Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
File: PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft (raw, json)
Hash identifier: JlEZFMpRzhrE07wqTQAuGUDMka8LNG7rFBWnVSqb6oI=
Subject key identifier: CE:00:05:8C:20:AD:1C:DA:D1:EA:1D:DB:1F:56:E5:B8:45:CD:FF:CC
Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
Certificate issuer: /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Certificate serial: 01A16834D5A1215D4BD802AA14C0472B74D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
Manifest number: 1ABC
Signing time: Fri 23 Oct 2026 10:00:55 +0000
Manifest this update: Fri 23 Oct 2026 10:00:55 +0000
Manifest next update: Sat 24 Oct 2026 10:00:55 +0000
Files and hashes: 1: PAgTss81EypznIUSXUrAempw_so.roa (hash: hVAKVYVtH7pfRFO9nXZRlBkZwPvwRW2v9xDHqxcNeV0=)
2: PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl (hash: koWqThJypmchXOTWXZ0WXD0fYkQrO0oyhFL9YGXVBo0=)
3: g873udppqiGZfDfxEVPwS0fN2iE.roa (hash: vGYcXaCIiPom9FCy5Ogp8Jq2cO/kNZJXFstzgmVZSYM=)
4: o8OHfV95jFDGQMcKlS4Elzm403c.roa (hash: wX1Olvy8rFtI4rUY+LS6paVP5fazc6rWqyHgWeMMLFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:34:d5:a1:21:5d:4b:d8:02:aa:14:c0:47:2b:74:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Validity
Not Before: Oct 23 10:00:55 2026 GMT
Not After : Oct 24 10:00:55 2026 GMT
Subject: CN=ce00058c20ad1cdad1ea1ddb1f56e5b845cdffcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f8:33:7f:9f:ba:cd:7e:6b:3e:82:9b:07:24:
fe:d0:10:17:5a:ca:7e:6e:ca:d3:c1:71:28:aa:cc:
e3:d8:ed:48:40:25:00:14:ae:ba:6f:f1:b3:29:d3:
3e:3b:7b:5c:04:1e:5b:53:de:0d:1a:e7:de:f7:19:
a8:43:32:eb:32:07:c8:c8:20:9a:d8:d6:a3:a6:37:
7c:ef:19:d3:57:47:48:e2:ff:15:67:4f:68:4b:a7:
60:b5:28:24:78:94:bd:3b:5b:f0:e3:60:e0:2a:0c:
fc:41:f9:a3:57:41:79:e0:a6:7b:58:35:27:35:d2:
6b:87:41:24:18:ba:08:9b:83:37:a5:1e:7f:40:ef:
5d:cc:04:ff:04:b2:f4:9d:d6:0f:ad:5f:cd:b8:1c:
9d:3e:25:4b:b5:ed:9d:3c:6f:c7:95:ee:85:c1:92:
69:fd:6d:7e:5b:1d:60:f8:54:70:57:34:50:25:c4:
33:d1:fd:23:a1:79:f7:03:c8:a5:36:ed:62:4b:09:
d2:45:a9:d7:cd:50:6c:f5:56:0b:18:a0:e9:de:bf:
7d:ac:69:f6:88:bb:41:92:69:c4:71:ec:a0:2e:e2:
27:cb:dd:34:d4:5b:03:fd:c4:fa:3d:67:b0:04:da:
9a:a5:4f:37:89:f3:7a:47:27:05:69:81:db:ce:f6:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:00:05:8C:20:AD:1C:DA:D1:EA:1D:DB:1F:56:E5:B8:45:CD:FF:CC
X509v3 Authority Key Identifier:
keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ca:c7:ee:e7:fe:60:b2:94:6f:61:a7:8d:47:8f:86:13:6e:
24:d7:5d:76:6c:d6:c5:e9:9d:9c:8f:aa:a7:9a:1e:f7:21:bc:
33:4f:34:e2:14:8e:50:a2:32:f7:a1:63:9f:60:0b:38:0d:3f:
74:54:0d:3c:7e:42:c2:f9:44:ca:8a:c2:ef:16:34:b4:c2:12:
af:a3:07:4d:d9:0f:b0:64:97:11:1b:41:a8:4a:a5:89:6e:cd:
05:6a:91:91:a7:da:40:0e:34:32:4d:65:cf:1b:1c:94:28:fe:
21:ca:31:1e:af:b3:92:92:34:1f:16:04:0b:81:7e:a4:a5:ac:
8e:b8:8f:8f:a4:82:d9:6f:2b:fa:ed:59:88:f6:58:65:ac:66:
15:3a:7f:e1:4e:5d:21:56:f4:a1:69:05:23:1e:c7:b2:c0:2d:
b2:35:f3:7a:a5:a5:59:53:c0:57:1a:b6:06:43:ac:73:83:07:
42:fd:b1:56:ac:37:1a:04:b4:98:9a:c9:56:ba:fa:24:13:ff:
03:98:66:bc:55:d7:df:7e:b3:2f:3f:0a:58:fb:57:d1:16:eb:
04:83:33:cc:01:41:b2:fd:53:7f:44:34:0c:a4:96:5a:49:6d:
f6:30:fe:7d:b5:e0:d8:cc:69:cb:14:4e:fd:e4:8a:fa:37:97:
aa:3b:10:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:35:02 2026 by rpki-client