Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
File: 1vvg67NTA0y7YyjrPo4_zTYLL7s.mft (raw, json)
Hash identifier: 8tzqJFjcY5a+YSK6P+qKvBFpjy9+pYD6idDjHk1EenY=
Subject key identifier: AA:23:A0:1E:A9:8F:09:C2:62:02:DF:CA:EE:AC:2A:6F:CE:AE:76:95
Authority key identifier: D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
Certificate issuer: /CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Certificate serial: 01A0DC1685476A5EB30E61AA749BEEE6B387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 05:00:58 +0000
Manifest this update: Sat 26 Sep 2026 05:00:58 +0000
Manifest next update: Sun 27 Sep 2026 05:00:58 +0000
Files and hashes: 1: 1vvg67NTA0y7YyjrPo4_zTYLL7s.crl (hash: 82jJu3e+di+EfNGIWYirQdtxT30yuKuvGUXdXJnNx3E=)
2: UYxV8QSgYZ229nA1vzJ1qGvwQXc.roa (hash: LcGONu3wOoaVH6EWybaw4+qxO61czSJNIoY1SzqQdQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:85:47:6a:5e:b3:0e:61:aa:74:9b:ee:e6:b3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Validity
Not Before: Sep 26 05:00:58 2026 GMT
Not After : Sep 27 05:00:58 2026 GMT
Subject: CN=aa23a01ea98f09c26202dfcaeeac2a6fceae7695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:34:2f:11:c5:26:fe:46:66:88:37:b7:5e:
34:e5:e1:1f:36:be:c1:e3:e1:01:d0:65:58:a1:4d:
fc:1a:69:ed:15:d9:90:84:49:8f:ad:eb:3c:9d:93:
fa:a8:b5:0c:3a:0f:61:b2:c9:f4:05:ae:bd:6e:dd:
89:19:26:a2:a7:ea:45:66:7f:b2:31:bf:21:50:d3:
7c:a5:b2:e8:9a:72:0c:00:0e:d1:0b:b6:63:e3:8c:
e1:e0:50:74:7f:0c:0f:04:b7:f4:84:5c:71:44:18:
ad:72:cf:dd:e1:71:e4:23:25:ca:38:be:ac:02:f3:
2b:fd:c7:b1:be:b8:50:22:21:8e:75:f5:b0:02:20:
e1:ba:c6:32:65:9d:a3:b6:ac:f6:6b:c3:1c:12:e5:
fe:ba:39:c9:75:7d:f3:43:a4:20:65:4b:45:61:4f:
8d:b1:f2:25:56:72:9c:a2:5e:6d:75:5a:3e:06:9a:
52:b9:e6:1a:cb:3e:a1:87:2e:71:75:e9:7c:02:3d:
8e:d1:82:e9:26:af:84:ff:00:0e:b1:15:1c:d4:66:
1c:74:bb:98:b3:16:4a:e7:27:94:35:b4:dc:88:c7:
b1:c5:7a:e3:ff:90:ec:df:f1:26:01:75:ba:bc:0a:
b5:7c:ed:eb:e0:61:b0:c2:3a:c5:a7:07:0e:93:0a:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:23:A0:1E:A9:8F:09:C2:62:02:DF:CA:EE:AC:2A:6F:CE:AE:76:95
X509v3 Authority Key Identifier:
keyid:D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:93:d6:38:13:aa:17:99:6a:67:aa:d3:b5:9e:1b:82:c1:04:
d1:b7:ba:f8:a2:b5:ff:8e:ea:0c:b6:09:6f:68:3c:25:36:79:
de:fe:3c:15:68:67:da:0a:f6:80:e7:8f:af:0f:88:52:a2:80:
83:6d:59:bd:9f:9e:4a:c2:37:17:ae:c2:f3:ae:ea:8d:38:e2:
e4:1e:ec:dc:3b:29:84:0f:68:6b:23:9f:6f:13:7d:ec:62:46:
3a:8e:a5:26:da:26:4f:88:64:6f:76:cf:12:be:8f:79:82:ea:
4e:73:92:9c:ea:f9:bc:09:af:8e:58:0b:09:cc:56:bd:74:ed:
e1:09:b7:07:88:be:22:20:1e:5e:bb:f3:4b:ad:61:14:91:1c:
ba:cd:29:5e:4c:98:c2:61:83:93:7d:9d:16:7a:c2:a0:57:8b:
17:56:1a:f3:ae:93:1c:ae:0a:32:b5:25:25:76:3c:66:96:60:
e9:66:4a:6f:ca:2e:0d:90:bc:1a:3c:fa:b9:d0:30:7f:88:93:
61:fd:46:24:9d:21:23:a0:03:4a:34:d1:e5:9c:09:f2:8d:a8:
6a:33:e7:9e:79:eb:48:c8:20:1a:2a:f8:33:21:e2:58:af:00:
6c:82:17:61:15:5c:eb:36:eb:5e:67:5d:8d:74:8d:94:73:b4:
2f:ab:97:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcFoVHal6zDmGqdJvu5rOHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZmJlMGViYjM1MzAzNGNiYjYzMjhlYjNlOGUzZmNkMzYw
YjJmYmIwHhcNMjYwOTI2MDUwMDU4WhcNMjYwOTI3MDUwMDU4WjAzMTEwLwYDVQQD
EyhhYTIzYTAxZWE5OGYwOWMyNjIwMmRmY2FlZWFjMmE2ZmNlYWU3Njk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTc0LxHFJv5GZog3t1405eEfNr7B
4+EB0GVYoU38GmntFdmQhEmPres8nZP6qLUMOg9hssn0Ba69bt2JGSaip+pFZn+y
Mb8hUNN8pbLomnIMAA7RC7Zj44zh4FB0fwwPBLf0hFxxRBitcs/d4XHkIyXKOL6s
AvMr/cexvrhQIiGOdfWwAiDhusYyZZ2jtqz2a8McEuX+ujnJdX3zQ6QgZUtFYU+N
sfIlVnKcol5tdVo+BppSueYayz6hhy5xdel8Aj2O0YLpJq+E/wAOsRUc1GYcdLuY
sxZK5yeUNbTciMexxXrj/5Ds3/EmAXW6vAq1fO3r4GGwwjrFpwcOkwoPbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKojoB6pjwnCYgLfyu6sKm/OrnaVMB8GA1UdIwQY
MBaAFNb74OuzUwNMu2Mo6z6OP802Cy+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZ2ZzY3TlRBMHk3WXlqclBvNF96VFlMTDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zMzUwNjAtMWIyNy00YzExLWEyYmMt
MDBlYmRmY2JiODZmLzEvMXZ2ZzY3TlRBMHk3WXlqclBvNF96VFlMTDdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8zMzUwNjAtMWIyNy00YzExLWEyYmMtMDBlYmRmY2JiODZm
LzEvMXZ2ZzY3TlRBMHk3WXlqclBvNF96VFlMTDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZPWOBOq
F5lqZ6rTtZ4bgsEE0be6+KK1/47qDLYJb2g8JTZ53v48FWhn2gr2gOePrw+IUqKA
g21ZvZ+eSsI3F67C867qjTji5B7s3DsphA9oayOfbxN97GJGOo6lJtomT4hkb3bP
Er6PeYLqTnOSnOr5vAmvjlgLCcxWvXTt4Qm3B4i+IiAeXrvzS61hFJEcus0pXkyY
wmGDk32dFnrCoFeLF1Ya866THK4KMrUlJXY8ZpZg6WZKb8ouDZC8Gjz6udAwf4iT
Yf1GJJ0hI6ADSjTR5ZwJ8o2oajPnnnnrSMggGir4MyHiWK8AbIIXYRVc6zbrXmdd
jXSNlHO0L6uXSQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:58:44 2026 by rpki-client