Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: DDnmsxzeYanS40FzojZ7IbpdJx85XqmH3OMcSB3wdP0=
Subject key identifier: AC:36:04:B0:8A:FC:38:2D:17:E1:9B:D9:12:BB:95:3D:80:6C:E3:62
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 019E2BF12C8DA1F1FBC3BF0C0CCDB9B883E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 1912
Signing time: Fri 15 May 2026 14:01:26 +0000
Manifest this update: Fri 15 May 2026 14:01:26 +0000
Manifest next update: Sat 16 May 2026 14:01:26 +0000
Files and hashes: 1: 1iRbLYf4C0y3oJ3-4xIANjl72wA.roa (hash: UG6S1kmkOsd5y0L7phKRaWuOG6F5o7BKD1/4AyWvM5A=)
2: JjyvVDVovIRDvh2WAPN4qcYKbB8.roa (hash: YWVGU0nc40f+duH6QOCC8OFDRM3GdOHIxFuAUo2EzwY=)
3: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: EKb1tVdShs15pjjFqrld9zvWBGC5F80iBosSfvsipJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:f1:2c:8d:a1:f1:fb:c3:bf:0c:0c:cd:b9:b8:83:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: May 15 14:01:26 2026 GMT
Not After : May 16 14:01:26 2026 GMT
Subject: CN=ac3604b08afc382d17e19bd912bb953d806ce362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:a7:dc:b2:7f:84:fd:0f:a8:91:4a:d7:1b:
58:88:a8:df:38:95:41:28:36:35:21:d5:ee:8e:ca:
67:5e:ba:6e:56:46:b8:5c:92:b2:ef:1c:59:4b:d6:
f9:0e:1f:bd:f4:82:2f:7f:8d:26:fe:53:46:11:78:
13:0d:13:8d:39:23:b6:f0:04:fa:6a:80:87:e4:6d:
8c:bf:2f:ea:12:41:3d:43:38:66:1b:46:8c:12:9d:
d8:e3:3e:36:83:6c:fe:c0:c4:ad:56:c2:1a:df:52:
c2:78:d5:25:f2:b7:bc:bc:d6:e0:8e:ab:a4:26:b5:
8c:1e:21:a3:6e:93:39:b7:92:2f:66:88:53:fe:d7:
9c:22:55:28:60:21:e6:9d:b2:7f:58:66:c0:fb:73:
41:c4:cd:8e:dd:c2:8c:ef:f7:06:39:c0:47:29:df:
62:0f:13:2e:84:6f:b7:cf:43:61:df:33:1e:00:73:
f5:c8:d1:65:f7:2a:28:91:f0:3b:2a:0a:6f:bc:74:
25:09:99:4c:b7:3d:55:68:7c:59:87:8c:ec:0b:65:
eb:f1:c1:1a:8e:fa:14:41:76:f6:9e:61:db:8e:7f:
1d:5b:a8:6e:00:c4:13:7f:00:99:6f:39:2d:fa:22:
a3:53:af:9f:19:2c:97:01:26:67:55:7b:fc:86:b2:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:36:04:B0:8A:FC:38:2D:17:E1:9B:D9:12:BB:95:3D:80:6C:E3:62
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:83:9b:bf:ff:ce:6c:d0:a4:23:7d:ec:99:6d:21:ba:f1:e6:
87:f2:83:73:79:4d:7b:7f:21:18:5d:ca:a6:b5:70:21:b3:40:
d0:c5:78:80:46:e2:06:35:33:74:b3:cb:53:0f:bf:a8:45:15:
ed:2d:71:da:68:c5:ae:7c:b8:da:ab:31:d1:55:6a:81:f9:31:
df:ab:71:b6:02:83:51:02:b7:31:1f:59:9a:3c:32:76:bf:49:
d5:27:77:ff:72:c2:8b:01:45:44:83:cc:88:df:9b:47:ac:1b:
e1:2a:44:1d:1d:1b:71:85:f7:ed:98:29:44:ac:b9:07:d1:90:
28:83:b5:69:3f:e0:0a:bf:48:fe:40:35:97:cb:5c:0b:cb:4b:
0a:de:76:76:12:6e:f1:24:7f:ea:95:97:02:8e:e1:d5:7a:aa:
3b:d7:9f:0e:b1:21:59:c3:62:ff:b9:6f:2a:b6:e2:56:9f:6b:
df:82:d5:3d:32:d0:25:59:56:6c:ea:d1:31:09:1c:93:82:7d:
e0:e9:ef:c2:39:6b:5e:3d:28:1f:c9:17:ca:68:e7:57:4e:2e:
d3:5f:de:32:a1:77:0c:c5:94:e2:92:fc:4a:b5:69:ef:2c:fa:
2f:a6:da:3c:91:e5:6f:ad:73:2f:6a:a2:96:ea:c7:0f:e8:73:
fc:2e:d1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 18:40:03 2026 by rpki-client