Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File: 1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier: eVIFSe4ZxrAnJTReH8HuaQsV113QLXyv3iEVtVMaYns=
Subject key identifier: 53:5A:A3:A4:B8:CC:4C:8A:0C:6C:98:C9:BB:36:67:FD:43:4C:61:5A
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 019FAA19697808275E9F93508D6B24F49998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 19:00:19 +0000
Manifest this update: Tue 28 Jul 2026 19:00:19 +0000
Manifest next update: Wed 29 Jul 2026 19:00:19 +0000
Files and hashes: 1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: qbOHGbpdAh/+PqRmraYMUu31RQnwT9rWi1rsxUfXOD4=)
2: Fe8C_WdJ22L_dUyWBiMD7GctyW0.roa (hash: jgg9eOYs6Fp1X/VK0bPmmQUSKdjdeLQeRgEOHtqy2sM=)
3: iZkVXsS9yGQ5uNDpG7uCxyLqe-E.roa (hash: 1BhAgUiLaur5U/BDzt8YwtvIu/RtYONux/FF3rMGdkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:69:78:08:27:5e:9f:93:50:8d:6b:24:f4:99:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Jul 28 19:00:19 2026 GMT
Not After : Jul 29 19:00:19 2026 GMT
Subject: CN=535aa3a4b8cc4c8a0c6c98c9bb3667fd434c615a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d9:76:12:84:6c:db:15:6d:40:5f:91:f5:38:
5b:ce:e2:d2:01:24:57:78:c2:38:0d:72:10:80:5f:
a0:d8:05:57:33:f7:44:af:80:9b:b2:dc:e0:a3:28:
66:60:b5:f2:02:36:93:10:fa:3a:d6:a2:82:fd:c4:
ec:a4:e8:d3:b1:9b:4e:bb:52:32:df:e1:7b:51:c3:
6a:ea:19:d8:13:d1:b5:ea:a5:47:36:f9:94:ce:aa:
c7:32:77:ec:e0:fa:06:27:87:e4:9b:be:35:dd:ac:
84:d1:b9:5b:50:78:9b:fa:e9:41:b4:98:58:96:e4:
cb:a1:cf:4d:12:69:6c:9d:cc:e8:e6:f6:29:85:d8:
f5:6d:c2:b9:a6:17:3d:94:05:73:29:1c:4a:d8:99:
8d:ef:cc:5e:4d:e1:a9:c9:c4:42:7b:ed:35:86:a5:
9b:e6:dd:35:65:24:e8:0b:d2:2b:c1:55:0b:11:c9:
98:0e:04:6e:ee:0b:93:66:f3:0c:f0:6d:52:d4:73:
a3:5f:10:75:2f:63:1d:bc:73:5a:06:49:a8:72:25:
79:0a:0c:e9:9b:51:5e:24:b9:01:72:8a:d5:0d:38:
5d:1d:a5:ba:cc:bb:93:a2:72:62:78:99:4e:14:aa:
28:49:c0:a8:61:20:2e:f6:e4:c1:12:08:90:f4:cc:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5A:A3:A4:B8:CC:4C:8A:0C:6C:98:C9:BB:36:67:FD:43:4C:61:5A
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:80:8e:ac:74:14:4d:41:99:7c:80:78:a6:ff:50:12:e8:e6:
19:4f:be:28:ed:92:37:6d:a1:33:44:c8:10:90:10:b4:0b:c3:
38:93:42:05:de:23:a6:34:30:40:d2:35:d0:30:15:04:82:16:
10:34:cb:67:0a:63:57:0b:1a:c1:a4:ab:ba:60:96:c6:d8:34:
cd:01:93:ee:a3:f5:d1:88:e7:8b:bd:3a:e1:d1:4d:d5:d6:d5:
97:1b:53:92:ce:6e:8c:96:86:ba:08:f1:37:57:94:6e:eb:6a:
91:87:b5:f1:1c:22:da:76:3e:80:90:a0:ca:ca:99:67:35:71:
f2:72:0c:e4:51:ff:62:af:a3:8f:e5:bf:5f:95:aa:ea:70:a0:
81:cf:cc:60:a3:57:11:d2:85:92:02:f0:9b:66:76:4f:21:12:
6e:14:42:55:3a:c7:8c:16:45:9c:38:5a:f9:88:c0:cc:ab:6b:
7f:26:69:3e:46:d3:3e:96:c5:06:ce:89:21:21:3a:9f:63:1a:
b2:a8:22:bc:6a:fd:d8:2b:d5:59:e6:57:a7:30:12:a8:0a:26:
c5:52:3c:68:c6:8b:89:1e:39:92:e2:e9:43:6e:56:ea:98:0b:
bb:d2:70:b3:9e:4e:46:40:72:83:9f:04:8e:42:0e:f5:d8:5b:
06:8a:18:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:04:10 2026 by rpki-client