Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File: 1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier: 0VdLdi4PsXKpPuzHlW2ACK3gcOz4vs5K8tFs/icSkOY=
Subject key identifier: 5F:EF:F9:EA:82:35:07:33:B0:E8:9F:91:E5:76:51:0F:DF:58:A0:F3
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 019CAB6B0F83A26E58E4EA727B7D44387128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 22:00:46 +0000
Manifest this update: Sun 01 Mar 2026 22:00:46 +0000
Manifest next update: Mon 02 Mar 2026 22:00:46 +0000
Files and hashes: 1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: 6oZkb2gK06WCeIwSTsjMrawpNYsa1U2/m/ict0ngLJk=)
2: Fe8C_WdJ22L_dUyWBiMD7GctyW0.roa (hash: jgg9eOYs6Fp1X/VK0bPmmQUSKdjdeLQeRgEOHtqy2sM=)
3: iZkVXsS9yGQ5uNDpG7uCxyLqe-E.roa (hash: 1BhAgUiLaur5U/BDzt8YwtvIu/RtYONux/FF3rMGdkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:0f:83:a2:6e:58:e4:ea:72:7b:7d:44:38:71:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Mar 1 22:00:46 2026 GMT
Not After : Mar 2 22:00:46 2026 GMT
Subject: CN=5feff9ea82350733b0e89f91e576510fdf58a0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:10:0d:99:de:95:ff:94:a1:c6:6a:bc:2b:
02:fd:c3:e2:c1:69:e2:86:8c:2b:89:2c:3a:20:e4:
0e:da:33:a6:ca:f9:cd:e0:d1:6e:36:ee:14:1e:76:
23:bd:88:ca:f9:ca:7e:bd:90:4c:0e:a9:10:41:67:
ba:c0:e1:08:39:b3:67:5c:4f:3d:f5:8f:14:fe:76:
d2:42:69:4f:47:e2:62:6a:89:96:e8:b9:d8:49:b8:
6d:53:81:6d:5c:29:d0:fd:4d:12:43:16:2c:06:88:
3f:3d:7a:4a:91:97:17:6d:5d:0b:e7:3e:3f:56:2b:
5e:ce:02:e3:16:3f:cb:5b:ad:4d:de:90:1b:c0:e7:
76:bf:2e:c6:3c:b3:df:09:b5:5d:c8:29:04:b2:de:
74:fb:b4:3e:de:9d:ca:ef:1d:3f:46:bc:dc:21:75:
cd:bc:d1:14:f3:54:14:42:4a:69:6c:98:65:51:35:
e7:ab:05:bb:cd:34:0a:43:a0:ed:b2:59:7e:9e:04:
0f:4e:b3:31:7a:b2:82:a4:61:83:fc:8b:4c:a4:8f:
3f:72:73:cf:0d:54:70:93:1b:df:b2:b7:f8:fd:42:
3b:b8:f7:6e:bb:0d:21:29:ff:11:18:82:de:ca:a1:
3e:aa:ed:68:5f:2d:d3:aa:96:7d:89:64:5e:a9:eb:
87:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EF:F9:EA:82:35:07:33:B0:E8:9F:91:E5:76:51:0F:DF:58:A0:F3
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:dd:de:e3:e1:39:2e:a5:67:b7:50:7f:e5:16:c3:9e:af:a3:
19:fb:e8:78:ad:10:43:48:1e:6f:8e:57:fb:e6:98:23:07:50:
6d:91:2a:35:da:84:10:35:f7:e5:ad:7d:54:d6:06:be:51:5d:
e9:50:0e:c8:24:be:c5:e2:01:20:5f:ec:18:f9:bf:a0:59:88:
02:90:1c:4e:22:f4:5a:12:9f:d9:7a:cd:b0:06:64:0c:aa:8f:
1d:33:78:d1:4d:ee:65:13:9d:f2:26:f9:d0:99:a4:55:0c:43:
67:10:e5:ea:b6:ec:33:92:f7:8d:38:9e:23:6b:4c:dc:b8:89:
75:39:71:79:6f:66:77:a0:1d:23:e3:fb:71:56:c2:e1:e3:2a:
df:f2:b7:38:72:a8:c7:2e:08:d8:9a:e2:68:7d:10:ab:32:a6:
9b:42:ac:b4:71:e8:18:00:1a:3c:f7:c0:e8:72:3b:d3:eb:55:
09:16:62:5b:19:9f:ba:4d:a2:de:c5:7f:e7:41:74:44:4e:e2:
a0:35:25:ea:11:8c:7b:ef:f8:14:f0:e3:2a:2c:d6:30:77:f7:
5a:36:03:ff:e9:32:b6:49:cd:9a:63:85:c3:6f:68:b4:d1:87:
3a:07:17:03:3e:49:0d:25:3e:c2:63:1e:ef:7a:88:c1:fe:a6:
f6:f0:3d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:57 2026 by rpki-client