Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
File: 977TP_AejgncT-3NAROcDneFSq4.mft (raw, json)
Hash identifier: k35nOQDer4oRFI13c3iXYQVQ0Mo6vIUVwpfpWm+qJAc=
Subject key identifier: C1:77:43:60:6A:88:92:FA:70:30:88:15:F7:A2:4B:17:77:13:AB:2E
Authority key identifier: F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
Certificate issuer: /CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Certificate serial: 019E1C46ECE54C9998EBB7907DACFE5D5887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
Manifest number: 190D
Signing time: Tue 12 May 2026 13:01:10 +0000
Manifest this update: Tue 12 May 2026 13:01:10 +0000
Manifest next update: Wed 13 May 2026 13:01:10 +0000
Files and hashes: 1: 977TP_AejgncT-3NAROcDneFSq4.crl (hash: MWMQKJeuRVmRxnXw/zK5H8ONqtI3h9PmCQQgiviN14Q=)
2: K9ARhNUPke1FUpRD3jCOS20cCT8.roa (hash: xemlBpuRtqlzVTp6vvfqrvYIR9l5jVMyrtmPWS3Y4YY=)
3: uGNfdvA7X3WyOFyt75e9tVBH91A.roa (hash: 5//JVVveSwHR2hj+bfwWqReYip5bDufgsCMYkbkcBgE=)
4: w_HVWxfgMKccvm-uPAq_mXE30RI.roa (hash: nRyRk7kTehxIu33cjbfvuUdw6sNcxsEjbFzAJfWoy80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:ec:e5:4c:99:98:eb:b7:90:7d:ac:fe:5d:58:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Validity
Not Before: May 12 13:01:10 2026 GMT
Not After : May 13 13:01:10 2026 GMT
Subject: CN=c17743606a8892fa70308815f7a24b177713ab2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:c0:5c:a1:b6:ba:e5:14:68:48:2d:73:91:
e8:d0:1d:76:96:29:31:38:76:4d:1e:34:ce:06:47:
e2:cb:4c:a4:4f:d9:c1:fc:1a:68:b3:20:17:e1:28:
6f:fb:35:c1:d5:27:78:44:7c:f2:c8:75:4d:91:57:
9b:9d:2b:d6:ba:f2:ff:10:8f:7d:ca:29:78:4e:f5:
b1:4f:36:89:2d:61:ad:b5:9e:5d:54:cd:bc:2a:d2:
76:21:3a:ca:13:32:1e:e2:23:36:49:31:9f:92:00:
c3:8d:a9:c5:28:5c:69:1c:35:3f:0f:36:c2:bf:87:
17:b7:d4:05:64:3a:50:e7:52:1c:30:cf:60:ad:5b:
30:e5:b2:35:0d:6f:68:24:7a:99:58:72:f7:36:19:
e2:6c:8f:ff:7a:1a:d5:23:1c:77:55:0f:16:f8:34:
24:2a:c5:47:cd:2e:14:7d:8c:f5:39:47:fb:4f:90:
5b:7e:6e:25:c7:39:34:00:8b:30:5b:f7:9c:e0:5c:
6b:29:6c:f8:12:3f:b0:d3:89:18:67:12:28:09:4e:
03:cd:5a:73:87:9d:29:3a:0e:39:6f:b2:2f:f8:9a:
41:ae:bf:01:17:fd:ac:7e:9d:ae:b9:99:b9:88:cd:
db:53:81:b5:d8:0e:92:3d:9c:b7:95:5f:1b:37:3a:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:77:43:60:6A:88:92:FA:70:30:88:15:F7:A2:4B:17:77:13:AB:2E
X509v3 Authority Key Identifier:
keyid:F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5e:15:73:3a:93:45:af:1b:97:73:fe:28:ab:96:2f:cb:95:
f6:cb:43:8f:71:ad:bb:1d:a3:88:26:cd:bb:5f:c5:1e:6e:e9:
4e:bb:ed:8a:ca:96:e1:2f:60:b9:5c:6c:f8:59:4d:f1:c1:30:
82:f5:b2:79:fd:dd:af:b5:f1:41:98:86:31:5b:62:8c:65:1b:
55:cd:06:6c:d6:6c:24:0d:3c:c1:7c:15:48:a4:c4:c1:90:54:
d8:9d:89:6c:95:4c:c5:14:6e:d6:ad:4d:53:a5:5d:c5:b8:2b:
ec:58:40:ed:08:95:b7:b6:9a:23:7b:9e:08:f7:f1:95:b8:ff:
12:2f:fb:3d:c0:af:74:42:b1:57:7b:31:5b:07:84:f8:cb:ba:
9c:69:27:9a:4e:ec:b9:af:fc:b1:df:a9:41:a2:4b:3f:25:f2:
38:3a:62:1f:24:03:78:8f:7c:bb:c7:8c:b6:86:d2:28:65:9f:
08:e4:28:ca:1e:f3:32:4e:69:8c:5f:34:c4:27:f5:fe:e9:74:
28:76:e9:69:52:da:2c:9e:85:a2:88:6e:70:67:49:21:29:98:
c1:b3:69:8d:6f:72:8a:16:73:c9:2a:ae:2d:c5:ad:c9:a0:9f:
a2:9f:af:d5:35:59:1a:ac:a0:09:4e:32:38:77:85:a3:64:fd:
a2:b1:bd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:13 2026 by rpki-client