Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File: 1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier: MoinDhWMS/YObXMubPdlA2qc0Rbd/nY+Jftn403/zDQ=
Subject key identifier: E1:1B:77:31:E5:45:0E:6B:D0:0E:AA:DA:92:FC:EB:A9:7C:80:9D:D1
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 019FA25FD9F9416FC18D9B4F422BB3CAD21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 07:00:18 +0000
Manifest this update: Mon 27 Jul 2026 07:00:18 +0000
Manifest next update: Tue 28 Jul 2026 07:00:18 +0000
Files and hashes: 1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: 3NTvG3nKe/THp0i45f62lV6+5NsJkuURBvyyg/5u/tA=)
2: Fe8C_WdJ22L_dUyWBiMD7GctyW0.roa (hash: jgg9eOYs6Fp1X/VK0bPmmQUSKdjdeLQeRgEOHtqy2sM=)
3: iZkVXsS9yGQ5uNDpG7uCxyLqe-E.roa (hash: 1BhAgUiLaur5U/BDzt8YwtvIu/RtYONux/FF3rMGdkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:5f:d9:f9:41:6f:c1:8d:9b:4f:42:2b:b3:ca:d2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Jul 27 07:00:18 2026 GMT
Not After : Jul 28 07:00:18 2026 GMT
Subject: CN=e11b7731e5450e6bd00eaada92fceba97c809dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:21:bf:6c:5b:a3:1b:70:91:2e:e4:ca:50:
bb:a1:31:2e:65:71:ad:1d:b1:6d:9a:ee:9f:a5:97:
68:25:35:c0:de:83:7b:65:d5:3f:f0:7b:2e:c5:23:
97:fb:17:a7:11:57:76:3d:26:3c:72:ad:35:e3:0c:
33:94:c9:39:6a:9f:b5:cb:0c:36:1d:b8:4e:57:62:
0f:3f:8c:96:44:ac:4a:8f:52:ba:f1:a1:f2:da:21:
28:c3:74:a7:20:5b:95:2d:29:30:87:e4:eb:6e:a9:
e2:f7:ce:a9:0e:c8:eb:49:f9:f1:0d:78:83:88:5d:
80:98:22:07:06:0f:ee:bb:03:19:72:5c:2b:ad:5c:
6f:62:56:90:20:ce:b9:b1:68:b8:89:df:84:11:1e:
74:48:17:af:f8:eb:bc:1f:b3:4a:75:59:1d:82:fb:
e4:d5:50:de:c1:47:8e:54:6c:8d:35:1a:bd:88:32:
08:3c:ef:0c:b6:e7:3f:f5:e1:67:57:0d:37:41:26:
2a:7e:ce:0d:6a:b4:e9:20:77:7c:b0:7a:f5:88:c4:
f2:84:84:06:7e:c7:48:9b:64:cf:e6:34:65:62:10:
2d:e7:e5:0d:4e:51:78:90:fb:dd:1b:36:0b:5e:c5:
22:ea:83:65:a6:16:c5:61:e2:2e:c9:5d:14:0f:7c:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1B:77:31:E5:45:0E:6B:D0:0E:AA:DA:92:FC:EB:A9:7C:80:9D:D1
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ee:0b:ca:5c:47:44:66:fd:9b:22:59:3f:ab:9e:1e:29:22:
5c:94:31:61:82:ce:7d:5d:74:a1:22:03:98:7b:b7:5b:b3:65:
5f:e4:1e:fa:94:aa:47:e9:3d:d4:c4:a8:2e:79:1c:8d:56:ab:
e4:91:e1:50:84:83:e1:15:b6:29:28:9c:33:bf:20:73:46:38:
50:00:3c:b1:e0:00:ff:74:2c:ac:db:98:ec:54:5f:34:46:05:
11:e2:4b:95:8c:82:19:66:34:e7:4e:8d:37:9d:0f:69:4b:9f:
b9:96:0f:17:b1:3a:55:a6:3f:64:a3:8a:28:71:d0:8b:7b:7c:
1b:98:cb:95:9c:7c:c9:bb:97:cd:7f:cf:91:df:7d:7a:e6:89:
83:96:4b:96:f5:03:61:0a:c7:3d:44:c7:d7:d8:8b:d7:af:d3:
bc:f1:fc:1f:40:b9:cd:c3:fb:51:17:cc:78:55:3c:8c:4b:99:
31:b0:55:b1:33:4a:25:dc:e7:06:ea:1c:c4:28:63:66:af:91:
01:ff:52:ff:a2:7d:28:dc:17:06:5a:ab:1c:c0:b8:d6:9b:0a:
0f:97:17:81:0c:6f:78:eb:b1:98:ed:71:f9:09:c5:1e:ee:b8:
5d:26:f0:9a:7f:dc:4f:d2:6b:2a:8a:e6:b5:33:49:5d:0d:89:
7e:0f:f6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:19:25 2026 by rpki-client