Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: GiwRvT5Ppym8IRJCwW1lS2Yl58fr2aIazJcleQBt1SE=
Subject key identifier: 9A:FB:FC:47:22:9C:A5:E8:24:54:84:01:1B:7D:28:BD:00:A0:5D:BF
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 019D992B0B486560AFABD7EEF6B5AB50956A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 02:00:28 +0000
Manifest this update: Fri 17 Apr 2026 02:00:28 +0000
Manifest next update: Sat 18 Apr 2026 02:00:28 +0000
Files and hashes: 1: 1iRbLYf4C0y3oJ3-4xIANjl72wA.roa (hash: UG6S1kmkOsd5y0L7phKRaWuOG6F5o7BKD1/4AyWvM5A=)
2: JjyvVDVovIRDvh2WAPN4qcYKbB8.roa (hash: YWVGU0nc40f+duH6QOCC8OFDRM3GdOHIxFuAUo2EzwY=)
3: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: zl7vSfTdHzztjneYCaXk1vanacAvWeKBmF8hsKlsQXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:0b:48:65:60:af:ab:d7:ee:f6:b5:ab:50:95:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Apr 17 02:00:28 2026 GMT
Not After : Apr 18 02:00:28 2026 GMT
Subject: CN=9afbfc47229ca5e8245484011b7d28bd00a05dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:b0:6c:81:88:91:a6:0b:85:b6:45:b4:0a:
52:44:76:e2:64:a9:35:be:1b:df:26:37:a2:c2:66:
e2:09:22:23:90:7b:0d:75:ee:19:db:91:53:99:1f:
6a:92:f3:ff:e5:50:1b:05:bf:0c:64:8c:e6:35:fb:
6d:39:d7:23:02:2e:c8:43:a8:ea:af:50:36:63:a6:
b6:1d:07:1d:a7:3d:9c:07:4a:13:e2:9b:e3:f7:f5:
55:fc:38:97:56:b9:ea:e0:4a:ff:43:94:12:69:ba:
3d:c0:e0:32:a1:45:f7:5d:84:62:08:fe:3f:c3:ee:
57:6d:58:5c:ab:57:14:1c:dd:6d:73:83:71:5d:f8:
c5:92:3d:f1:b7:1a:fe:8a:dd:7e:79:ab:6c:57:d4:
55:bd:b5:57:6a:c6:f5:af:b0:a3:5e:c8:29:7b:57:
30:ea:a6:36:d5:d8:e8:91:05:06:27:83:45:76:8f:
7b:0c:e2:80:27:4d:e7:c4:c1:87:c2:ed:dc:f1:f0:
06:e9:19:82:0f:18:6f:5e:03:f2:90:06:dc:b8:80:
0d:61:03:31:3a:3f:6d:28:f0:7c:3c:42:f2:40:53:
f0:73:18:53:74:35:5d:d2:0c:3a:1b:20:39:9a:c6:
73:52:08:5e:54:42:f7:c9:a9:9d:b5:4c:b0:05:59:
90:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FB:FC:47:22:9C:A5:E8:24:54:84:01:1B:7D:28:BD:00:A0:5D:BF
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fa:d1:09:4d:a6:8a:db:7e:d7:dc:ad:38:41:8b:07:3f:26:
1b:57:92:50:d8:51:83:69:b8:03:c3:99:b6:69:59:21:c6:d3:
67:3f:05:64:22:bb:27:f8:bd:0b:d3:58:f5:8d:3a:c7:5b:5e:
08:f7:3c:b5:70:8c:41:21:ac:01:ba:ba:c2:71:88:e8:3b:51:
58:bd:4e:55:b0:a5:c8:71:d2:91:81:ac:db:13:3d:ab:41:9f:
aa:51:d7:72:13:7f:50:1c:ab:88:12:61:2f:2b:16:64:51:f0:
b8:97:2a:6f:1a:97:ac:17:b3:50:90:11:1b:ad:a6:25:ca:cf:
c2:71:0b:0a:d5:a4:00:7b:09:4c:81:5a:ea:a7:46:7e:8e:11:
c7:a0:ed:f0:cd:87:ad:ed:05:f6:76:73:87:3b:12:24:b5:92:
23:50:43:89:75:1d:e2:f8:46:ff:d0:0e:79:5b:c8:c1:d4:45:
95:6c:fe:ff:d6:11:ef:d5:7a:05:9f:3c:b9:0c:b3:1f:03:8a:
2f:01:1e:d4:9f:8a:64:30:eb:84:07:49:2a:b5:73:53:43:9d:
ab:87:d4:43:11:2e:4e:0c:e3:19:69:8b:da:81:71:8a:5e:3c:
4b:43:bf:4d:70:7b:c2:1c:0b:71:e5:c7:06:cd:46:ff:33:8b:
d9:0b:49:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:31:21 2026 by rpki-client