Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
File: 1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json)
Hash identifier: jZJ7u6HNPVr2NoGPr4xzDMmntvxEI85tN4o4Ql7Sd0M=
Subject key identifier: 89:9E:30:E7:59:B2:E0:1D:2A:9B:51:58:F5:0B:77:BE:0B:FF:80:9B
Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
Certificate issuer: /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Certificate serial: 019F197A89FA962C6B17309B3D0C28384058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 17:01:28 +0000
Manifest this update: Tue 30 Jun 2026 17:01:28 +0000
Manifest next update: Wed 01 Jul 2026 17:01:28 +0000
Files and hashes: 1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: VVtiwDNTzXNEbCYyRQif9YmlNKzSBgZAq80zOZhwhqI=)
2: R3ml3p2UCbj2WZwYh-kGTkhVCeI.roa (hash: 61bHqaM6yloEoaMB3RQ50xunau9HQvm40J9/cQnFMg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:89:fa:96:2c:6b:17:30:9b:3d:0c:28:38:40:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Validity
Not Before: Jun 30 17:01:28 2026 GMT
Not After : Jul 1 17:01:28 2026 GMT
Subject: CN=899e30e759b2e01d2a9b5158f50b77be0bff809b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:30:8a:79:6e:f1:50:46:03:3b:9f:14:36:90:
3b:0f:68:01:24:b2:32:e8:77:72:03:49:18:c4:b5:
35:60:2f:d0:8b:37:a6:88:1e:36:00:3b:6f:1c:5a:
f6:fe:a7:f5:d3:b6:c1:f8:b8:34:8c:49:5c:05:7c:
4c:a3:21:fa:a3:4f:04:f7:63:b8:9d:0b:91:88:0f:
3b:69:cf:bf:03:b9:12:13:69:fa:22:c7:5c:15:ea:
16:b2:38:29:5d:a0:be:18:d5:ce:b9:bb:da:0e:97:
56:4a:cd:7a:e5:6a:4c:b0:ea:3f:19:8f:e6:6c:0d:
f2:b1:83:96:8a:06:18:3d:fc:8f:98:24:56:d4:37:
f6:93:69:5d:d9:20:76:e3:07:f6:72:a7:be:54:f1:
2e:55:9c:e6:8a:51:e9:7f:db:c9:3b:1f:25:86:13:
0d:0e:d7:06:24:42:c3:4c:9f:49:d0:d6:d3:5a:d2:
1f:f8:7c:ef:ed:c9:4a:74:ec:02:98:c0:57:0d:16:
3f:c9:7d:d0:c2:fd:64:ea:bf:28:a2:06:31:75:ac:
1c:bb:5d:95:19:e0:c5:77:20:13:f2:62:a7:6f:24:
2b:3a:7a:bb:43:fc:ff:a7:6d:77:e2:e0:e7:d8:f9:
09:d5:d0:35:61:cd:24:ca:11:23:b8:d7:60:f2:30:
6c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9E:30:E7:59:B2:E0:1D:2A:9B:51:58:F5:0B:77:BE:0B:FF:80:9B
X509v3 Authority Key Identifier:
keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:69:32:63:f1:27:a0:10:bc:52:19:b9:04:78:81:3d:9a:c7:
f7:1f:31:b9:14:bc:2f:7e:3d:bb:58:c7:15:df:89:61:e6:3d:
3c:b7:8d:36:3f:99:86:fb:83:5a:65:c4:08:1c:c7:6d:8b:3b:
09:ed:9a:f8:80:15:32:04:9f:2e:1d:a2:d5:e4:36:39:58:7b:
77:e8:82:a6:ea:09:36:be:a8:bb:88:7d:df:16:e8:87:41:6f:
12:76:28:32:d1:f7:a0:88:88:1c:e7:63:85:4d:84:68:79:f5:
f9:2d:41:5a:d3:02:eb:89:56:13:3a:df:3c:82:f6:e3:e0:1a:
cf:4d:43:e4:a6:5f:a7:ac:d8:22:9f:06:a8:fe:4a:e2:cd:72:
f6:29:a6:27:c8:3b:d3:75:de:28:1b:e9:93:cd:99:f8:ba:00:
9d:fd:8b:e4:34:07:f7:79:8f:9d:04:c0:25:5c:d4:fc:fc:09:
7a:03:40:92:82:a8:7b:05:c7:a9:6c:6d:0d:de:f6:1c:81:f0:
09:c9:8e:f7:55:7f:c5:ea:0a:f2:84:6d:85:2c:9d:76:9a:22:
b1:a8:68:2b:e6:d1:52:21:bb:1b:9c:5f:36:22:84:17:b7:fa:
cc:83:d7:38:02:97:7b:26:42:f4:18:06:be:f4:c2:95:c6:6b:
42:34:d6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:45:08 2026 by rpki-client