Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
File: 1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json)
Hash identifier: UhQ5o1ArNO8ylF7aNR827NppX1bgHHwKXp6ff9KZhlw=
Subject key identifier: 36:00:7E:45:BD:4C:CA:B2:6D:AA:35:90:E1:AF:22:9E:2B:BA:C8:D7
Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
Certificate issuer: /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Certificate serial: 019CAD907453FF3C50A313445777CB3D99D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 08:00:51 +0000
Manifest this update: Mon 02 Mar 2026 08:00:51 +0000
Manifest next update: Tue 03 Mar 2026 08:00:51 +0000
Files and hashes: 1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: Jw8NDHUwQOEV9B4UJCZk56sARA/qIGkmedHE/ZfopTU=)
2: R3ml3p2UCbj2WZwYh-kGTkhVCeI.roa (hash: 61bHqaM6yloEoaMB3RQ50xunau9HQvm40J9/cQnFMg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:74:53:ff:3c:50:a3:13:44:57:77:cb:3d:99:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Validity
Not Before: Mar 2 08:00:51 2026 GMT
Not After : Mar 3 08:00:51 2026 GMT
Subject: CN=36007e45bd4ccab26daa3590e1af229e2bbac8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:ff:5f:5e:48:5f:a8:9a:d6:c4:27:da:c4:
b7:43:11:62:9c:67:1b:52:23:32:92:ab:21:8a:28:
bf:b3:50:3b:d1:d4:6d:e7:91:a1:14:7d:76:18:88:
14:ae:2a:cc:93:81:0b:68:28:fb:3d:80:03:a4:79:
ab:af:06:db:6e:fb:cb:7e:ca:63:2b:9b:d9:1a:7e:
e0:c1:72:1e:29:3a:38:e8:34:15:a1:9b:eb:83:6a:
f5:18:8e:b0:10:22:6a:92:6b:02:9a:e1:1e:96:07:
31:c6:ae:d3:bc:d0:da:f5:34:57:cc:95:99:e7:51:
92:82:cd:c8:b6:42:11:2f:bf:ed:2e:ad:2f:30:6c:
f2:f7:d8:e8:1f:8e:85:cb:5b:1e:a4:ba:dd:3b:30:
42:12:fc:36:9f:a5:98:6f:16:52:a6:6c:ca:33:02:
79:cd:fa:ce:7d:46:cf:8a:30:d5:12:5f:38:48:a2:
cd:34:b7:11:6b:aa:c2:b6:ba:d7:be:85:38:e9:8e:
34:9d:0a:dd:bb:6b:93:f4:c8:25:37:7c:0e:44:7b:
4c:2a:5a:85:be:db:7f:24:c4:2f:ec:2c:75:a5:d6:
bd:75:3a:81:e0:77:bb:e9:a6:47:c7:a4:bb:27:e9:
5e:08:a3:c2:e0:68:04:42:79:35:a4:3c:6c:64:50:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:00:7E:45:BD:4C:CA:B2:6D:AA:35:90:E1:AF:22:9E:2B:BA:C8:D7
X509v3 Authority Key Identifier:
keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:88:3f:c6:c0:08:86:56:1e:af:f4:09:d1:e3:22:79:02:cf:
1f:6a:82:c3:01:95:4e:d0:b9:05:60:45:74:99:e7:7b:9f:0e:
b2:fa:e8:03:aa:5f:91:5f:9f:11:51:fc:c3:42:ec:ae:c4:d2:
71:49:8a:20:d0:38:90:d2:9f:d6:5f:bb:a2:0b:e1:b0:c3:9a:
e6:f3:9e:04:cb:5d:74:94:5a:c2:aa:c1:bf:40:74:5f:9b:ee:
2b:3f:cc:8a:62:db:ad:fa:f5:61:83:22:ac:90:59:6b:eb:98:
0e:dd:e3:44:bb:58:ec:5c:5c:28:da:69:65:18:79:79:13:c9:
08:72:1e:4b:17:1e:94:9d:bb:87:21:ac:0f:11:ac:8b:9d:b6:
14:70:f8:8f:5a:43:f1:48:cc:8b:57:b4:2f:4c:fb:71:53:0e:
98:b0:7d:41:e6:c6:c7:17:c4:57:90:d6:4a:85:ab:62:2c:d1:
31:b5:4d:df:ce:20:2d:61:33:04:be:4a:35:f4:66:7d:33:1a:
bd:5e:d5:29:12:55:fc:62:c1:11:da:85:d7:c8:b2:b3:44:fc:
66:ad:0a:a5:8f:08:76:f9:72:b5:8b:ee:69:57:aa:7b:a1:e9:
62:4f:3b:ae:5f:2f:64:d9:57:9e:49:fd:cb:3c:be:11:35:38:
e1:e5:da:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:18:35 2026 by rpki-client