Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
File: p2i77FqeEb-9rthKqNOqzaKYifk.mft (raw, json)
Hash identifier: W8yH2niCyIZH6BnLfihdDg014VHsuV0dIxYS9Be+E1Y=
Subject key identifier: B8:BF:9C:15:3B:04:97:A5:E5:36:E9:FC:EA:A2:45:D0:FB:7E:44:28
Authority key identifier: A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
Certificate issuer: /CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Certificate serial: 019F8456772A5E3535A3DC274B0B4398250A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
Manifest number: 19C0
Signing time: Tue 21 Jul 2026 11:01:26 +0000
Manifest this update: Tue 21 Jul 2026 11:01:26 +0000
Manifest next update: Wed 22 Jul 2026 11:01:26 +0000
Files and hashes: 1: YwiBk7F0B614LD9wQoEFnkWeQjs.roa (hash: mvD8mcgS8Z/u8tn955UOEASMu8p9nleqgNicn8XmXOw=)
2: p2i77FqeEb-9rthKqNOqzaKYifk.crl (hash: FbLwGkYxPA0hQRcaEX/OdLQipOMoCZJ5d9L8KB6PK1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:56:77:2a:5e:35:35:a3:dc:27:4b:0b:43:98:25:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Validity
Not Before: Jul 21 11:01:26 2026 GMT
Not After : Jul 22 11:01:26 2026 GMT
Subject: CN=b8bf9c153b0497a5e536e9fceaa245d0fb7e4428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:e3:ba:9b:14:25:43:65:1b:9b:28:8e:d0:
4d:22:ec:d4:fb:2a:2a:4b:77:1d:0f:d6:91:ed:2e:
9e:78:ba:d7:14:43:93:aa:5f:ec:7a:c8:a0:58:da:
8d:6f:a5:b6:85:3d:cf:00:68:33:a0:ea:6c:be:b8:
32:a2:37:3e:50:8e:23:e8:a5:b6:ab:bf:fe:b7:6f:
25:e6:24:3e:be:8c:f2:c3:11:a4:0f:f8:e6:e8:29:
b2:ff:b8:47:0f:8e:9a:2a:ec:0f:3e:e9:08:5a:b1:
b3:82:d4:a9:d7:7c:56:51:ea:2f:1f:c3:17:b1:3d:
60:ee:d8:b9:53:ca:5d:3b:f4:66:b3:22:fe:bb:5d:
41:36:f2:03:80:6a:01:31:88:0d:1d:38:32:c5:2f:
ca:62:85:ed:59:3d:c8:d2:73:32:53:b2:70:17:cb:
5a:92:c2:0f:a5:df:9b:f5:fa:c6:ac:78:16:ae:df:
38:85:b9:02:92:77:8f:f1:66:90:d1:2c:f9:58:44:
17:79:3f:11:bc:3d:ae:ce:ec:bd:24:88:79:07:69:
04:a1:6e:f8:ab:8b:6c:47:d2:91:d3:7b:77:57:45:
e9:8c:4d:0c:f3:51:3e:3f:af:00:6e:ef:f9:5b:e3:
c1:d6:b1:1d:f9:2b:f7:9a:0b:68:3d:da:9d:6e:96:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BF:9C:15:3B:04:97:A5:E5:36:E9:FC:EA:A2:45:D0:FB:7E:44:28
X509v3 Authority Key Identifier:
keyid:A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:77:1e:ca:f5:1a:61:cd:54:38:b5:68:d7:9b:76:4e:c8:52:
37:83:46:92:a5:31:4a:26:44:11:85:6d:ca:73:f9:cc:37:dc:
b9:15:55:1d:a8:34:60:e9:0e:e0:8f:e9:79:a4:3b:70:2e:f0:
cc:67:af:e0:45:e5:ff:b6:53:98:ea:c6:ee:ff:48:00:0a:5a:
70:a1:13:3f:59:9d:b7:bf:a7:b1:f4:c4:b1:72:80:ef:b3:bf:
c6:d7:fe:0f:7e:85:7c:58:7a:bf:db:c0:5d:a6:70:17:17:7e:
ac:12:f5:98:00:0d:e8:6b:aa:44:9f:04:21:72:37:b6:82:75:
85:1d:db:4c:77:63:2c:8e:25:21:23:15:23:b9:26:9b:60:99:
49:37:7c:c6:68:56:d3:e1:88:cc:9a:e2:f0:62:b8:ad:51:b5:
02:f4:4c:51:2a:10:24:a9:18:eb:ea:b0:21:b8:67:55:c1:c6:
6a:20:76:06:1f:cc:eb:72:e9:ff:ec:45:37:0d:b1:4f:d2:3f:
c5:6b:28:24:2a:8b:da:c5:78:7f:51:57:fe:1d:b6:50:99:08:
4b:99:05:ec:5f:e6:d3:84:c2:8d:3e:7e:dc:7b:2c:a2:fa:86:
34:f7:c4:c6:69:ba:f5:63:07:6e:0a:c2:46:ee:59:37:6b:8e:
17:64:9b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:58:46 2026 by rpki-client