Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft
File: 1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft (raw, json)
Hash identifier: WMFkSXSVMdKxaD0ztgQEUO3IF17rVcTeXIgunJfGEGg=
Subject key identifier: EE:69:98:8E:77:00:7D:A3:A3:44:13:05:D0:38:CD:F4:1C:A3:F5:99
Authority key identifier: D6:6B:F5:00:48:40:C3:3B:6B:1F:21:09:DC:24:9B:F5:B3:90:F3:19
Certificate issuer: /CN=d66bf5004840c33b6b1f2109dc249bf5b390f319
Certificate serial: 019D38D34823DC17AE599BC663D510E10BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft
Manifest number: 031A
Signing time: Sun 29 Mar 2026 09:01:03 +0000
Manifest this update: Sun 29 Mar 2026 09:01:03 +0000
Manifest next update: Mon 30 Mar 2026 09:01:03 +0000
Files and hashes: 1: 1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl (hash: W4GqS+NA4NF3QblhhAiVohgWH1b8dN7Szk8JtJgMBhc=)
2: Na4Gy6UIsHxIjVJ4JZkHTGt_YMI.roa (hash: 7cEPbpdCkfIXgLMOzwquxVKbvV/70yCisgijxQttsKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:48:23:dc:17:ae:59:9b:c6:63:d5:10:e1:0b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66bf5004840c33b6b1f2109dc249bf5b390f319
Validity
Not Before: Mar 29 09:01:03 2026 GMT
Not After : Mar 30 09:01:03 2026 GMT
Subject: CN=ee69988e77007da3a3441305d038cdf41ca3f599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:ef:12:77:80:58:63:a6:83:e0:21:a2:d2:
f0:ed:23:5c:30:18:f3:03:4c:06:b1:4a:a0:09:b7:
f4:ee:e4:72:fa:a9:ef:25:2f:ac:96:fa:e7:bf:d0:
6e:0b:fb:21:da:ad:37:8f:e0:23:95:98:8e:0c:3c:
c1:d7:d2:b4:0a:70:44:6c:4b:7f:41:48:99:2a:ec:
15:21:51:4b:a6:54:35:39:6c:82:4c:ea:f7:a8:ea:
be:29:75:d2:3a:00:1c:36:9e:b9:83:fd:6d:19:38:
dd:9e:ea:d1:57:5a:49:4c:5a:b0:36:2b:39:5a:9a:
55:ee:b6:69:c4:88:a0:4c:5a:c7:c2:dc:4f:89:75:
c0:b6:8d:a8:9f:bb:d9:51:18:6e:90:48:9c:ce:0d:
b7:4e:60:12:9c:12:c4:3a:da:8c:ee:d6:eb:02:cc:
72:00:1e:0a:9f:ee:43:77:ed:40:d5:0b:5e:4c:be:
fc:33:0e:fb:fc:cb:76:9d:76:9a:53:e2:c4:90:5a:
ab:75:f1:57:11:af:8c:48:c1:db:5e:24:c0:f7:f2:
ad:71:36:2f:8d:00:e5:34:07:1c:a9:8b:b2:5a:4c:
95:c2:4c:a8:6a:81:9d:45:45:11:b7:ce:77:2b:ca:
eb:13:2a:52:ac:5e:51:cc:c0:21:1f:29:a4:b9:d8:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:69:98:8E:77:00:7D:A3:A3:44:13:05:D0:38:CD:F4:1C:A3:F5:99
X509v3 Authority Key Identifier:
keyid:D6:6B:F5:00:48:40:C3:3B:6B:1F:21:09:DC:24:9B:F5:B3:90:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f3:d0:c3:72:79:19:e2:a6:26:57:ce:d8:68:5f:75:82:97:
32:11:fa:9c:ae:98:7e:c0:c4:ae:a6:6e:9c:f3:bb:e4:18:0d:
4c:a8:04:d7:77:0b:fc:21:48:16:ce:79:62:d9:c4:4c:33:3f:
dd:b6:cd:c2:d1:cb:ab:76:90:f6:67:37:3d:98:ca:0e:68:84:
89:22:2f:8f:80:9d:39:03:b9:8f:83:fe:78:83:cc:e8:c2:cb:
45:a9:b1:06:46:4b:91:98:68:2a:99:56:ef:24:df:b7:63:b1:
46:b7:26:da:12:28:b3:b3:13:c3:6f:5f:96:b6:59:1d:89:de:
13:50:00:f7:a5:e3:58:8c:21:7b:bc:75:06:e2:04:04:ac:25:
5a:e3:04:15:b6:58:e3:88:7e:9e:10:f3:e7:bf:25:7c:fe:ce:
79:4f:14:dc:97:60:71:f2:87:83:b3:36:34:a1:96:3c:a1:46:
68:27:c4:68:ff:07:d5:e4:82:cf:84:a8:0c:50:52:45:03:9f:
e4:76:3f:57:63:82:e3:95:f7:10:d6:95:67:20:0d:56:46:84:
75:e6:5b:1e:71:1a:81:0b:82:a4:3c:ca:67:4f:74:e8:67:44:
89:4d:ab:a4:8f:a2:55:59:ab:7b:4a:24:2b:62:d9:72:58:c4:
89:43:f3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:41 2026 by rpki-client