Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
File: p2i77FqeEb-9rthKqNOqzaKYifk.mft (raw, json)
Hash identifier: IGWfecTOdZcdji0PeVsYHfM20L1lpOlCTKWA1YcBMVE=
Subject key identifier: D3:00:EF:2F:D0:6C:36:6B:29:ED:03:A7:2F:46:89:DC:2A:D5:24:17
Authority key identifier: A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
Certificate issuer: /CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Certificate serial: 01A174A6C9DCC3053EF536469B7E552DB807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
Manifest number: 1AC1
Signing time: Sun 25 Oct 2026 20:00:49 +0000
Manifest this update: Sun 25 Oct 2026 20:00:49 +0000
Manifest next update: Mon 26 Oct 2026 20:00:49 +0000
Files and hashes: 1: YwiBk7F0B614LD9wQoEFnkWeQjs.roa (hash: mvD8mcgS8Z/u8tn955UOEASMu8p9nleqgNicn8XmXOw=)
2: p2i77FqeEb-9rthKqNOqzaKYifk.crl (hash: voAbpIXYu7B8urBeSwQ9OtYVI+GuAtJe5pIa/kM2Bag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:a6:c9:dc:c3:05:3e:f5:36:46:9b:7e:55:2d:b8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Validity
Not Before: Oct 25 20:00:49 2026 GMT
Not After : Oct 26 20:00:49 2026 GMT
Subject: CN=d300ef2fd06c366b29ed03a72f4689dc2ad52417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:99:63:57:b0:11:b8:3a:31:b9:20:49:17:
e2:93:c8:d3:dd:7b:03:7d:46:17:39:9a:d4:7e:1d:
a1:f9:82:f7:16:3d:1b:35:9c:12:7f:6f:b3:4d:4a:
35:2a:17:2c:99:dc:80:57:0a:9b:88:78:67:59:d6:
20:60:fb:73:77:f2:9e:54:c0:06:b1:c6:d1:97:23:
ab:69:6d:86:b0:29:e1:0e:44:84:86:06:a6:f0:d3:
76:05:2d:02:4a:30:9c:ef:4e:f3:35:14:13:57:f6:
08:e8:ea:7a:7f:77:9b:59:34:a7:83:1a:98:01:b6:
d5:d3:63:82:5d:d2:4a:32:3d:07:8c:e7:88:32:33:
22:46:56:e7:48:6d:62:30:2a:9d:30:39:5e:ce:c6:
af:99:e6:18:d7:77:7b:5e:b2:d1:78:c2:b8:e4:21:
0b:e6:a5:3d:11:c0:0d:04:02:d1:7d:39:6b:5c:ab:
27:d5:e1:09:48:8a:f9:f3:0d:a6:19:de:48:cc:37:
7d:66:12:2f:40:16:80:5f:e3:20:3c:05:01:fa:56:
25:c3:2c:30:a5:46:0b:91:89:8e:22:e7:24:e4:9b:
fb:95:37:c5:42:a0:69:de:f7:e2:37:12:14:f3:50:
ee:73:51:85:13:b7:13:ed:cf:3e:72:da:5d:11:72:
01:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:00:EF:2F:D0:6C:36:6B:29:ED:03:A7:2F:46:89:DC:2A:D5:24:17
X509v3 Authority Key Identifier:
keyid:A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6d:13:b0:c8:96:cf:24:4f:e4:30:51:7a:8f:a8:25:d4:08:
9e:4d:34:f1:92:5a:ce:93:c2:2e:7e:80:d3:61:fc:7f:7c:f0:
36:98:7b:17:f7:57:4b:0e:d7:0b:e1:b2:ed:c7:6d:84:c2:c2:
6d:a0:fe:31:3f:61:db:ff:01:c3:21:c9:89:e6:ce:38:30:bf:
e1:fa:8f:11:68:e6:9a:7a:75:88:8e:60:e7:1d:bf:c5:84:2d:
ce:26:a0:0e:18:d4:07:a2:c4:35:cc:8f:b8:2e:7d:91:07:a8:
8e:cb:87:4b:8a:ba:af:4e:e2:7f:3c:ef:95:8b:7c:0b:98:f2:
ae:93:1e:d9:60:c4:39:82:02:4e:5e:e5:ac:c3:78:ae:98:9d:
59:a3:02:a1:1a:bf:ea:f6:2d:5b:fe:f8:17:ac:89:66:06:d8:
bc:31:c5:f6:05:c9:48:a6:47:02:2e:2d:34:c5:6b:32:3b:62:
f3:a2:1f:d7:2c:85:d1:f2:b9:8c:ce:27:9d:34:8f:0f:32:56:
35:33:b0:41:8c:ab:1e:04:06:b7:25:d0:ca:1e:ca:1f:c6:50:
8a:f4:fd:a3:33:04:ad:5b:27:bb:d6:b3:69:a6:66:d7:f9:69:
68:46:bf:71:6c:fb:0b:c2:a9:38:40:4e:05:11:fa:32:3d:cd:
59:22:a0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:52:54 2026 by rpki-client