Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
File: p2i77FqeEb-9rthKqNOqzaKYifk.mft (raw, json)
Hash identifier: 21xPFpBKIXrF/Ai922lAu3PgajDTrk01tqNBFO4Hxxg=
Subject key identifier: 4A:5D:EE:DD:DC:1D:52:D9:15:89:57:52:44:42:EC:F6:EA:5A:C9:EE
Authority key identifier: A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
Certificate issuer: /CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Certificate serial: 019E3260E9B907E2CEBC46420ADF6869FA60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 20:01:12 +0000
Manifest this update: Sat 16 May 2026 20:01:12 +0000
Manifest next update: Sun 17 May 2026 20:01:12 +0000
Files and hashes: 1: YwiBk7F0B614LD9wQoEFnkWeQjs.roa (hash: mvD8mcgS8Z/u8tn955UOEASMu8p9nleqgNicn8XmXOw=)
2: p2i77FqeEb-9rthKqNOqzaKYifk.crl (hash: ffZpdqjiDK2bSCtgWnF3bDaL4BlsyDVbzn4EKZZ7vJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:60:e9:b9:07:e2:ce:bc:46:42:0a:df:68:69:fa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Validity
Not Before: May 16 20:01:12 2026 GMT
Not After : May 17 20:01:12 2026 GMT
Subject: CN=4a5deedddc1d52d9158957524442ecf6ea5ac9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c3:26:99:13:99:33:41:70:19:96:42:22:eb:
fd:45:d6:6e:c4:9d:82:b3:75:d5:ed:99:e1:d6:d5:
cf:85:3d:d1:83:5e:13:7e:22:d4:21:51:b4:b2:cf:
64:b9:4a:44:94:2f:60:72:72:4b:c5:2c:83:08:0b:
98:f2:19:79:22:66:fd:49:26:bf:f5:c9:48:e2:a5:
9f:3d:47:17:77:ab:a6:67:d3:df:a9:a5:ed:0e:a0:
9c:51:14:d9:78:46:f6:01:03:aa:ed:ab:3c:e3:97:
8c:bd:b9:77:d7:a7:ed:79:2d:23:58:8d:aa:84:01:
4d:b1:27:f4:9e:53:0b:cb:b6:11:f3:67:f5:6a:96:
3a:a5:1b:e6:ec:4a:52:9f:31:bc:ff:82:28:8e:db:
84:ec:2d:77:0b:ac:77:b1:5e:ad:95:15:93:fa:99:
a6:bd:41:f1:76:5c:5b:50:fc:e9:48:df:4c:d3:ca:
d0:61:0d:82:82:de:71:58:8f:19:70:77:a3:50:45:
8f:51:59:eb:f2:b7:78:c9:4e:a0:ed:59:ef:54:fa:
98:9e:79:d0:1b:a7:ac:4d:d8:bf:d0:96:8a:ed:0a:
4c:2a:10:76:57:35:b6:90:39:1d:f6:bf:10:3d:10:
3d:2d:a6:f5:60:c0:69:51:02:33:cf:12:83:c7:d9:
c0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5D:EE:DD:DC:1D:52:D9:15:89:57:52:44:42:EC:F6:EA:5A:C9:EE
X509v3 Authority Key Identifier:
keyid:A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c4:30:78:a1:f7:da:fc:ee:99:f1:56:19:c4:77:42:ae:fb:
e7:b0:b8:11:47:93:a5:c7:e2:05:c9:20:8a:f8:99:20:89:59:
c2:3a:6f:c2:03:48:0c:3a:75:bd:24:90:b5:fe:c7:32:e3:74:
b3:cd:17:35:22:0f:a3:97:23:fd:5b:1d:18:81:d7:a2:69:d5:
7c:41:a1:6a:58:94:60:bb:bb:5d:06:e6:36:f9:9f:fb:e9:13:
7d:14:b7:a6:01:51:5b:a2:ac:e8:d6:f9:53:b4:06:3b:fd:a4:
57:6c:0d:36:2c:80:cd:ce:88:a0:68:d5:56:aa:12:2d:f2:45:
a4:db:a6:c5:91:d5:b4:ef:a2:33:28:03:73:e9:d1:77:2f:3d:
ce:9c:df:fe:b5:e7:55:7e:6f:05:fb:e9:bd:23:dc:36:56:54:
4a:9e:bb:19:1f:07:21:57:01:bd:42:48:d2:cc:60:e1:ed:3f:
de:0b:17:75:aa:46:65:19:b0:bc:c7:19:ac:17:e3:05:8b:6b:
5a:e0:ba:7e:94:26:f7:a3:69:d4:f6:cc:f0:cf:b0:27:b6:ca:
ef:90:61:d5:10:cc:b8:24:49:86:d6:9b:35:d2:0d:77:0d:10:
5d:29:c3:0b:ef:dc:99:77:57:1e:a2:5b:8a:84:b5:d0:9c:f1:
3f:3a:80:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:29:55 2026 by rpki-client