Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json)
Hash identifier: 8mV0grWgurn1RPlpNOyWmxv1lT385DXzK7lt9ps/6Wc=
Subject key identifier: 6E:93:5E:56:4D:A9:D8:E1:0E:B1:C7:24:AA:EB:67:5E:EC:E3:A6:39
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial: 019CACB4D5A5032EC69577EC1A2B39C76EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 04:00:58 +0000
Manifest this update: Mon 02 Mar 2026 04:00:58 +0000
Manifest next update: Tue 03 Mar 2026 04:00:58 +0000
Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: Zy3szIkYKOuLOtmX4q84kbLhP37ufTY5LcZxJlgVirQ=)
2: DcQtZ-Dz8X8GVNr2BI2zUcr15D8.roa (hash: ARWpTu4Im5vDVchDP7TKrgojtqolrGKcQ5Qr0gDHopw=)
3: pBfnRaa4uT2fJ1J0F8evwtWCvCs.roa (hash: nmGG8AuPdljBBkNiuco4BAfX85eXAF9UrVPHWokUo4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:d5:a5:03:2e:c6:95:77:ec:1a:2b:39:c7:6e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
Validity
Not Before: Mar 2 04:00:58 2026 GMT
Not After : Mar 3 04:00:58 2026 GMT
Subject: CN=6e935e564da9d8e10eb1c724aaeb675eece3a639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:f6:96:67:54:e6:93:d6:9b:74:95:78:53:
0e:66:e0:7d:c4:78:d6:47:0e:6e:4e:88:ea:c1:7d:
95:e0:2b:03:1f:46:de:b2:b0:d8:90:13:69:8f:a6:
3e:e4:8c:b6:1d:85:c8:97:a0:38:13:58:64:06:90:
67:ab:d0:ac:a2:3c:fb:c0:61:f2:cb:dc:69:56:3e:
51:bc:12:f2:60:4c:b0:9a:ca:49:07:94:2c:54:4e:
ac:4a:89:d6:5f:79:16:cc:d7:84:9a:78:b7:f7:68:
a5:5f:f4:46:a7:3b:2c:09:c4:5c:0a:a6:16:75:ed:
7a:14:ec:3b:26:7c:e7:38:2f:f1:8a:5b:19:c6:62:
31:c9:df:4e:77:62:8f:bd:d9:65:a4:7f:9b:5a:7c:
b4:bd:d6:f0:49:ca:92:bd:d7:9e:a6:5e:08:91:fb:
61:8d:d3:76:5d:c8:36:15:65:9d:0f:d8:b9:b5:1b:
3c:12:c2:ee:05:55:be:58:98:c3:7a:3f:3a:4c:51:
d1:d0:59:f0:a3:96:c4:e0:50:e5:a4:43:7f:91:16:
93:7e:d0:1f:9b:5a:81:14:51:44:a1:21:c8:41:9e:
14:b4:2c:43:f2:3f:bd:ed:b1:d6:90:71:54:d7:e4:
22:a0:33:59:10:ab:51:fe:86:76:fd:5a:7d:be:75:
c5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:93:5E:56:4D:A9:D8:E1:0E:B1:C7:24:AA:EB:67:5E:EC:E3:A6:39
X509v3 Authority Key Identifier:
keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:83:18:bd:b8:7e:aa:44:ff:09:e9:64:c6:82:d1:f4:a2:bb:
59:a2:16:22:1a:4c:07:b0:84:1b:ed:46:c1:7a:8f:e4:a6:1d:
45:47:a5:40:14:fb:0c:3c:a2:3c:14:12:ee:41:ba:06:33:af:
b9:c0:df:1f:b7:67:55:ea:49:f3:86:7c:1a:33:f3:31:f9:ac:
c4:aa:81:53:5c:2a:04:35:94:34:03:d4:e2:5f:81:dd:0a:f0:
34:ab:48:68:c7:30:9f:f4:81:98:41:d6:bf:73:f1:e6:26:f8:
de:55:c9:e4:fb:ce:1e:8b:7e:3c:35:5b:65:56:88:5b:1c:84:
bf:c8:5c:37:3f:c1:14:ff:ec:40:ad:b8:ba:ef:63:65:83:13:
c8:6f:8a:3c:34:25:d9:b3:99:c7:ea:e8:7b:b6:e9:2b:34:44:
9c:77:83:4e:2d:08:3c:9d:ea:d1:68:16:89:42:d7:8e:5b:be:
51:04:b3:5c:f1:a2:40:8e:05:de:33:e7:15:2d:35:24:9a:00:
02:c8:94:96:4f:01:0d:86:dd:37:20:43:f3:3c:49:a8:59:e5:
7f:64:b8:92:2d:da:9c:f2:a4:4f:6f:61:62:58:88:0c:4b:1b:
3f:40:18:8b:66:56:6d:3f:3b:dc:69:de:78:bb:37:cc:ee:2d:
ff:74:47:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:41 2026 by rpki-client