:A5:30:0E:E1:20:D5:57:80:7A:A7:22:78:01:11:77:2C:AA
Authority key identifier: A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
Certificate issuer: /CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Certificate serial: 01A03AF14672CFDA57950B149A8FC956B5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
Manifest number: 1760
Signing time: Tue 25 Aug 2026 22:01:25 +0000
Manifest this update: Tue 25 Aug 2026 22:01:25 +0000
Manifest next update: Wed 26 Aug 2026 22:01:25 +0000
Files and hashes: 1: hhOUjf_NNHVROjkzDtvuvC1VPOM.asa (hash: aaNYmLA4SwOuZSM4zGL+Zv09TvO6r7ywXgvya2WrJq4=)
2: p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl (hash: snBLJhWkbV3/Y6gsW/odxIe9zyaTq+btiS4+aBE0a18=)
3: xiXH-5SM76J3-yxlUQfLvem25-k.roa (hash: BDbe3QCIJuuE+sgkLyO0R164Cf4HsbhT+geqZAmQ7Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:f1:46:72:cf:da:57:95:0b:14:9a:8f:c9:56:b5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Validity
Not Before: Aug 25 22:01:25 2026 GMT
Not After : Aug 26 22:01:25 2026 GMT
Subject: CN=1145eba5300ee120d557807aa722780111772caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:28:fd:7d:89:30:38:e8:2e:43:17:3f:56:
91:4d:f6:8d:08:5e:41:cc:6c:1b:2b:b1:89:63:51:
ec:f4:17:0a:72:f7:d6:6f:71:84:f0:3a:fc:24:b1:
11:8e:e8:7e:b1:9b:6e:33:a1:e0:d1:5a:e0:2e:d0:
bb:8f:57:5c:e0:9b:9b:18:84:f2:98:bb:c0:8d:62:
ee:a7:27:ab:18:92:b2:25:1d:26:c8:bd:80:05:8b:
c7:3d:dd:82:55:f5:0c:e3:b2:70:8e:b9:c9:0c:b3:
14:03:08:8f:fa:40:ad:13:e3:b2:c0:cd:53:fe:06:
a5:7d:57:4c:e9:44:89:9c:0d:ed:d5:3f:e0:85:eb:
f2:e7:63:c0:72:f1:8e:90:68:93:3c:d8:af:28:3d:
41:bc:99:4b:bc:07:48:75:09:60:cf:b7:8a:75:38:
df:95:32:23:82:a7:ab:a8:a2:a6:56:58:f2:ff:b9:
ee:98:dd:3d:b8:24:39:f6:b3:8f:f4:35:74:07:4e:
91:3e:55:5e:de:15:a2:ef:d6:1a:66:da:e3:e8:c4:
08:a4:9b:15:2f:a1:7a:f2:c3:46:6a:9c:6c:2e:1c:
c4:57:65:a8:34:77:f5:84:d9:7f:63:51:1b:93:a1:
fa:7f:dd:42:8a:80:75:c9:55:4b:f3:f7:c3:67:cd:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:45:EB:A5:30:0E:E1:20:D5:57:80:7A:A7:22:78:01:11:77:2C:AA
X509v3 Authority Key Identifier:
keyid:A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:82:29:45:8c:7c:9c:ed:23:b1:ed:0d:64:bb:32:4a:ff:f7:
b3:94:94:8d:f9:16:da:f5:34:8a:78:1d:df:a6:39:12:bd:90:
37:5d:fd:80:03:6c:2a:86:93:ec:62:32:9f:f6:d4:dd:c3:6a:
0a:01:06:72:05:58:2d:04:eb:05:a6:7b:2e:07:38:0c:64:5b:
18:6b:2e:5f:8c:a1:2b:0b:1b:82:a0:25:fc:a8:9f:ee:be:8d:
b4:ae:cb:06:c4:0a:f5:98:aa:97:bd:3c:da:93:b0:59:e9:cb:
67:4d:5c:1e:e3:1f:bc:a6:87:13:7d:64:fb:bb:47:6f:9e:61:
ce:6a:ba:85:36:b6:91:45:29:6d:c1:b0:fa:e0:1c:bc:31:16:
a4:6e:fa:07:d2:9f:7a:9a:2e:c3:04:57:83:fd:3c:10:6b:11:
eb:2b:7c:83:e0:17:07:77:fa:ff:51:ef:90:bd:f0:3b:fe:a0:
0c:2b:67:00:05:9a:54:ac:32:de:3d:ec:04:ed:8e:38:34:ee:
5a:07:1f:5e:ab:25:8b:f4:7d:f4:c2:7e:36:d2:ed:2c:68:ab:
b6:ec:92:30:26:18:59:a6:65:fc:cf:88:52:a2:5d:ad:54:48:
b3:1c:60:e1:9b:5b:f9:21:10:22:cf:a2:15:56:a2:40:c4:0b:
0c:69:2f:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA68UZyz9pXlQsUmo/JVrXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NjRhMjZmNzYzNTUxNDBhYTY5NmUwYTRmMWYwYzMxMmI3
Mjc3YzAwHhcNMjYwODI1MjIwMTI1WhcNMjYwODI2MjIwMTI1WjAzMTEwLwYDVQQD
EygxMTQ1ZWJhNTMwMGVlMTIwZDU1NzgwN2FhNzIyNzgwMTExNzcyY2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTgo/X2JMDjoLkMXP1aRTfaNCF5B
zGwbK7GJY1Hs9BcKcvfWb3GE8Dr8JLERjuh+sZtuM6Hg0VrgLtC7j1dc4JubGITy
mLvAjWLupyerGJKyJR0myL2ABYvHPd2CVfUM47JwjrnJDLMUAwiP+kCtE+OywM1T
/galfVdM6USJnA3t1T/ghevy52PAcvGOkGiTPNivKD1BvJlLvAdIdQlgz7eKdTjf
lTIjgqerqKKmVljy/7numN09uCQ59rOP9DV0B06RPlVe3hWi79YaZtrj6MQIpJsV
L6F68sNGapxsLhzEV2WoNHf1hNl/Y1Ebk6H6f91CioB1yVVL8/fDZ82WHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFF66UwDuEg1VeAeqcieAERdyyqMB8GA1UdIwQY
MBaAFKdkom92NVFAqmluCk8fDDErcnfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDJTaWIzWTFVVUNxYVc0S1R4OE1NU3R5ZDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xZTgxODMtYWFkMS00ZmQ3LWIxMGYt
ZmZhNDk1MGExY2NiLzEvcDJTaWIzWTFVVUNxYVc0S1R4OE1NU3R5ZDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8xZTgxODMtYWFkMS00ZmQ3LWIxMGYtZmZhNDk1MGExY2Ni
LzEvcDJTaWIzWTFVVUNxYVc0S1R4OE1NU3R5ZDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvoIpRYx8
nO0jse0NZLsySv/3s5SUjfkW2vU0ingd36Y5Er2QN139gANsKoaT7GIyn/bU3cNq
CgEGcgVYLQTrBaZ7Lgc4DGRbGGsuX4yhKwsbgqAl/Kif7r6NtK7LBsQK9Ziql708
2pOwWenLZ01cHuMfvKaHE31k+7tHb55hzmq6hTa2kUUpbcGw+uAcvDEWpG76B9Kf
epouwwRXg/08EGsR6yt8g+AXB3f6/1HvkL3wO/6gDCtnAAWaVKwy3j3sBO2OODTu
WgcfXqsli/R99MJ+NtLtLGirtuySMCYYWaZl/M+IUqJdrVRIsxxg4Ztb+SEQIs+i
FVaiQMQLDGkvFw==
-----END CERTIFICATE-----
Generated at Tue Aug 25 23:40:57 2026 by rpki-client