Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: Rt/V3Z7sSe64EV869w80gMT6sy2v0FEETKPfAyttYk0=
Subject key identifier: 24:38:32:B1:CD:23:B8:B2:10:CD:61:AD:66:8F:BA:C1:CE:07:17:82
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 019CA9B3AB4B3F90114F298CF355131C0825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 14:00:50 +0000
Manifest this update: Sun 01 Mar 2026 14:00:50 +0000
Manifest next update: Mon 02 Mar 2026 14:00:50 +0000
Files and hashes: 1: 1iRbLYf4C0y3oJ3-4xIANjl72wA.roa (hash: UG6S1kmkOsd5y0L7phKRaWuOG6F5o7BKD1/4AyWvM5A=)
2: JjyvVDVovIRDvh2WAPN4qcYKbB8.roa (hash: YWVGU0nc40f+duH6QOCC8OFDRM3GdOHIxFuAUo2EzwY=)
3: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: cmQbgt7I8xUorSr67qMqKFp962ODZi5CMo+Pzce1Mjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:ab:4b:3f:90:11:4f:29:8c:f3:55:13:1c:08:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Mar 1 14:00:50 2026 GMT
Not After : Mar 2 14:00:50 2026 GMT
Subject: CN=243832b1cd23b8b210cd61ad668fbac1ce071782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:71:4b:2b:88:8b:fc:2f:37:08:ab:77:cd:
aa:85:2e:12:8e:24:ef:bf:c4:e3:1e:3b:f8:8a:87:
66:52:da:9f:11:22:a7:91:9b:4f:86:63:cc:89:74:
6d:64:bd:85:94:aa:63:a9:66:fa:47:03:7c:8a:2b:
38:22:aa:f5:7a:10:8a:9a:d7:28:3c:46:3a:06:f1:
b8:68:42:3f:04:a7:34:e8:7c:0c:e2:6e:4d:c7:30:
7d:bb:f9:f3:2e:04:0e:54:9b:56:14:ea:eb:77:8b:
fc:8c:dc:13:be:47:30:e8:be:10:ef:fe:0c:0b:44:
78:13:27:de:4e:05:a2:53:bf:a8:3d:76:b4:54:6a:
c9:e1:d1:ce:92:dc:2c:e7:91:6e:ed:0d:2f:98:36:
ae:cc:2d:24:f9:08:34:25:a2:50:7b:34:f9:26:9e:
e5:bc:8d:99:33:7c:89:29:07:6b:68:42:cf:f4:ea:
11:20:83:d3:46:b1:11:e4:58:e7:c6:f2:da:d3:de:
f3:3d:8a:8b:c8:b5:52:b5:8c:31:83:82:21:1c:7b:
4e:37:7e:09:d8:e9:6e:37:48:34:c4:8f:b6:c6:03:
b3:33:76:2b:ce:8c:d3:b2:a3:cf:bc:f0:91:d3:d4:
06:76:12:28:59:5f:7a:bd:2c:e9:ea:21:0d:cf:b0:
37:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:38:32:B1:CD:23:B8:B2:10:CD:61:AD:66:8F:BA:C1:CE:07:17:82
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:20:64:d5:94:ab:a7:75:e8:cd:e1:5d:22:36:09:54:42:77:
da:7b:83:a4:e7:55:4b:b5:ee:b4:29:97:37:40:3b:24:be:0e:
f8:51:96:0a:e9:8d:bf:f7:66:21:3a:c9:ce:3a:13:49:e2:0b:
98:c0:c5:2e:86:da:16:fb:49:b9:03:0d:50:b4:57:45:9d:47:
0a:b7:5e:f2:08:b4:3e:12:e4:7a:8b:7c:0d:ef:3b:1e:19:ac:
8e:a0:ec:65:03:a1:e1:69:23:d4:3a:ec:d7:96:ad:91:0e:e9:
6a:8c:bb:f2:42:b9:88:98:81:5b:a9:6a:8b:e4:21:1f:c4:6d:
06:ac:41:6a:95:bb:0d:6f:38:49:7f:c1:ec:00:e7:6f:2c:78:
6d:15:fe:d2:84:79:5c:26:46:b4:51:f3:71:c6:44:13:32:85:
62:23:25:3a:d8:b0:bc:04:60:c1:ad:87:d9:f8:d0:35:da:c7:
d2:b0:c4:1e:e0:bc:0b:f7:2a:39:ed:4d:e0:a9:3d:7b:5e:ed:
05:9d:03:78:49:15:e0:8c:e7:a6:90:25:8d:c0:b1:93:0a:fa:
1d:ee:85:37:bf:e1:72:bd:21:48:71:e8:be:db:c3:55:77:c0:
73:b0:ee:9b:39:0a:33:27:58:0c:c6:c3:71:d9:72:6b:c0:03:
89:77:61:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:34 2026 by rpki-client