Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: mTMFhF6zlE3Po6ByEdq4RzvWeHkURKtetiCdPVQTV9o=
Subject key identifier: 7F:0D:8E:37:41:4A:89:5C:26:38:30:EE:88:5B:4A:77:D5:09:06:94
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 019D389C38B90742A80B83D7C6CC16110BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 1843
Signing time: Sun 29 Mar 2026 08:00:55 +0000
Manifest this update: Sun 29 Mar 2026 08:00:55 +0000
Manifest next update: Mon 30 Mar 2026 08:00:55 +0000
Files and hashes: 1: 9pC-ibevAKS-26VHnfb369UjvOo.roa (hash: 4g/AIjuZ+wenceNroAaqj5Lh9HfADzpHeXflVuUhXzA=)
2: cTlliJQGudEc-EL6iDNgBU6q-DI.roa (hash: fFq0wxKYSeUMmP8/3JXlsdr3hGg6WxNOxEODFwgQ024=)
3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: +AP7s3+fyFZhKPHGYNBUD7dAkon0nc7rw1TlWdzKzks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:38:b9:07:42:a8:0b:83:d7:c6:cc:16:11:0b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Mar 29 08:00:55 2026 GMT
Not After : Mar 30 08:00:55 2026 GMT
Subject: CN=7f0d8e37414a895c263830ee885b4a77d5090694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:3e:5b:73:0e:0a:5b:da:b3:61:55:2a:cc:
02:1c:f4:3f:9a:4d:46:42:1e:e7:c1:d4:ab:e6:70:
45:a5:4c:c1:9b:18:74:16:b7:52:de:2d:f6:6f:64:
dd:07:b4:cd:60:81:ff:34:67:2f:8b:ad:1e:8e:8d:
d3:35:d8:a2:13:c8:dc:75:fc:1a:b5:64:a1:75:3a:
23:46:e4:17:07:99:11:13:4f:5c:c5:9a:11:c3:12:
2b:54:48:68:bd:c8:d6:92:1b:15:83:03:b5:d5:9b:
a5:1f:7f:a7:c1:71:b6:fa:91:ac:df:fb:9b:c8:20:
22:4e:ea:be:02:e1:f4:61:da:05:8f:3e:d1:5b:11:
04:60:06:f1:95:6c:94:98:2e:16:c5:6f:fa:5b:d7:
6a:74:e6:a6:7d:75:b5:f4:8e:0d:72:ac:0d:23:7d:
50:0b:41:cc:ac:1d:4b:34:c9:ce:10:fe:ff:a8:9a:
e3:fd:8c:f0:e9:d8:3e:7b:67:51:56:69:3f:e7:21:
8f:fd:ed:bd:7e:f9:e3:de:e6:fd:0c:19:e0:6d:e7:
9d:7e:ab:c3:4b:04:d9:37:df:47:bc:5d:f8:21:fc:
a8:45:ee:9e:7f:aa:e6:01:5a:28:ea:28:6e:4b:a5:
86:60:45:e8:55:8c:53:d8:ae:d2:4d:6b:40:ce:4f:
94:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0D:8E:37:41:4A:89:5C:26:38:30:EE:88:5B:4A:77:D5:09:06:94
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:75:04:c0:c0:01:62:a1:dd:0b:50:a7:49:12:f0:6d:a4:61:
4d:0d:03:87:b1:cf:fc:0b:44:6e:cc:6e:8c:72:25:80:3b:7a:
0e:03:71:1c:5a:37:8d:46:f3:ed:73:d1:42:51:93:04:d0:1b:
ba:83:94:b6:9b:ee:22:c6:9a:94:c0:c1:4c:e5:3a:24:9f:32:
27:37:3e:c6:54:ca:65:18:b3:cb:ca:4c:e6:da:e9:fc:ca:3f:
9f:60:35:a8:51:72:7f:16:6e:d4:df:6e:bf:2d:6d:c6:ec:5f:
f8:28:54:8a:b3:63:6d:c4:e6:8d:2b:1e:5e:0b:31:52:af:64:
76:10:1b:be:ee:e2:8b:0c:36:42:b3:80:76:43:47:93:52:f1:
1f:3f:f1:a0:07:00:63:35:5c:69:d1:c7:a9:c1:02:f1:61:30:
73:0b:04:91:46:6a:ac:f5:eb:c4:71:b8:9c:46:5d:48:68:09:
c6:54:c6:c0:f1:67:2e:18:a3:31:6a:33:e5:1e:3f:d2:5d:88:
6b:db:29:ec:a5:f3:9d:60:c5:d3:88:ce:68:c9:6b:ec:fe:fc:
ce:b1:d9:4d:86:26:32:ae:f8:1a:c8:ea:85:7f:34:58:90:27:
7b:90:19:07:09:f9:ac:36:ae:1c:18:0d:1e:3e:bc:e5:06:f8:
a5:6c:0d:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nDi5B0KoC4PXxswWEQvbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YjBjMDU3MzFlZmE0YmJlNWMyYTMwYWU1MTg5Zjc3ODVk
MmQ0OTkwHhcNMjYwMzI5MDgwMDU1WhcNMjYwMzMwMDgwMDU1WjAzMTEwLwYDVQQD
Eyg3ZjBkOGUzNzQxNGE4OTVjMjYzODMwZWU4ODViNGE3N2Q1MDkwNjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJo+W3MOClvas2FVKswCHPQ/mk1G
Qh7nwdSr5nBFpUzBmxh0FrdS3i32b2TdB7TNYIH/NGcvi60ejo3TNdiiE8jcdfwa
tWShdTojRuQXB5kRE09cxZoRwxIrVEhovcjWkhsVgwO11ZulH3+nwXG2+pGs3/ub
yCAiTuq+AuH0YdoFjz7RWxEEYAbxlWyUmC4WxW/6W9dqdOamfXW19I4NcqwNI31Q
C0HMrB1LNMnOEP7/qJrj/Yzw6dg+e2dRVmk/5yGP/e29fvnj3ub9DBngbeedfqvD
SwTZN99HvF34IfyoRe6ef6rmAVoo6ihuS6WGYEXoVYxT2K7STWtAzk+U+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8NjjdBSolcJjgw7ohbSnfVCQaUMB8GA1UdIwQY
MBaAFKWwwFcx76S75cKjCuUYn3eF0tSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgt
ZDE1ZmViZGY1ZWNmLzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgtZDE1ZmViZGY1ZWNm
LzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3UEwMAB
YqHdC1CnSRLwbaRhTQ0Dh7HP/AtEbsxujHIlgDt6DgNxHFo3jUbz7XPRQlGTBNAb
uoOUtpvuIsaalMDBTOU6JJ8yJzc+xlTKZRizy8pM5trp/Mo/n2A1qFFyfxZu1N9u
vy1txuxf+ChUirNjbcTmjSseXgsxUq9kdhAbvu7iiww2QrOAdkNHk1LxHz/xoAcA
YzVcadHHqcEC8WEwcwsEkUZqrPXrxHG4nEZdSGgJxlTGwPFnLhijMWoz5R4/0l2I
a9sp7KXznWDF04jOaMlr7P78zrHZTYYmMq74GsjqhX80WJAne5AZBwn5rDauHBgN
Hj685Qb4pWwNQQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:35 2026 by rpki-client