
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
File: 1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json)
Hash identifier: vzpZkuvO3t2iuisIAchZLZaQMneUEY3i9N3wtUXng3E=
Subject key identifier: 74:D5:4A:1E:F9:C9:ED:5A:B4:61:BA:B0:D5:3F:FE:7D:AB:CE:D3:CB
Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
Certificate issuer: /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Certificate serial: 019D9B1991405A1335A087A336E897754A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 11:00:37 +0000
Manifest this update: Fri 17 Apr 2026 11:00:37 +0000
Manifest next update: Sat 18 Apr 2026 11:00:37 +0000
Files and hashes: 1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: Tjl77eKyZ6ZGIC9oviXaI26ctPGbfbixoVw7vYHEARs=)
2: R3ml3p2UCbj2WZwYh-kGTkhVCeI.roa (hash: 61bHqaM6yloEoaMB3RQ50xunau9HQvm40J9/cQnFMg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:91:40:5a:13:35:a0:87:a3:36:e8:97:75:4a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Validity
Not Before: Apr 17 11:00:37 2026 GMT
Not After : Apr 18 11:00:37 2026 GMT
Subject: CN=74d54a1ef9c9ed5ab461bab0d53ffe7dabced3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:f4:2c:54:ac:79:52:c8:c8:cb:bb:57:48:
02:20:f1:57:5d:9f:29:d3:85:f6:b6:cd:69:09:05:
43:3e:7a:a4:3c:af:ef:ed:fd:09:fc:4a:a6:1c:7b:
d8:c4:cf:cd:0f:2d:24:10:87:1b:1b:7b:12:e3:37:
8d:3f:d8:e7:58:8b:55:21:6e:c0:61:1e:4f:34:40:
b5:c0:d8:76:7d:5d:cd:b0:d9:44:b6:4f:a3:c9:09:
c7:f4:54:d0:60:19:b0:1f:9b:2f:e0:82:4f:f7:fb:
b7:a4:84:17:97:63:b7:fd:a2:15:02:48:3e:16:56:
8b:73:a7:f1:4a:fa:df:48:1a:40:86:07:49:29:30:
a1:e2:d6:1f:bf:d9:0b:cc:90:4c:34:e5:50:13:21:
be:70:b2:8b:75:20:a8:21:5e:73:f8:b2:13:04:6f:
18:f1:a6:1f:67:b0:da:43:43:10:4f:8f:9c:43:46:
f3:34:5d:cd:ff:cc:31:ed:71:78:b9:c4:bd:a6:4e:
0a:5f:09:fb:c6:49:d4:76:ad:3f:c1:19:5a:c3:41:
36:3a:bc:bc:32:4a:6e:de:36:7e:08:33:83:89:db:
21:c0:1b:47:4f:58:da:83:3a:2e:9f:3b:5c:c4:3d:
63:6b:94:bc:7f:89:c8:fa:2f:f7:4c:75:7f:dc:72:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D5:4A:1E:F9:C9:ED:5A:B4:61:BA:B0:D5:3F:FE:7D:AB:CE:D3:CB
X509v3 Authority Key Identifier:
keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4b:f2:7a:b3:d6:c7:f2:79:63:d0:20:6d:93:10:99:50:16:
20:ae:78:94:a3:da:be:06:1e:12:53:04:6f:3a:6d:8d:ec:f0:
38:cd:8c:13:56:fe:8e:4c:a7:c7:1f:22:9e:a0:f7:a8:14:39:
e3:fd:19:a8:0f:ec:c9:af:54:27:19:2f:e1:53:a0:fc:50:aa:
58:68:be:ce:bd:c7:59:87:e4:c2:3d:21:09:d4:79:c5:bf:cc:
e8:66:87:f1:51:c0:92:bb:a6:10:26:1e:6e:f7:a6:78:11:ce:
9f:85:3b:3c:be:49:f0:1c:59:73:b8:6f:4b:c5:eb:9d:a4:8d:
b1:8c:d3:7d:82:1d:40:7f:13:3d:46:3e:89:f5:8c:6d:35:09:
18:86:35:81:cd:f8:97:8d:09:43:d9:41:5b:19:92:ab:e5:79:
bf:71:e2:53:be:49:da:3a:62:5f:04:ff:4a:69:ad:f4:fb:18:
f2:f8:d2:ac:14:e9:37:11:b7:12:9d:11:9d:c3:4b:1e:97:3c:
76:2f:2c:7c:f5:ac:b1:8e:a2:1e:89:dd:d1:0a:55:cc:0a:ed:
dc:16:2f:21:03:c3:ed:4e:71:9d:b8:d9:b3:0d:d3:32:1d:6a:
62:ea:d0:18:bf:1f:ca:4b:10:95:0d:29:fa:4c:bb:b8:4f:dd:
7b:61:8a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:31 2026 by rpki-client