Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File: 1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier: wmXmWsQYrAlU6sZPAIXMczeljA32gc8Af4mxjB9krAU=
Subject key identifier: 41:6F:A9:7F:77:B2:73:3B:9B:C2:6E:A8:56:7D:D1:AD:34:97:6A:09
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 01A17B84BB7D09BEC99AD28D4698778BCEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 04:00:58 +0000
Manifest this update: Tue 27 Oct 2026 04:00:58 +0000
Manifest next update: Wed 28 Oct 2026 04:00:58 +0000
Files and hashes: 1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: 16PWOZS9PVa4reZtNNDlGQGWMDg9PYiy8vn5Lq/+kPI=)
2: Fe8C_WdJ22L_dUyWBiMD7GctyW0.roa (hash: jgg9eOYs6Fp1X/VK0bPmmQUSKdjdeLQeRgEOHtqy2sM=)
3: iZkVXsS9yGQ5uNDpG7uCxyLqe-E.roa (hash: 1BhAgUiLaur5U/BDzt8YwtvIu/RtYONux/FF3rMGdkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:bb:7d:09:be:c9:9a:d2:8d:46:98:77:8b:ce:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Oct 27 04:00:58 2026 GMT
Not After : Oct 28 04:00:58 2026 GMT
Subject: CN=416fa97f77b2733b9bc26ea8567dd1ad34976a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:f5:a0:b6:e1:a1:46:ca:46:3d:68:0e:89:
c3:b3:fb:d2:cd:41:6d:e3:4f:bb:22:6f:a2:ed:d7:
32:06:8f:9e:81:66:c3:a9:9e:40:cd:e9:77:b4:7f:
a5:51:51:27:b7:09:70:67:2e:7f:38:47:ed:e5:7d:
7a:65:c4:eb:ea:e3:0e:0e:24:f1:1b:2b:17:e9:c2:
f7:e4:08:0a:df:21:eb:ea:f4:59:45:d4:93:82:81:
fa:fe:c2:90:6a:a9:16:1a:be:b2:da:8c:67:8b:b6:
34:f5:ea:26:e7:4a:fa:14:a6:5e:df:40:dd:05:be:
8a:f1:a8:8c:c2:9b:11:3a:9c:ec:65:6e:a8:7a:18:
ab:96:cd:b7:da:5d:db:b5:98:14:ea:cc:36:d5:a4:
bb:5f:30:b1:a1:53:cd:8d:6d:0a:ad:da:04:5a:3c:
70:e5:83:d5:45:cc:bf:d2:d2:e3:f7:24:7c:d5:30:
84:d5:51:e8:a4:19:fd:bf:2b:db:d5:e6:ff:85:c5:
60:b9:ea:10:d0:75:a3:1f:91:bb:7c:59:d2:47:1b:
db:19:ee:e5:b2:7f:f5:e6:77:60:91:f8:fd:bc:4d:
92:55:01:65:f2:9c:f3:1f:8b:07:6d:05:6c:0f:48:
27:30:cd:4c:0d:9a:59:fe:4a:3c:4a:c6:d3:54:de:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6F:A9:7F:77:B2:73:3B:9B:C2:6E:A8:56:7D:D1:AD:34:97:6A:09
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e7:71:6a:42:81:fc:63:dc:c8:02:02:0c:e1:ba:b9:55:65:
3c:71:a5:b0:bd:f2:c0:ea:c0:f3:56:f2:ce:e6:e2:de:e3:a3:
90:81:13:c1:f0:52:cb:f9:ea:75:82:2d:13:79:fa:96:94:26:
ed:1f:13:23:2f:d9:1b:ad:e8:20:03:ad:f1:57:ed:90:1d:af:
62:6d:ba:a6:af:d1:7c:6b:fd:f0:d7:60:c4:2b:b5:81:b2:0f:
8c:95:4a:ab:96:e2:04:89:6d:4e:d6:c9:88:4d:31:b7:db:ae:
6b:62:27:15:2d:e2:e4:49:8d:3e:28:ca:c3:51:e5:6e:13:f5:
96:f7:ec:1c:7f:77:10:11:6e:94:70:29:da:b0:ca:9d:8f:9b:
83:2b:2b:14:26:1b:af:51:dd:65:a6:f5:9b:b9:95:dc:27:df:
ae:73:ea:5e:c4:41:2f:97:71:f1:a4:af:3b:ac:20:67:d1:f0:
9b:65:fc:ed:e5:e5:ec:a4:c6:8b:cc:d9:c4:2f:a4:d1:44:67:
40:70:34:fd:e8:b0:09:27:fd:b1:74:dd:c7:d7:d1:05:31:c8:
95:3f:00:f0:bb:bf:7c:6d:00:62:b4:18:ae:0f:e1:e0:d6:51:
7b:3f:f4:d2:ee:c7:3e:2f:4a:66:e8:31:1a:f0:2d:4e:7d:af:
3c:ec:f7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:15:28 2026 by rpki-client