Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
File: 1vvg67NTA0y7YyjrPo4_zTYLL7s.mft (raw, json)
Hash identifier: BS1GG2y8UXR8H74a0RS83rs5j/eSQhg2/DP4pK+cYzk=
Subject key identifier: 72:4A:31:7D:49:B9:62:38:5D:26:A2:DF:01:7F:CB:82:06:E9:80:81
Authority key identifier: D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
Certificate issuer: /CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Certificate serial: 019CAC46FACB5565EB8D7559C92BB3A89887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 02:00:58 +0000
Manifest this update: Mon 02 Mar 2026 02:00:58 +0000
Manifest next update: Tue 03 Mar 2026 02:00:58 +0000
Files and hashes: 1: 1vvg67NTA0y7YyjrPo4_zTYLL7s.crl (hash: n/0O/T8tnspEonQZFA9tQ1gXBdWNJVZKgeo/qLAreDo=)
2: UYxV8QSgYZ229nA1vzJ1qGvwQXc.roa (hash: LcGONu3wOoaVH6EWybaw4+qxO61czSJNIoY1SzqQdQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:fa:cb:55:65:eb:8d:75:59:c9:2b:b3:a8:98:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Validity
Not Before: Mar 2 02:00:58 2026 GMT
Not After : Mar 3 02:00:58 2026 GMT
Subject: CN=724a317d49b962385d26a2df017fcb8206e98081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:c2:4a:71:30:64:c6:07:38:93:45:41:76:
f9:b1:9d:33:6a:5b:f1:a3:b6:2f:23:b7:f1:1b:c4:
b3:b5:34:f4:bb:f3:c2:ed:22:6d:37:b2:39:20:9c:
93:23:ce:a6:1c:59:22:74:a0:3c:51:8e:27:c4:db:
99:fe:40:36:89:b9:f7:ae:d3:24:41:d5:fa:8e:78:
90:fc:80:01:c7:71:c5:05:2c:ba:9e:db:17:99:75:
e1:d5:1f:f1:e4:b7:a0:de:ab:be:dc:ce:42:5a:6f:
84:c9:b2:86:dc:13:ba:db:5f:1e:f1:d8:ee:a1:cd:
a2:27:42:20:61:e0:6d:9f:90:eb:24:af:fd:44:6a:
81:12:91:59:67:ef:55:8b:ce:3c:3c:c6:ce:f4:30:
e5:fa:a4:cb:49:b2:82:0d:42:e1:f3:05:b3:1b:01:
86:2e:c1:4c:23:5b:2f:ae:19:4c:a4:fb:e5:80:3f:
ca:f3:48:db:19:74:a6:c3:8f:35:6e:e8:d0:ec:e3:
a3:44:5f:f4:ff:5f:2d:0c:39:45:12:29:d7:f9:a1:
2b:f0:1c:32:4f:7f:d4:db:09:67:5f:73:08:f4:19:
c7:98:a4:64:69:f9:74:5d:d0:1e:38:d5:f4:4b:59:
33:fc:c2:c3:d2:16:32:4e:5f:0c:40:46:fc:4e:e6:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4A:31:7D:49:B9:62:38:5D:26:A2:DF:01:7F:CB:82:06:E9:80:81
X509v3 Authority Key Identifier:
keyid:D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a8:53:c5:4f:70:1a:54:13:9e:87:20:15:5b:d4:bc:af:2d:
49:60:0d:d1:20:25:54:c5:2c:af:03:cf:81:c5:33:f3:fd:b2:
ec:5d:1b:c4:ef:38:ae:3e:77:96:4d:ac:ab:19:4c:1c:2e:4b:
89:a5:67:40:1b:91:07:79:6e:63:9b:a7:ed:4f:57:7d:c8:4d:
6c:37:3c:71:48:3e:6e:1d:c9:a0:3b:fb:86:ff:29:d3:2f:40:
8b:61:06:63:fb:a8:bb:fe:62:36:4c:c0:f7:6d:2e:71:26:ec:
87:a6:16:1c:f5:b3:0c:2e:07:f2:f0:be:7c:e2:00:93:ce:b9:
19:d5:1d:21:02:ae:27:49:fe:5c:d9:cc:06:01:a1:f8:c8:68:
bb:8c:0d:80:a3:9d:0c:5b:83:e2:7c:70:ee:c9:07:d2:7c:a7:
30:b4:d7:6e:46:b9:df:e6:b1:88:4d:93:51:c5:03:ab:f0:2e:
89:65:3f:11:ba:86:a3:88:ab:f9:a6:10:14:05:cc:01:0c:63:
73:cb:ab:95:c1:71:ee:20:11:95:92:24:d8:60:87:95:40:e6:
0b:e7:7e:cc:8c:ca:7e:7c:b3:87:fe:9b:ea:12:e7:c0:d5:c0:
20:24:b7:49:2b:61:71:76:25:b9:11:00:2a:a9:94:32:ac:fc:
3d:c8:8c:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRvrLVWXrjXVZySuzqJiHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZmJlMGViYjM1MzAzNGNiYjYzMjhlYjNlOGUzZmNkMzYw
YjJmYmIwHhcNMjYwMzAyMDIwMDU4WhcNMjYwMzAzMDIwMDU4WjAzMTEwLwYDVQQD
Eyg3MjRhMzE3ZDQ5Yjk2MjM4NWQyNmEyZGYwMTdmY2I4MjA2ZTk4MDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQzCSnEwZMYHOJNFQXb5sZ0zalvx
o7YvI7fxG8SztTT0u/PC7SJtN7I5IJyTI86mHFkidKA8UY4nxNuZ/kA2ibn3rtMk
QdX6jniQ/IABx3HFBSy6ntsXmXXh1R/x5Leg3qu+3M5CWm+EybKG3BO6218e8dju
oc2iJ0IgYeBtn5DrJK/9RGqBEpFZZ+9Vi848PMbO9DDl+qTLSbKCDULh8wWzGwGG
LsFMI1svrhlMpPvlgD/K80jbGXSmw481bujQ7OOjRF/0/18tDDlFEinX+aEr8Bwy
T3/U2wlnX3MI9BnHmKRkafl0XdAeONX0S1kz/MLD0hYyTl8MQEb8Tua3NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJKMX1JuWI4XSai3wF/y4IG6YCBMB8GA1UdIwQY
MBaAFNb74OuzUwNMu2Mo6z6OP802Cy+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZ2ZzY3TlRBMHk3WXlqclBvNF96VFlMTDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zMzUwNjAtMWIyNy00YzExLWEyYmMt
MDBlYmRmY2JiODZmLzEvMXZ2ZzY3TlRBMHk3WXlqclBvNF96VFlMTDdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8zMzUwNjAtMWIyNy00YzExLWEyYmMtMDBlYmRmY2JiODZm
LzEvMXZ2ZzY3TlRBMHk3WXlqclBvNF96VFlMTDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqhTxU9w
GlQTnocgFVvUvK8tSWAN0SAlVMUsrwPPgcUz8/2y7F0bxO84rj53lk2sqxlMHC5L
iaVnQBuRB3luY5un7U9XfchNbDc8cUg+bh3JoDv7hv8p0y9Ai2EGY/uou/5iNkzA
920ucSbsh6YWHPWzDC4H8vC+fOIAk865GdUdIQKuJ0n+XNnMBgGh+Mhou4wNgKOd
DFuD4nxw7skH0nynMLTXbka53+axiE2TUcUDq/AuiWU/EbqGo4ir+aYQFAXMAQxj
c8urlcFx7iARlZIk2GCHlUDmC+d+zIzKfnyzh/6b6hLnwNXAICS3SSthcXYluREA
KqmUMqz8PciM8A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:38 2026 by rpki-client