Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
File: 1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json)
Hash identifier: KCBaskZQ4TUxe9ZTKhZlt9hBhvBnE5azayoJdbUVJ9U=
Subject key identifier: 0D:FF:E7:82:74:C8:35:31:D6:F7:2F:13:BF:75:DF:BC:68:39:9F:F7
Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
Certificate issuer: /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Certificate serial: 019D389C2EFD6A6AD629F06AADCC879BB575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:52 +0000
Manifest this update: Sun 29 Mar 2026 08:00:52 +0000
Manifest next update: Mon 30 Mar 2026 08:00:52 +0000
Files and hashes: 1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: WRL4WFn/93wToFZyWiGcLKeTa4iDWaoDQjtqHLsg4W0=)
2: R3ml3p2UCbj2WZwYh-kGTkhVCeI.roa (hash: 61bHqaM6yloEoaMB3RQ50xunau9HQvm40J9/cQnFMg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:2e:fd:6a:6a:d6:29:f0:6a:ad:cc:87:9b:b5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Validity
Not Before: Mar 29 08:00:52 2026 GMT
Not After : Mar 30 08:00:52 2026 GMT
Subject: CN=0dffe78274c83531d6f72f13bf75dfbc68399ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:01:1d:bd:9e:04:11:4e:92:42:4d:ac:3d:
d4:87:6d:3e:38:2b:c9:d4:96:cd:e2:dd:d6:f2:bf:
39:1f:ab:f9:d5:7a:bb:fa:f3:c5:e8:43:d7:1c:09:
6e:ae:3c:63:5c:d6:c3:9c:d8:99:62:de:93:c8:71:
9b:73:8f:02:a9:95:db:33:45:61:58:9e:e9:ff:47:
78:28:7b:88:f3:7a:79:b1:f8:08:6c:03:2d:8d:53:
ac:8d:48:34:1e:ed:68:cf:6b:ea:64:80:25:1a:d4:
67:39:81:03:ca:71:a7:fe:db:f4:06:04:88:8b:ff:
28:1b:03:cb:93:ef:3f:c6:06:e0:8e:00:70:18:7b:
e9:a5:69:aa:8e:2e:54:53:a8:5f:6a:b4:fd:da:b8:
7e:d3:c4:a5:a4:88:5e:0f:1a:ca:23:6f:1c:31:d0:
8a:96:1a:e5:83:ae:26:24:eb:1b:38:44:8c:70:4d:
a8:ad:61:0f:e9:f7:80:b9:31:16:2e:45:8a:e4:eb:
4a:c9:55:d1:41:ac:94:64:22:06:76:8a:e1:90:58:
5b:37:7b:a6:d5:f9:68:e3:52:5c:57:f8:96:c5:6e:
7a:32:ea:bf:9f:d9:d4:6b:7b:17:c0:c7:48:20:6a:
22:64:cb:6f:aa:2d:eb:24:9f:74:19:b5:ae:02:19:
89:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FF:E7:82:74:C8:35:31:D6:F7:2F:13:BF:75:DF:BC:68:39:9F:F7
X509v3 Authority Key Identifier:
keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e1:de:a7:c9:3b:38:d6:3c:01:e6:ef:5a:92:46:cd:1c:dd:
79:dc:e7:68:ea:98:91:b7:62:b9:eb:c7:58:f0:f6:26:97:7d:
f3:cf:25:35:5b:50:00:84:8f:59:eb:14:0b:f2:28:34:bd:28:
1c:01:45:53:b2:89:dd:b5:2c:5c:b3:b7:2b:d1:db:6f:2d:4f:
47:45:72:9c:bb:34:7c:5b:d3:6e:b3:ff:ba:0e:d3:50:8b:3f:
22:1c:1d:64:1e:ce:4a:cf:93:30:94:9c:7f:c5:aa:40:18:35:
f5:34:6c:8a:8a:6f:21:86:97:3a:ba:b6:07:96:b1:46:62:ca:
c3:e7:8a:f4:73:0c:9e:98:ef:73:c0:e8:d5:30:f6:9e:94:34:
9b:a6:17:ab:20:9e:72:a4:23:b9:98:73:8b:af:89:b1:c5:ad:
4d:f8:d4:49:31:5c:e5:af:06:91:fd:a8:c2:87:40:12:e1:6c:
f8:ef:06:b6:28:47:69:1c:85:22:f3:35:75:44:0c:71:1b:6d:
ec:59:8a:75:38:fc:d6:da:92:46:3c:65:14:37:e9:0b:4c:75:
07:1e:c9:c0:3b:31:a7:76:0b:ae:23:89:14:2d:5d:19:57:93:
1a:c3:f6:30:e6:43:3a:1c:75:60:89:47:2f:6b:e3:ca:ee:2b:
26:c9:2a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:58 2026 by rpki-client