Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
File: 1vrDln6phZIn2fe-dE4qbqSG4Rc.mft (raw, json)
Hash identifier: 40L14dU+03ocagYCM05pu4gLqYBQn8C2poy+Ujdc5m4=
Subject key identifier: 92:25:F5:07:A3:75:48:23:87:B4:D2:0E:4B:72:6D:37:3A:AE:EA:D7
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Certificate issuer: /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial: 019CAA5856B64FF3E5A20913543E91A3B5B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
Manifest number: 177E
Signing time: Sun 01 Mar 2026 17:00:41 +0000
Manifest this update: Sun 01 Mar 2026 17:00:41 +0000
Manifest next update: Mon 02 Mar 2026 17:00:41 +0000
Files and hashes: 1: 1vrDln6phZIn2fe-dE4qbqSG4Rc.crl (hash: lm2HQNMV919S8JoSjXZlSJ+aoeGIA8lByCRc879SEDE=)
2: 58jG5a4etI7HLIjlMWRu8EZHcBI.roa (hash: h6AjzB3AJvNdpXgK77pPU3V49NDZDTYGpMVhHidUW8I=)
3: 9rQtcYniJqaTmpf5xB6cfsXG52I.roa (hash: du7a+9+coel4o3rj5T2HDR19krlEKiSzpeQoq4pnzXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:56:b6:4f:f3:e5:a2:09:13:54:3e:91:a3:b5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Validity
Not Before: Mar 1 17:00:41 2026 GMT
Not After : Mar 2 17:00:41 2026 GMT
Subject: CN=9225f507a375482387b4d20e4b726d373aaeead7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:ad:34:5d:cf:c5:24:7c:ed:d3:3f:1e:04:
23:94:51:c3:0e:8f:ec:72:97:c8:54:a7:82:21:cc:
7a:3d:51:0c:dc:87:e2:41:01:61:75:fd:9e:f7:6e:
5b:b1:16:95:30:e1:9f:ad:19:75:d5:59:5e:d1:57:
b8:13:5f:30:f9:bd:8a:ac:d4:33:91:34:d8:18:a0:
b2:ab:73:82:be:9f:6a:40:23:10:9d:fe:35:3a:43:
ab:b5:ad:e6:28:10:6e:59:56:5e:1a:34:8e:78:3e:
3a:ec:33:be:bb:a4:3b:43:3c:73:f0:8c:9f:67:6f:
49:e2:2d:e8:8c:1e:77:b4:68:06:ac:f1:c8:73:85:
8d:b2:30:89:8c:37:7b:30:e8:6c:a3:5a:83:fc:da:
ff:4f:b9:35:78:70:62:7c:1a:a5:7d:2e:92:17:74:
35:73:6e:06:f3:27:ca:a5:76:96:75:f8:27:77:b2:
e3:e2:ff:65:09:8c:5a:e6:d3:dd:52:c3:a5:fa:75:
0d:de:93:b6:c2:b6:a6:33:cb:42:ea:45:58:a3:a6:
8f:6a:ed:17:72:d7:bd:62:ec:04:04:5d:98:0e:b7:
d0:2e:8b:cd:0b:e3:0c:12:f6:0a:74:1a:80:22:8b:
00:b0:cb:d5:24:fd:2e:a4:b2:64:63:47:2c:0e:7b:
ad:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:25:F5:07:A3:75:48:23:87:B4:D2:0E:4B:72:6D:37:3A:AE:EA:D7
X509v3 Authority Key Identifier:
keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fa:10:e9:35:46:78:ff:30:ee:eb:d5:0e:52:11:dd:26:78:
dc:b3:b0:53:17:c9:3b:60:fc:40:c2:f7:d0:b1:68:92:74:70:
08:12:00:0e:90:01:ea:ec:2d:71:2f:2e:eb:cf:e4:8c:09:81:
d6:eb:22:db:1e:66:58:26:83:f1:ca:a3:2c:a3:f7:38:f8:04:
ed:36:f8:07:0a:c7:11:b2:e5:ac:b6:f9:24:e8:fd:78:2f:bb:
47:06:6f:4e:eb:bd:60:88:ab:e5:44:41:d0:4f:b3:e8:ca:b2:
69:06:a8:29:c9:b4:84:c9:e5:c1:11:6f:3a:76:bc:8a:22:ba:
4b:9e:96:8e:ec:14:c4:c8:69:74:e3:d4:74:c9:ba:18:44:bd:
1c:7c:31:5c:63:55:c8:40:71:6b:69:cb:e4:f7:26:4e:30:60:
9e:49:f0:a6:ca:38:36:b0:49:cc:e1:d1:d0:f9:bd:a6:58:49:
02:3a:6e:a0:72:01:c4:c7:45:0f:50:ba:74:3a:da:c4:89:34:
e3:27:c7:1e:3a:48:fc:6f:d7:da:70:d2:fd:73:ec:20:e1:3c:
c4:f3:91:98:a4:89:e0:a0:fa:7c:63:5b:43:bc:e5:61:b2:13:
5b:1e:ee:a5:9a:eb:47:0b:7b:9a:30:7a:e6:db:29:fc:e7:08:
47:a5:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:36:26 2026 by rpki-client