Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
File: p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft (raw, json)
Hash identifier: OPCREln4ZAzXQG6Ul6E9RA57+Q+3tNatG/gGSxTi+Dw=
Subject key identifier: 7F:EC:C8:F4:81:2B:98:24:1D:BA:B3:BF:14:23:85:5E:18:4F:37:54
Authority key identifier: A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
Certificate issuer: /CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Certificate serial: 01A0D5703036D0FA55ABDF6E0A685B7E78FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
Manifest number: 17B0
Signing time: Thu 24 Sep 2026 22:01:34 +0000
Manifest this update: Thu 24 Sep 2026 22:01:34 +0000
Manifest next update: Fri 25 Sep 2026 22:01:34 +0000
Files and hashes: 1: hhOUjf_NNHVROjkzDtvuvC1VPOM.asa (hash: aaNYmLA4SwOuZSM4zGL+Zv09TvO6r7ywXgvya2WrJq4=)
2: p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl (hash: PPq2RkjZaZejQCKpIRSU2I2328SHGGk52LRWlEba4og=)
3: xiXH-5SM76J3-yxlUQfLvem25-k.roa (hash: BDbe3QCIJuuE+sgkLyO0R164Cf4HsbhT+geqZAmQ7Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:30:36:d0:fa:55:ab:df:6e:0a:68:5b:7e:78:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Validity
Not Before: Sep 24 22:01:34 2026 GMT
Not After : Sep 25 22:01:34 2026 GMT
Subject: CN=7fecc8f4812b98241dbab3bf1423855e184f3754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:51:cc:79:31:14:51:04:a7:8d:92:9b:92:
cd:2b:be:6c:a1:d1:a5:a3:a2:be:75:6d:a8:a2:6c:
c8:3d:b7:bf:1c:d2:a0:df:26:1c:81:2d:cf:cb:c3:
c3:5a:01:13:93:5f:b0:12:5a:e3:7e:ec:1d:1a:e0:
34:40:df:b2:17:a5:81:cf:ef:3f:6a:46:48:54:d7:
e6:1e:b1:7b:75:d0:ec:3b:c3:bc:5e:c0:ab:3b:69:
c2:aa:44:94:9a:7a:a0:20:00:3d:4a:87:bc:d8:a3:
b7:b8:44:35:34:da:62:e1:8c:25:97:76:3c:0d:cb:
1f:e0:58:3b:ac:c3:f2:76:99:01:5d:06:e4:d3:b0:
48:6f:6a:16:47:ce:11:30:8d:60:0c:05:b8:b8:fe:
25:14:84:37:a6:18:c2:47:ef:b7:8b:ca:72:b3:e9:
57:71:d7:e4:c7:98:9c:f1:ac:a4:56:7d:11:1a:bd:
f6:43:9c:24:44:94:a7:ba:b1:b4:f4:32:d2:bf:95:
c2:c6:49:24:4e:2d:22:1d:75:2e:91:5a:ae:da:0d:
ec:c7:74:7a:fc:10:32:29:13:32:17:70:a6:6b:41:
bd:27:c2:58:e1:6a:2c:0d:a8:9b:66:42:98:d2:a8:
7b:56:cb:23:9b:2b:2f:a5:c8:d0:93:fa:5b:44:17:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EC:C8:F4:81:2B:98:24:1D:BA:B3:BF:14:23:85:5E:18:4F:37:54
X509v3 Authority Key Identifier:
keyid:A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:93:be:b4:38:9b:cf:f9:40:95:e5:27:2d:41:32:28:44:0e:
a9:d9:8b:a4:a8:ec:c1:f6:30:57:b6:6d:aa:78:83:30:79:09:
34:7f:03:dd:91:09:02:06:fa:d3:04:2e:94:8a:e4:bf:03:16:
5e:0a:1c:1f:1a:d9:7c:c2:e2:2c:1d:18:02:a0:86:81:c6:ad:
dc:8a:ce:a9:36:99:70:1f:04:e6:a0:93:e8:9b:92:e4:ae:80:
84:04:19:b3:2f:a8:76:e2:7b:02:50:24:3b:87:e6:8b:34:38:
30:1b:d2:ac:de:f7:72:33:b0:f1:4c:b1:69:26:ad:36:3f:20:
0c:db:48:ac:72:59:e1:08:50:64:d3:4d:53:96:34:7f:b9:b6:
f1:4f:83:14:64:45:13:11:4b:9c:94:28:e6:76:37:26:18:98:
fc:ee:52:a5:da:76:37:47:f0:4e:0f:15:16:2b:4b:51:72:6a:
7d:01:06:96:40:dc:d9:64:10:34:b2:82:fa:53:2e:97:de:86:
35:f0:4a:a1:9d:6e:b9:4a:55:98:c1:90:76:a7:1b:cc:17:60:
d0:ab:a9:dd:fa:a7:17:67:ff:06:02:48:52:2a:8e:d7:76:67:
73:0f:00:70:64:5f:c7:42:b4:7f:e9:bb:d0:73:fc:61:d0:6b:
87:b7:e1:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVcDA20PpVq99uCmhbfnj+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NjRhMjZmNzYzNTUxNDBhYTY5NmUwYTRmMWYwYzMxMmI3
Mjc3YzAwHhcNMjYwOTI0MjIwMTM0WhcNMjYwOTI1MjIwMTM0WjAzMTEwLwYDVQQD
Eyg3ZmVjYzhmNDgxMmI5ODI0MWRiYWIzYmYxNDIzODU1ZTE4NGYzNzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApadRzHkxFFEEp42Sm5LNK75sodGl
o6K+dW2oomzIPbe/HNKg3yYcgS3Py8PDWgETk1+wElrjfuwdGuA0QN+yF6WBz+8/
akZIVNfmHrF7ddDsO8O8XsCrO2nCqkSUmnqgIAA9Soe82KO3uEQ1NNpi4Ywll3Y8
Dcsf4Fg7rMPydpkBXQbk07BIb2oWR84RMI1gDAW4uP4lFIQ3phjCR++3i8pys+lX
cdfkx5ic8aykVn0RGr32Q5wkRJSnurG09DLSv5XCxkkkTi0iHXUukVqu2g3sx3R6
/BAyKRMyF3Cma0G9J8JY4WosDaibZkKY0qh7VssjmysvpcjQk/pbRBfbNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/syPSBK5gkHbqzvxQjhV4YTzdUMB8GA1UdIwQY
MBaAFKdkom92NVFAqmluCk8fDDErcnfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDJTaWIzWTFVVUNxYVc0S1R4OE1NU3R5ZDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xZTgxODMtYWFkMS00ZmQ3LWIxMGYt
ZmZhNDk1MGExY2NiLzEvcDJTaWIzWTFVVUNxYVc0S1R4OE1NU3R5ZDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8xZTgxODMtYWFkMS00ZmQ3LWIxMGYtZmZhNDk1MGExY2Ni
LzEvcDJTaWIzWTFVVUNxYVc0S1R4OE1NU3R5ZDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJO+tDib
z/lAleUnLUEyKEQOqdmLpKjswfYwV7ZtqniDMHkJNH8D3ZEJAgb60wQulIrkvwMW
XgocHxrZfMLiLB0YAqCGgcat3IrOqTaZcB8E5qCT6JuS5K6AhAQZsy+oduJ7AlAk
O4fmizQ4MBvSrN73cjOw8UyxaSatNj8gDNtIrHJZ4QhQZNNNU5Y0f7m28U+DFGRF
ExFLnJQo5nY3JhiY/O5Spdp2N0fwTg8VFitLUXJqfQEGlkDc2WQQNLKC+lMul96G
NfBKoZ1uuUpVmMGQdqcbzBdg0Kup3fqnF2f/BgJIUiqO13Zncw8AcGRfx0K0f+m7
0HP8YdBrh7fhCA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:31:58 2026 by rpki-client