Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: btqW3pgTY0GxXFmGqxJVd2XsZ5/TKy0qLOGcq9TnUT4=
Subject key identifier: 1E:96:E2:51:BA:59:6A:7C:5A:9E:DF:A8:D1:41:B2:A2:9D:1B:3B:71
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 019CA9B385554DD160C1D1D34F4075F1DF51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 17F9
Signing time: Sun 01 Mar 2026 14:00:40 +0000
Manifest this update: Sun 01 Mar 2026 14:00:40 +0000
Manifest next update: Mon 02 Mar 2026 14:00:40 +0000
Files and hashes: 1: 9pC-ibevAKS-26VHnfb369UjvOo.roa (hash: 4g/AIjuZ+wenceNroAaqj5Lh9HfADzpHeXflVuUhXzA=)
2: cTlliJQGudEc-EL6iDNgBU6q-DI.roa (hash: fFq0wxKYSeUMmP8/3JXlsdr3hGg6WxNOxEODFwgQ024=)
3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: h6fxtzmx8NM5N0xzFqV2tjG2C1t+MIFZdYbI68V/BBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:85:55:4d:d1:60:c1:d1:d3:4f:40:75:f1:df:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Mar 1 14:00:40 2026 GMT
Not After : Mar 2 14:00:40 2026 GMT
Subject: CN=1e96e251ba596a7c5a9edfa8d141b2a29d1b3b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c5:c3:f5:05:af:cd:86:d0:c9:9f:57:5c:32:
42:da:91:41:ae:80:08:7f:cf:a8:0e:8f:02:fb:3c:
dc:d5:83:3f:ab:8b:77:a1:36:f6:e1:f4:e9:b0:42:
f9:6b:7f:78:16:da:d0:4d:9b:c4:a6:01:fb:03:2d:
d6:0e:7c:75:14:bf:e8:d6:04:73:7e:ad:28:0b:dd:
a9:10:ba:03:1e:c9:7a:fd:68:cb:7f:ce:31:de:c1:
fd:b7:74:7d:a6:bb:7f:21:be:26:fc:ea:db:07:e1:
ab:c9:c9:42:63:f7:87:b8:3b:6e:34:2d:5e:0c:a4:
12:85:cc:5a:63:ea:fe:0a:7a:ca:76:ab:4e:75:4b:
7c:a2:04:4e:78:03:a9:ee:f2:1b:0e:c7:32:e3:ef:
f1:6a:6b:13:e9:29:a7:a3:da:62:c0:fe:1e:fd:a2:
47:cc:cd:b6:82:2f:8f:15:a8:09:d5:0a:b8:7f:2c:
38:20:98:c2:94:77:62:8e:ea:62:74:ff:83:63:df:
58:9d:13:15:e1:c1:0e:1a:53:3c:90:69:95:a1:06:
ca:79:96:65:e6:04:8f:d5:93:73:83:62:1e:b9:72:
09:29:15:0b:c5:11:82:a0:11:39:83:eb:b2:6c:1b:
f5:d1:99:15:a2:6e:2f:71:9c:75:43:0b:b3:ae:86:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:96:E2:51:BA:59:6A:7C:5A:9E:DF:A8:D1:41:B2:A2:9D:1B:3B:71
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:75:6e:67:13:a3:f5:bd:7b:1e:d5:80:65:88:47:27:5c:ae:
c8:04:6b:20:9b:2c:ce:86:59:01:ad:53:c4:54:72:ef:72:d8:
53:4c:d7:27:d7:86:b4:46:50:50:d2:6f:c4:6e:c6:84:79:e8:
f0:ac:dd:22:54:7c:81:04:77:c0:45:a2:4c:d7:11:7e:8d:e5:
e2:86:7a:2e:49:08:c2:13:9c:27:eb:32:a1:8c:a9:ec:65:5d:
ea:a0:a3:ea:75:ca:a0:6b:cb:dc:38:14:d4:8f:5c:34:3b:20:
21:db:c1:de:6f:e8:5e:01:7d:93:b1:f5:f9:7e:1f:25:f9:cf:
5a:8e:c9:d7:42:08:57:b6:9d:54:de:2f:33:1f:50:c0:38:fd:
65:df:a3:a5:44:7f:54:66:78:14:83:e9:72:fc:c3:eb:c0:9c:
cf:a6:07:fb:ea:7f:69:f7:f6:f5:f0:54:97:81:a6:1a:e8:7b:
cd:90:2c:55:d6:8a:03:0d:61:2d:49:11:ac:8a:2d:8a:91:61:
dd:b8:ee:66:ff:88:7e:d3:12:0d:d9:fc:39:94:95:47:52:a1:
9e:51:d5:d6:08:52:31:1b:0a:28:dd:e1:ce:71:ea:fd:22:c9:
b4:9c:8a:50:f1:51:4d:b3:7a:20:9d:41:e1:2d:26:f2:ed:bf:
bc:83:fb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:11 2026 by rpki-client