Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
File: p2i77FqeEb-9rthKqNOqzaKYifk.mft (raw, json)
Hash identifier: DYHY2jMirRUSNvoC+xcbE9sqw5tHm5/pvQjwOktfV7U=
Subject key identifier: B4:B2:8B:92:23:01:E1:EA:CB:C7:C7:11:45:73:92:80:CF:A6:C2:80
Authority key identifier: A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
Certificate issuer: /CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Certificate serial: 019D394089B0CFBFE8E772F51E6659DF93F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:23 +0000
Manifest this update: Sun 29 Mar 2026 11:00:23 +0000
Manifest next update: Mon 30 Mar 2026 11:00:23 +0000
Files and hashes: 1: YwiBk7F0B614LD9wQoEFnkWeQjs.roa (hash: mvD8mcgS8Z/u8tn955UOEASMu8p9nleqgNicn8XmXOw=)
2: p2i77FqeEb-9rthKqNOqzaKYifk.crl (hash: 5vQ277FESxpLDxvtp+LLOp3ZPmr3oi5nGxREdAk5t88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:89:b0:cf:bf:e8:e7:72:f5:1e:66:59:df:93:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Validity
Not Before: Mar 29 11:00:23 2026 GMT
Not After : Mar 30 11:00:23 2026 GMT
Subject: CN=b4b28b922301e1eacbc7c71145739280cfa6c280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:98:af:87:bc:de:02:11:79:0a:bc:9d:ed:
6e:cc:48:3a:73:8d:ec:e9:24:56:d1:f2:07:50:10:
07:99:d1:06:02:0f:0c:e2:1c:fb:48:c4:80:c8:84:
5f:40:09:67:f5:57:a2:60:7c:16:5d:ec:95:0b:7f:
2b:84:64:72:ad:dc:e3:e2:19:39:f8:ce:80:91:8d:
8e:71:dd:c6:04:4e:32:a5:c3:0c:cd:a4:a7:75:f3:
5f:26:e2:eb:12:e2:d3:61:a6:2a:f6:2e:b7:26:f0:
02:68:f7:29:41:82:7f:2d:1d:1e:0e:b5:c1:2e:ca:
63:64:63:59:8e:c5:58:35:95:67:1e:d4:32:ed:72:
14:fa:14:4d:d1:e8:d8:19:58:19:fe:13:4b:f8:bf:
55:66:41:80:e2:dc:58:0b:dd:85:2e:c6:51:f0:6a:
92:1d:d5:d1:19:8c:63:c6:b9:72:cd:5f:96:df:9d:
fc:98:00:1c:52:59:d5:1a:b9:ca:d4:a5:73:d5:a2:
1e:5e:ea:b6:50:f4:95:a3:99:51:44:ed:c1:f9:8a:
d8:39:5b:b9:3e:64:8c:5c:48:69:e0:ff:b0:fe:ff:
f9:c7:e8:4f:f2:16:b7:6e:fe:8a:b1:33:a8:c8:ce:
63:c2:68:44:29:ca:7c:a2:36:f3:a1:b0:76:fc:8a:
b8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B2:8B:92:23:01:E1:EA:CB:C7:C7:11:45:73:92:80:CF:A6:C2:80
X509v3 Authority Key Identifier:
keyid:A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:08:b4:7b:41:1a:f6:52:46:02:4d:97:2c:4c:dc:fb:43:b9:
73:93:2c:10:22:88:bd:88:7a:77:0d:12:bf:d3:95:dd:fd:af:
ee:26:5e:dd:10:84:35:cf:b5:84:e1:98:e6:05:6c:ac:7e:bc:
c0:90:62:03:eb:fa:5f:1c:2f:81:9a:52:09:e4:96:67:8b:62:
1e:e7:c3:49:5d:17:1c:19:ec:53:e9:61:f4:2c:c6:0f:a1:54:
b6:17:bb:d3:e0:ea:c4:ec:8e:b4:3d:1b:41:d6:0f:65:3b:db:
2a:30:84:fd:16:96:68:ba:ea:8b:57:b0:fd:06:57:ed:5e:3a:
76:77:03:cf:43:c0:8e:f7:48:db:d5:dc:0a:8f:ec:a5:db:4a:
1c:6c:4a:5a:4c:ba:dc:be:41:ab:c0:ef:41:49:b1:6d:28:55:
fe:8d:9f:2b:87:bf:7a:94:40:12:04:bf:09:14:da:91:19:ca:
1b:97:7a:2c:8d:08:70:9f:8d:ec:77:39:ef:f4:70:2e:46:66:
0e:aa:f8:cf:7b:7b:b5:68:74:d0:67:4c:b9:17:d5:32:1e:b1:
d2:20:2c:83:a3:9c:37:18:34:af:bf:13:b9:a8:34:fb:b1:14:
6a:78:50:d1:e4:db:3d:0e:56:5c:b7:62:d1:23:fa:9e:49:1b:
c2:2c:1b:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QImwz7/o53L1HmZZ35P0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NjhiYmVjNWE5ZTExYmZiZGFlZDg0YWE4ZDNhYWNkYTI5
ODg5ZjkwHhcNMjYwMzI5MTEwMDIzWhcNMjYwMzMwMTEwMDIzWjAzMTEwLwYDVQQD
EyhiNGIyOGI5MjIzMDFlMWVhY2JjN2M3MTE0NTczOTI4MGNmYTZjMjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8eYr4e83gIReQq8ne1uzEg6c43s
6SRW0fIHUBAHmdEGAg8M4hz7SMSAyIRfQAln9VeiYHwWXeyVC38rhGRyrdzj4hk5
+M6AkY2Ocd3GBE4ypcMMzaSndfNfJuLrEuLTYaYq9i63JvACaPcpQYJ/LR0eDrXB
LspjZGNZjsVYNZVnHtQy7XIU+hRN0ejYGVgZ/hNL+L9VZkGA4txYC92FLsZR8GqS
HdXRGYxjxrlyzV+W3538mAAcUlnVGrnK1KVz1aIeXuq2UPSVo5lRRO3B+YrYOVu5
PmSMXEhp4P+w/v/5x+hP8ha3bv6KsTOoyM5jwmhEKcp8ojbzobB2/Iq4owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSyi5IjAeHqy8fHEUVzkoDPpsKAMB8GA1UdIwQY
MBaAFKdou+xanhG/va7YSqjTqs2imIn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDJpNzdGcWVFYi05cnRoS3FOT3F6YUtZaWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lYWMxZjQtYWNlMS00Y2UxLWExODEt
Y2ZjYWJiMTlmOTg5LzEvcDJpNzdGcWVFYi05cnRoS3FOT3F6YUtZaWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lYWMxZjQtYWNlMS00Y2UxLWExODEtY2ZjYWJiMTlmOTg5
LzEvcDJpNzdGcWVFYi05cnRoS3FOT3F6YUtZaWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAi0e0Ea
9lJGAk2XLEzc+0O5c5MsECKIvYh6dw0Sv9OV3f2v7iZe3RCENc+1hOGY5gVsrH68
wJBiA+v6XxwvgZpSCeSWZ4tiHufDSV0XHBnsU+lh9CzGD6FUthe70+DqxOyOtD0b
QdYPZTvbKjCE/RaWaLrqi1ew/QZX7V46dncDz0PAjvdI29XcCo/spdtKHGxKWky6
3L5Bq8DvQUmxbShV/o2fK4e/epRAEgS/CRTakRnKG5d6LI0IcJ+N7Hc57/RwLkZm
Dqr4z3t7tWh00GdMuRfVMh6x0iAsg6OcNxg0r78Tuag0+7EUanhQ0eTbPQ5WXLdi
0SP6nkkbwiwblQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:14 2026 by rpki-client