Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File: 1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier: /IoYDDXrIiMWSPWx1ScQoctvV8VGF36k2x/kYGVc3KM=
Subject key identifier: 98:BE:5B:53:8A:3B:2F:74:17:D2:F8:D8:C7:15:3C:76:BA:25:2C:17
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 01A0CBC7419EAF0A332189C82E999CD121E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 01:00:28 +0000
Manifest this update: Wed 23 Sep 2026 01:00:28 +0000
Manifest next update: Thu 24 Sep 2026 01:00:28 +0000
Files and hashes: 1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: Z1AVftZC2LCS58LUxUz/Q1ardbr0ALw82/dYB7OKLbk=)
2: Fe8C_WdJ22L_dUyWBiMD7GctyW0.roa (hash: jgg9eOYs6Fp1X/VK0bPmmQUSKdjdeLQeRgEOHtqy2sM=)
3: iZkVXsS9yGQ5uNDpG7uCxyLqe-E.roa (hash: 1BhAgUiLaur5U/BDzt8YwtvIu/RtYONux/FF3rMGdkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:41:9e:af:0a:33:21:89:c8:2e:99:9c:d1:21:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Sep 23 01:00:28 2026 GMT
Not After : Sep 24 01:00:28 2026 GMT
Subject: CN=98be5b538a3b2f7417d2f8d8c7153c76ba252c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:d3:b0:30:bc:2c:9d:5a:d6:aa:df:63:38:
3b:f3:9f:9f:9a:15:e9:f7:2f:67:7d:a5:cd:67:07:
de:9e:3a:58:b9:8c:bc:bb:4f:d7:01:85:c8:08:35:
5f:42:f2:78:88:16:99:fe:e7:12:20:07:9b:75:73:
6c:b9:55:c9:bc:b1:7a:b0:af:91:25:58:2b:53:8b:
34:27:20:44:b1:18:db:24:14:b2:ca:ce:6e:bd:a5:
cf:07:f1:7c:a1:c6:5a:cf:ef:ae:b3:46:47:eb:43:
99:6b:d9:2f:f1:ee:6e:c7:d0:cf:32:f5:c6:3c:98:
ef:97:0f:73:43:3c:82:6e:39:08:61:b6:fb:a8:20:
fd:59:5e:a5:10:cf:38:ee:87:58:87:29:f6:6c:04:
b7:b4:31:82:1b:1f:30:2e:09:80:b1:22:9f:4c:11:
c4:1d:48:7c:b6:59:82:35:b9:42:6c:9d:49:98:86:
55:e3:24:6b:5e:c3:29:c6:5c:bb:eb:ce:84:77:30:
1d:8e:00:dc:29:8f:16:55:23:09:5a:76:e2:68:c4:
c9:67:df:8b:40:76:a4:d3:0e:4f:32:92:e3:bf:62:
6c:26:e0:ba:ca:4d:6b:c8:4a:d0:b9:e3:f9:1e:8b:
2e:97:d3:d7:61:12:07:36:f3:76:95:12:bf:e9:3f:
8c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BE:5B:53:8A:3B:2F:74:17:D2:F8:D8:C7:15:3C:76:BA:25:2C:17
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ba:9b:56:88:15:63:32:69:be:a4:19:2a:ad:e6:35:b5:e4:
f6:ce:20:7b:5f:7e:14:95:95:ce:a3:ca:86:b5:81:e6:d8:d0:
cd:76:29:b1:69:d1:60:7c:e0:f3:6c:af:2f:bb:de:14:ac:c6:
7c:62:dd:d8:6b:83:50:4e:c1:22:61:fd:ec:44:e1:9a:1a:06:
34:fc:2f:ad:4b:88:d9:93:c5:43:6b:1f:3e:fe:bf:96:0e:81:
94:35:0f:ad:b0:37:89:e5:24:11:76:cb:4f:0d:2f:d0:c7:61:
bd:e5:a9:cc:e7:ea:5b:f7:bc:a5:08:6c:42:ee:f6:49:69:12:
da:74:19:69:93:13:e5:73:8a:96:15:05:6a:e5:6e:fb:b0:fc:
cd:d0:8d:a0:d3:5c:10:65:08:1c:55:9c:25:cd:54:02:88:ff:
0f:56:c2:81:c0:f4:94:16:fc:1d:d1:1c:4a:93:16:d1:2a:1f:
fd:a8:29:d8:30:00:39:cb:f3:ff:24:45:bb:8e:8a:7d:6a:8a:
81:6b:66:4e:a7:5f:04:8d:00:a6:88:8c:78:51:e1:c7:89:09:
4d:9b:d3:37:ff:ec:78:ef:b8:fa:4c:cc:29:e9:ab:d6:63:d6:
58:99:5c:06:e7:7f:a1:20:21:47:95:81:b0:27:b8:4e:42:63:
b2:2e:9e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:38:57 2026 by rpki-client