Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
File: PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft (raw, json)
Hash identifier: Hk985RTzWEKMmoMsa4Z/NBFpSrFaD+QAFtu77BCVuHY=
Subject key identifier: 04:AF:E1:1E:52:A3:EF:F2:EA:28:2C:42:BB:AE:A0:0E:99:6A:3E:BB
Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
Certificate issuer: /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Certificate serial: 019CC864166E3A4EF6E474C8518AF1886218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
Manifest number: 1857
Signing time: Sat 07 Mar 2026 13:02:08 +0000
Manifest this update: Sat 07 Mar 2026 13:02:08 +0000
Manifest next update: Sun 08 Mar 2026 13:02:08 +0000
Files and hashes: 1: PAgTss81EypznIUSXUrAempw_so.roa (hash: hVAKVYVtH7pfRFO9nXZRlBkZwPvwRW2v9xDHqxcNeV0=)
2: PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl (hash: TWQvqtD4jlxSthFTydQQ8VBrlgVzD6W0E4xuD0zy9yo=)
3: g873udppqiGZfDfxEVPwS0fN2iE.roa (hash: vGYcXaCIiPom9FCy5Ogp8Jq2cO/kNZJXFstzgmVZSYM=)
4: o8OHfV95jFDGQMcKlS4Elzm403c.roa (hash: wX1Olvy8rFtI4rUY+LS6paVP5fazc6rWqyHgWeMMLFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:64:16:6e:3a:4e:f6:e4:74:c8:51:8a:f1:88:62:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Validity
Not Before: Mar 7 13:02:08 2026 GMT
Not After : Mar 8 13:02:08 2026 GMT
Subject: CN=04afe11e52a3eff2ea282c42bbaea00e996a3ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:0f:76:50:7c:86:00:12:5b:f1:bf:57:e8:
4b:9e:3c:14:8c:44:3b:39:f0:9f:1f:21:fb:b2:2a:
70:da:ac:e3:f8:4d:83:fd:a1:56:2c:e9:04:40:14:
c2:95:3e:96:cd:89:39:4f:96:e1:19:d6:1e:2d:87:
7c:ac:52:d2:a9:2c:04:28:10:a9:8c:5c:65:86:ef:
41:fc:6b:32:a0:01:a0:f5:5c:f6:aa:71:d6:b8:79:
2c:46:33:06:b1:63:07:a9:d9:74:f7:8d:96:95:bc:
e9:42:0b:5c:64:6f:ef:67:c1:ee:ec:50:42:a4:9b:
aa:39:dc:50:d8:a3:16:5a:d1:3c:98:e6:b1:07:87:
d1:70:fa:1c:5d:f6:17:25:6c:b7:c2:1f:c6:7d:20:
e4:dd:d4:46:d7:76:a1:e8:d1:6a:46:62:7d:13:a7:
bd:d8:7e:99:1f:fe:69:08:fe:c6:9b:76:db:08:b1:
4c:5d:c8:1d:08:be:b5:de:a4:76:b6:03:dd:de:66:
41:40:50:a4:03:4d:19:f7:0a:60:e1:55:34:17:3d:
f2:15:ef:0f:6c:d1:d8:19:34:44:99:c9:b7:97:f2:
a3:17:eb:5e:4f:9e:c2:d6:d2:22:d5:5f:f3:b3:c0:
22:2f:e7:de:f5:c1:33:48:4c:56:2a:a6:b7:43:ca:
c4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AF:E1:1E:52:A3:EF:F2:EA:28:2C:42:BB:AE:A0:0E:99:6A:3E:BB
X509v3 Authority Key Identifier:
keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:95:6b:98:da:87:7e:11:7a:aa:d2:a1:5d:a5:c9:8a:7f:20:
ed:b7:dc:36:45:6a:17:ca:f5:bf:eb:73:7e:f4:c5:d1:bc:5d:
4b:b7:99:af:a7:c6:fb:38:04:25:e2:a1:32:9c:77:ee:99:57:
f7:bc:1e:68:80:73:f6:c3:64:a1:28:80:2d:e7:97:8a:fe:24:
e8:08:07:aa:e6:de:5a:21:89:1e:98:bd:a9:f9:e5:ca:bb:83:
94:f7:76:ad:95:4a:d5:39:d8:5d:07:e0:5f:ac:c2:93:b9:14:
f3:6d:9b:52:86:49:05:81:67:c8:22:6a:f6:e2:49:fe:9f:69:
8c:d4:5a:56:d4:b4:d4:de:42:40:40:2c:2c:81:a5:78:29:9b:
46:b0:85:15:3e:60:41:a7:ec:ad:df:51:5c:27:2f:da:77:b8:
a8:5f:e2:41:5c:c0:02:2e:20:ef:81:7d:f6:8c:94:82:8c:40:
2c:98:f7:96:c4:8d:19:94:f6:87:de:b1:09:da:b9:12:ef:ea:
1f:6f:27:34:df:ce:c4:12:3e:0f:49:8e:ad:87:29:d3:b3:54:
05:bf:af:a9:85:24:0c:09:98:f0:25:a6:18:0d:af:b4:e8:6d:
24:8c:36:2f:22:c6:4e:3b:01:21:45:73:05:1b:5e:85:9a:d2:
ad:59:19:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:01:47 2026 by rpki-client