Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
File: p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft (raw, json)
Hash identifier: 4et3la6Hm4higdv6G1WefH0eswCqk5Q5UfTTCtbYKz4=
Subject key identifier: 77:4A:0D:9F:98:CB:21:3E:9F:C8:6F:BE:46:25:26:B7:C8:09:22:E8
Authority key identifier: A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
Certificate issuer: /CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Certificate serial: 019D265ECDCC34AAA57E0078BA502EBAFEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
Manifest number: 1554
Signing time: Wed 25 Mar 2026 19:00:40 +0000
Manifest this update: Wed 25 Mar 2026 19:00:40 +0000
Manifest next update: Thu 26 Mar 2026 19:00:40 +0000
Files and hashes: 1: p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl (hash: Rf1Jui+ryN3eaavOaMlciqoXPSAI0VLmW0KjgGGG6Vc=)
2: yuJsWVIKEkrfOiLC0rgtYrfv5ig.roa (hash: tNJ821CD2JFvwv/regbkNi6JuvYQZgMCd//DFX1D46E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:cd:cc:34:aa:a5:7e:00:78:ba:50:2e:ba:fe:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Validity
Not Before: Mar 25 19:00:40 2026 GMT
Not After : Mar 26 19:00:40 2026 GMT
Subject: CN=774a0d9f98cb213e9fc86fbe462526b7c80922e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:1c:08:d0:68:a7:da:f1:aa:b8:cf:96:1d:
70:25:5d:88:94:03:2a:c5:95:5f:17:c9:4a:ed:cb:
1b:f9:3d:f6:18:31:15:9a:b1:d7:88:c6:47:3e:8e:
3c:7f:0a:a9:8e:6a:d2:17:f4:ed:a2:c7:f6:13:22:
86:52:5d:f2:9e:3b:74:f2:ed:39:9d:49:8e:d9:09:
44:6a:1f:6e:e5:a6:f4:4c:0e:6c:b0:2a:ff:61:92:
47:a9:00:cb:e8:5d:ba:d4:43:a3:e1:2a:cf:7b:99:
92:6e:f6:ec:8f:1e:a4:a1:39:d6:ce:e6:62:42:a1:
1a:9b:da:1e:c8:9b:9f:93:1e:76:16:d2:6e:ee:9b:
eb:34:5a:3d:03:15:59:fb:ac:79:b9:ad:e8:62:6d:
67:a5:bd:6b:ce:6a:42:15:4b:17:7a:b2:16:36:05:
90:39:bb:b3:95:fd:9b:82:af:ce:b9:f1:63:29:a0:
8d:43:0f:29:c7:87:d3:a4:7e:18:a5:d7:d3:61:69:
72:3a:cb:28:1d:ed:5d:50:fe:28:71:34:9f:ab:d5:
4b:f8:0a:1d:0a:13:27:29:b3:4b:c3:75:ab:dd:27:
57:7a:cd:62:c2:cb:fa:2d:b1:f3:69:8e:80:4f:8f:
12:37:55:b5:46:2a:e4:bc:a4:0f:35:b9:08:99:57:
b5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4A:0D:9F:98:CB:21:3E:9F:C8:6F:BE:46:25:26:B7:C8:09:22:E8
X509v3 Authority Key Identifier:
keyid:A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:43:e3:9a:0a:71:cd:bf:c6:d6:c7:2c:01:d3:f9:fc:af:e0:
24:d2:3e:15:31:1f:e1:a7:4d:30:ff:40:c6:80:d9:92:64:ac:
37:5c:3b:4e:a2:91:67:31:e6:a0:d3:66:8d:f6:55:97:78:91:
1e:a8:06:be:4f:48:36:40:ec:a2:71:24:ae:16:be:9c:84:0e:
93:b8:cd:44:d1:6d:b7:9f:50:9b:65:b6:df:a8:4d:51:3a:6b:
92:5f:ae:57:bd:73:8b:65:b0:63:64:84:95:35:53:90:5b:be:
c8:a6:99:3b:b8:69:b4:bf:bd:61:89:9f:71:9d:6e:2a:aa:85:
11:09:95:b7:a9:a3:fb:bb:8f:54:40:ee:c3:73:18:73:cf:9e:
e1:8c:fc:bd:0d:93:34:39:b1:77:be:e1:e5:fc:f8:d9:8a:c3:
59:2e:36:e6:1b:44:e7:2c:d6:9a:7c:38:91:f9:e0:e6:46:d8:
32:aa:8d:57:42:f5:6f:c1:a2:e9:7e:b0:a9:53:4b:b5:44:c3:
2b:01:30:58:57:54:ef:54:9e:dd:67:a6:71:8a:9e:08:98:72:
30:9b:44:a1:f4:95:ee:da:de:0f:07:75:a5:bc:59:ef:cf:1d:
87:5e:d4:97:d8:84:64:33:ab:fc:18:f2:08:5b:6b:f0:e5:af:
28:dc:71:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:29:53 2026 by rpki-client