Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
File: p2i77FqeEb-9rthKqNOqzaKYifk.mft (raw, json)
Hash identifier: CIN1Zu0YJhYxLgMNnJ3Uy/mgtriE6QxtiNJlZxJoopA=
Subject key identifier: 11:97:26:5F:41:B8:A8:FA:34:25:7C:EA:63:5B:63:63:F6:36:D0:4A
Authority key identifier: A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
Certificate issuer: /CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Certificate serial: 01A1DEDEEE3E3EC3C9387B12561EF65463C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 11:01:54 +0000
Manifest this update: Sun 15 Nov 2026 11:01:54 +0000
Manifest next update: Mon 16 Nov 2026 11:01:54 +0000
Files and hashes: 1: YwiBk7F0B614LD9wQoEFnkWeQjs.roa (hash: mvD8mcgS8Z/u8tn955UOEASMu8p9nleqgNicn8XmXOw=)
2: p2i77FqeEb-9rthKqNOqzaKYifk.crl (hash: nj9KomDDtlz2/VC3HBf67EpEdboY132Ye/fxNZCUAIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:ee:3e:3e:c3:c9:38:7b:12:56:1e:f6:54:63:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Validity
Not Before: Nov 15 11:01:54 2026 GMT
Not After : Nov 16 11:01:54 2026 GMT
Subject: CN=1197265f41b8a8fa34257cea635b6363f636d04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:29:33:65:fd:ac:d2:f5:92:f6:03:27:0c:7f:
fa:a1:68:10:24:be:88:16:bf:12:a3:24:cb:3c:a3:
a5:31:5b:51:d0:e3:d7:61:ac:da:81:6c:1a:f3:86:
38:8b:5b:38:58:98:bb:4f:8b:da:e7:a2:f6:a9:9a:
5b:44:9d:fc:64:e5:e4:94:9e:d2:de:79:01:1f:63:
14:1e:56:45:58:d0:bc:45:c9:6e:5f:fc:92:86:05:
6e:d3:a0:1c:6e:96:ce:75:bc:59:25:ca:29:dc:f5:
49:18:d8:97:2b:23:0c:01:bd:0b:40:ea:55:01:6e:
6e:a2:45:03:68:81:04:a4:c1:e1:34:89:b1:df:b5:
23:d3:d9:fa:ee:0b:a0:c7:35:6e:0e:96:a9:94:52:
b0:9b:b1:db:27:dc:27:0b:93:a4:54:63:d6:c9:73:
43:a4:05:b3:0a:c5:dc:1e:9b:9b:28:22:03:39:47:
17:1d:3b:7d:40:8d:61:aa:bf:4b:6d:58:f6:3b:8e:
97:61:7e:7c:2f:4c:75:c1:62:78:51:56:c2:1a:3c:
86:00:a5:7c:df:ce:09:dd:bc:31:e7:ae:7b:c8:51:
0d:69:1d:17:04:32:6f:16:32:de:4e:62:c6:01:55:
f3:40:19:19:7c:90:9a:5f:40:2e:61:43:af:02:6d:
58:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:97:26:5F:41:B8:A8:FA:34:25:7C:EA:63:5B:63:63:F6:36:D0:4A
X509v3 Authority Key Identifier:
keyid:A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e9:c3:02:35:12:4f:a1:e9:6c:91:89:3f:ed:f6:91:5a:c6:
d6:76:71:25:da:60:dc:34:76:13:7c:2d:fb:b9:c2:3f:31:b3:
1b:a7:dc:59:1b:bf:6a:64:24:3f:d5:ce:f1:1a:c1:5d:92:84:
1d:be:b8:36:89:b0:b7:df:ce:10:c3:2d:f0:20:2c:f9:88:5f:
5f:03:75:b7:42:ed:6b:97:0c:f3:70:cb:94:2f:53:7a:6e:dd:
a0:6c:e4:17:17:25:7c:ad:3e:e2:99:c1:47:30:b9:33:42:89:
fd:14:65:b4:a3:e5:19:99:b7:bf:c5:84:1d:07:2a:af:5b:71:
7a:c3:28:33:88:90:1e:e4:ec:e0:94:ba:a6:fc:8e:92:5f:03:
3a:6e:85:d8:9e:0a:1c:dc:9c:2f:ab:ef:50:17:a4:26:1c:f0:
d3:43:1a:25:33:fc:c8:8c:b8:04:68:69:a7:c0:c8:81:92:ea:
3c:d8:a1:18:b5:04:5b:16:06:8e:dd:ba:49:ad:18:f4:b6:b4:
14:62:1d:85:28:ea:e3:bc:07:28:8f:c7:3d:b5:2a:4a:c1:de:
6f:e5:b6:ba:8f:06:1e:8c:a2:ad:91:7d:bc:a0:07:b5:a1:60:
6f:c3:27:93:d8:6d:40:2f:87:55:a6:5b:49:49:51:3a:aa:23:
8f:53:c9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:35:26 2026 by rpki-client