Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
File: p72rJYCrs79ii11PidSXzZ2SpOM.mft (raw, json)
Hash identifier: ReqUIT5ZA6at6bERMdduqdmKC7PcA6IP/aIGMh8z6uM=
Subject key identifier: 5B:EE:0D:5A:FD:88:9E:D4:E9:E6:46:FB:D1:7F:66:D5:53:20:23:26
Authority key identifier: A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
Certificate issuer: /CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
Certificate serial: 019D299708A510066AF2CFF40058286A5B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 10:00:57 +0000
Manifest this update: Thu 26 Mar 2026 10:00:57 +0000
Manifest next update: Fri 27 Mar 2026 10:00:57 +0000
Files and hashes: 1: 7Kss7kA_WQlqoG4PUE9_u-LfX8A.roa (hash: Icn/cQ2oXawc/s6B8JYKMg6KOpa4qAUSrLTaNNEAE3A=)
2: p72rJYCrs79ii11PidSXzZ2SpOM.crl (hash: o4RE1fWk4ZDEhb5IxhnA6yEZS4HZHMrQeEwS3BdGJn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:08:a5:10:06:6a:f2:cf:f4:00:58:28:6a:5b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
Validity
Not Before: Mar 26 10:00:57 2026 GMT
Not After : Mar 27 10:00:57 2026 GMT
Subject: CN=5bee0d5afd889ed4e9e646fbd17f66d553202326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:43:51:98:ad:81:42:81:17:21:2e:27:17:
c7:6a:01:15:ee:da:f8:88:70:f4:af:d0:61:e9:9a:
c7:f8:d0:42:10:12:fc:41:1e:b0:aa:25:c0:64:b0:
11:57:bb:c9:cd:08:2e:ed:36:a1:40:47:59:3a:93:
a4:28:c9:21:fd:ef:59:ac:9f:9f:ac:f1:25:a1:fc:
37:6b:3d:b0:e3:34:40:f7:c0:50:a1:df:0e:eb:fb:
a6:e0:6c:57:63:9a:54:e6:7c:5e:9c:eb:51:1f:10:
b4:39:f3:e2:f8:0b:3a:1f:8e:af:01:2e:37:9a:4a:
53:90:33:88:c3:49:b3:05:93:96:24:1f:58:4b:b7:
44:b1:7b:d7:51:69:5c:7a:5c:27:08:dd:01:72:ac:
a3:a1:72:97:b7:ab:36:e8:86:80:6a:59:fb:57:76:
7d:2c:a6:d1:75:d2:8c:89:94:77:89:80:27:08:bb:
d4:52:d4:dc:ed:5b:f4:2e:fa:4b:83:32:ba:23:93:
41:66:b4:a6:40:09:44:d0:ec:dc:32:06:29:96:b3:
69:58:27:60:66:b8:4f:ea:03:87:71:45:63:99:9d:
d2:a8:0e:31:bf:90:19:40:78:d2:4b:16:8a:e4:a9:
6b:1d:35:ff:e2:c3:44:41:b8:c2:90:87:4f:d2:52:
e7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EE:0D:5A:FD:88:9E:D4:E9:E6:46:FB:D1:7F:66:D5:53:20:23:26
X509v3 Authority Key Identifier:
keyid:A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a0:ac:28:e2:5e:cc:a1:8c:17:64:c8:91:9f:e6:d9:fa:74:
97:a4:b8:d3:fa:15:9f:c4:50:5e:ac:d9:3d:6b:07:2e:40:80:
8d:67:5a:59:c5:4a:1e:a6:5e:f2:dc:68:12:1e:d0:5b:4f:a0:
e1:bc:4a:e2:4d:fc:3a:98:8a:33:05:1a:e6:78:89:f2:1e:3b:
c3:d7:31:e3:a4:93:d2:51:1d:9f:c1:4a:36:17:55:fe:7e:ea:
f8:c5:17:7b:71:a1:68:14:43:d2:fc:21:55:7a:9e:c2:33:e3:
ef:42:92:7d:78:e7:e5:3b:ad:d2:77:11:9b:c2:a4:e1:e8:31:
6c:e8:e6:53:4e:92:79:29:b0:f0:34:9e:8b:fb:b7:bf:47:3c:
b1:ec:8a:e2:ab:cd:98:03:6b:c3:56:99:55:f3:b6:ac:29:3b:
3d:86:1c:ff:5b:99:ae:df:7c:7f:ef:dc:fa:ab:f2:50:7f:26:
ca:ca:f0:78:7e:d0:07:f0:e8:7a:af:9e:71:e4:e0:d9:c8:48:
4a:62:9e:c0:fa:32:63:48:ff:c8:88:92:2a:52:53:f8:31:a2:
aa:78:c0:5d:0e:6b:e8:48:89:3c:ec:57:f7:72:d8:f0:d0:58:
71:af:de:b0:5f:d0:b3:b1:c8:da:66:c1:fe:42:b6:7c:ce:dc:
2f:05:2b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:05 2026 by rpki-client