Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
File: p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft (raw, json)
Hash identifier: BjkXxGJQ9DJgeYe74hgnrCIBhh2YPMIwvohkLnfraQs=
Subject key identifier: 76:B0:D9:F4:21:56:DA:7E:49:40:F5:70:25:1F:9C:3F:CB:C8:83:7C
Authority key identifier: A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
Certificate issuer: /CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Certificate serial: 019F8F109B0ADABD08204E08A431C7335841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
Manifest number: 1707
Signing time: Thu 23 Jul 2026 13:00:57 +0000
Manifest this update: Thu 23 Jul 2026 13:00:57 +0000
Manifest next update: Fri 24 Jul 2026 13:00:57 +0000
Files and hashes: 1: hhOUjf_NNHVROjkzDtvuvC1VPOM.asa (hash: aaNYmLA4SwOuZSM4zGL+Zv09TvO6r7ywXgvya2WrJq4=)
2: p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl (hash: oxI5mD3/XLRH3IUQlmgN+NyopY2stGZVdcH5rd68OKE=)
3: xiXH-5SM76J3-yxlUQfLvem25-k.roa (hash: BDbe3QCIJuuE+sgkLyO0R164Cf4HsbhT+geqZAmQ7Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:9b:0a:da:bd:08:20:4e:08:a4:31:c7:33:58:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Validity
Not Before: Jul 23 13:00:57 2026 GMT
Not After : Jul 24 13:00:57 2026 GMT
Subject: CN=76b0d9f42156da7e4940f570251f9c3fcbc8837c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:13:fc:9c:1f:b7:36:3b:d6:5f:d0:2c:bc:
c3:30:1a:47:70:3e:a1:b6:6a:db:56:2d:dd:4c:78:
dc:72:0b:37:64:cd:22:83:d4:35:79:e9:2e:08:4f:
a3:39:ca:e4:5d:cc:f9:ef:97:25:e4:67:b5:7b:90:
8f:11:02:35:6d:75:ae:38:98:d8:d9:40:31:0e:61:
21:17:48:34:11:e8:27:6f:d8:c4:52:9a:81:8b:5e:
58:47:f0:5a:45:57:41:7a:e8:58:2d:4b:b6:b5:29:
f1:02:1d:b5:49:7a:3a:bb:b1:07:5a:03:a4:c0:dc:
05:32:63:95:14:6f:7f:3b:29:01:e0:c4:d5:74:85:
92:7b:bc:56:96:54:87:57:2c:4d:a4:d6:fb:c8:93:
9e:68:2d:36:13:97:f9:df:a7:08:b5:63:8b:c5:e6:
5b:48:68:f3:2b:3e:39:e1:b6:6d:8e:90:54:45:6a:
c6:f5:01:c6:ea:d0:19:ce:85:06:23:83:d1:c6:dd:
4d:ab:99:f4:4f:e0:3d:4b:89:ca:ba:6d:ea:e9:e5:
1d:53:de:e4:48:42:87:c3:7f:0f:37:e2:df:af:33:
5a:8f:4f:7d:b7:65:de:03:0b:21:87:0f:e4:69:4f:
3d:85:31:4a:40:2b:e3:47:ab:fe:8c:25:9a:45:8c:
78:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B0:D9:F4:21:56:DA:7E:49:40:F5:70:25:1F:9C:3F:CB:C8:83:7C
X509v3 Authority Key Identifier:
keyid:A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:73:5e:3c:be:d3:4d:99:5c:75:24:e1:e4:2d:bd:bd:9e:94:
92:d4:fd:d3:c7:76:1c:c6:1a:c2:02:ff:1a:c4:54:07:b2:04:
17:af:bb:cd:b0:83:b6:be:29:ee:eb:42:4b:f1:bf:66:b0:f8:
fa:37:72:63:2f:e7:53:d4:cd:71:69:59:d6:10:2a:72:f8:cd:
cc:7c:b6:ad:bd:fe:f4:2e:78:2d:d9:1e:fe:0f:45:72:67:e3:
7e:04:56:b3:38:de:a5:d0:a0:b0:e7:8c:ef:7a:36:d3:6a:ff:
14:72:42:e3:05:cb:9f:6b:9d:04:e6:63:c3:59:56:19:74:98:
26:07:e6:f4:76:ce:80:32:2c:59:70:fb:c5:4a:bd:4b:19:02:
a1:d8:4b:d1:8e:31:d8:45:9d:8d:3e:3c:fe:31:4b:4a:49:2a:
a7:80:f0:71:55:2b:2d:24:f6:a9:c8:0d:5b:8c:94:bf:19:10:
75:57:e4:3d:62:c7:af:5b:dc:09:25:0f:29:e1:e1:77:af:30:
9e:3c:b9:78:39:1b:10:b6:a8:6f:c3:e7:17:c2:d0:18:29:75:
89:32:44:a4:c6:d3:99:ab:55:db:bb:bc:59:07:60:b1:75:fc:
4a:92:9d:a5:d8:c3:4d:0d:18:3b:44:e5:8b:c1:4f:ff:57:9b:
f3:4d:94:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:56 2026 by rpki-client