Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
File: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft (raw, json)
Hash identifier: NxrglnBuNfNkRNnQUZTdT12m4X7JttWjl6aE1Ws7uzQ=
Subject key identifier: 71:02:7C:C3:49:82:20:B5:61:F9:69:B5:63:4B:49:67:FA:E4:0A:58
Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
Certificate issuer: /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Certificate serial: 019D394155C29C34E6B55937035C8A538417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 11:01:16 +0000
Manifest this update: Sun 29 Mar 2026 11:01:16 +0000
Manifest next update: Mon 30 Mar 2026 11:01:16 +0000
Files and hashes: 1: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl (hash: lzrfngbVSYK1LbZyawWpNcs+EsAnZ0jYHWHH4l/14u4=)
2: b9f-YG3sRgz3Cpq8Tydn4ruqPgI.roa (hash: qVB8vS/+30gYKUJ73KLGwaTJdr2WF4QKkFEP1LjTXyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:55:c2:9c:34:e6:b5:59:37:03:5c:8a:53:84:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Validity
Not Before: Mar 29 11:01:16 2026 GMT
Not After : Mar 30 11:01:16 2026 GMT
Subject: CN=71027cc3498220b561f969b5634b4967fae40a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:c5:2a:d2:38:3f:4a:ff:f8:49:5c:11:49:
37:9d:4e:8f:4c:06:99:1f:4f:df:65:db:c6:41:b6:
07:8a:1a:b0:d0:9c:bc:a3:4e:d1:10:aa:11:7a:6d:
10:66:74:a2:53:84:94:2c:9f:d9:a6:c4:51:1f:f5:
72:b8:3a:a6:bf:ad:40:57:d5:50:eb:5d:1b:cd:11:
aa:07:be:11:e6:33:b3:95:46:c3:0f:32:c1:33:f2:
75:7a:91:92:2e:25:47:d5:bd:aa:ea:29:ab:ed:8f:
43:42:5e:22:4a:6f:d2:50:ba:11:ee:42:15:e3:85:
09:d5:b6:fe:9c:06:09:5d:7e:27:ff:5f:16:81:35:
05:16:8c:09:a0:8a:80:d9:d1:b9:cd:b3:4b:e3:65:
59:92:e5:90:8d:27:d9:d8:6c:95:ad:a7:40:62:3f:
26:7f:1d:9b:b7:16:d4:c1:c3:c8:d4:da:08:a0:e3:
39:82:f3:b2:93:26:da:bd:5d:0d:8d:14:97:41:d4:
00:d5:03:fa:e0:65:1e:c5:45:06:b6:53:0e:7a:f5:
5e:3d:0d:70:b0:e5:d4:44:87:27:7b:1b:34:00:c6:
0b:37:08:18:2d:69:c2:e6:c6:33:01:0a:50:90:55:
50:25:cb:4e:c9:c3:b9:6e:08:e0:b6:18:df:ff:1a:
14:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:02:7C:C3:49:82:20:B5:61:F9:69:B5:63:4B:49:67:FA:E4:0A:58
X509v3 Authority Key Identifier:
keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0b:0a:41:90:f7:6a:bb:e0:11:1c:8f:1e:2e:7f:ea:c9:72:
a3:37:97:7f:8c:51:a6:0c:ab:09:05:38:67:d3:ed:fc:76:7e:
b4:74:d2:a7:38:64:18:38:3c:53:4b:db:3c:bd:df:8a:64:bc:
02:18:73:2b:3b:cd:bf:0e:3e:0c:18:c6:b7:ee:fb:7f:c2:78:
95:a8:40:78:9a:93:f1:19:25:ee:40:e4:58:2f:16:76:b8:98:
b1:d0:b5:12:e3:f9:e4:d4:47:17:e9:c5:15:69:e1:11:cc:ef:
ba:a7:a7:37:60:13:aa:e6:2f:55:1b:41:19:fd:81:06:05:b6:
33:e0:5e:b0:de:c6:a6:23:d3:c0:7a:45:2b:18:0f:5f:2c:85:
af:39:54:aa:5a:7f:9d:b0:30:7d:b0:a9:50:71:98:26:df:7e:
e0:3b:cc:e8:64:d4:cf:11:eb:a7:4f:23:ba:fc:90:b4:9b:08:
1b:12:25:b0:84:32:c6:1f:84:86:0b:22:3f:9b:cb:90:23:a8:
55:24:8f:52:3a:48:ac:99:b6:6b:90:23:c4:b2:18:58:08:50:
4e:bf:a5:a6:2b:e6:ba:dd:f7:99:0c:ff:a8:34:8a:be:f9:4c:
8b:7c:5e:68:a9:dd:e1:0d:5d:3c:46:7a:13:de:cb:1a:9f:ba:
18:61:0f:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QVXCnDTmtVk3A1yKU4QXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZmJkOWVkNTA0ZWVmNjU5ZWNmYzkxOWExOTVjZDJhODAz
YjYwYTcwHhcNMjYwMzI5MTEwMTE2WhcNMjYwMzMwMTEwMTE2WjAzMTEwLwYDVQQD
Eyg3MTAyN2NjMzQ5ODIyMGI1NjFmOTY5YjU2MzRiNDk2N2ZhZTQwYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfTFKtI4P0r/+ElcEUk3nU6PTAaZ
H0/fZdvGQbYHihqw0Jy8o07REKoRem0QZnSiU4SULJ/ZpsRRH/VyuDqmv61AV9VQ
610bzRGqB74R5jOzlUbDDzLBM/J1epGSLiVH1b2q6imr7Y9DQl4iSm/SULoR7kIV
44UJ1bb+nAYJXX4n/18WgTUFFowJoIqA2dG5zbNL42VZkuWQjSfZ2GyVradAYj8m
fx2btxbUwcPI1NoIoOM5gvOykybavV0NjRSXQdQA1QP64GUexUUGtlMOevVePQ1w
sOXURIcnexs0AMYLNwgYLWnC5sYzAQpQkFVQJctOycO5bgjgthjf/xoUTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHECfMNJgiC1YflptWNLSWf65ApYMB8GA1UdIwQY
MBaAFNb72e1QTu9lns/JGaGVzSqAO2CnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80YTU4NWEtZjBmMC00OTg3LWFlMDMt
YWNjY2FlNjkwZTc1LzEvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC80YTU4NWEtZjBmMC00OTg3LWFlMDMtYWNjY2FlNjkwZTc1
LzEvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwsKQZD3
arvgERyPHi5/6slyozeXf4xRpgyrCQU4Z9Pt/HZ+tHTSpzhkGDg8U0vbPL3fimS8
AhhzKzvNvw4+DBjGt+77f8J4lahAeJqT8Rkl7kDkWC8WdriYsdC1EuP55NRHF+nF
FWnhEczvuqenN2ATquYvVRtBGf2BBgW2M+BesN7GpiPTwHpFKxgPXyyFrzlUqlp/
nbAwfbCpUHGYJt9+4DvM6GTUzxHrp08juvyQtJsIGxIlsIQyxh+EhgsiP5vLkCOo
VSSPUjpIrJm2a5AjxLIYWAhQTr+lpivmut33mQz/qDSKvvlMi3xeaKnd4Q1dPEZ6
E97LGp+6GGEPEQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:10 2026 by rpki-client