Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
File: PvRdcGusxYrv9q5H8jLZKzwvsBg.mft (raw, json)
Hash identifier: iZmVsUUCxl6SH91BJ0ZIrKbv6+bMDfB7Sh7XAL9YfXA=
Subject key identifier: AD:3F:96:78:30:ED:98:C3:07:20:FD:90:5A:89:E9:3E:ED:91:39:19
Authority key identifier: 3E:F4:5D:70:6B:AC:C5:8A:EF:F6:AE:47:F2:32:D9:2B:3C:2F:B0:18
Certificate issuer: /CN=3ef45d706bacc58aeff6ae47f232d92b3c2fb018
Certificate serial: 01A03B5E9D2FD434AAFBC568D9C2192FFE2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
Manifest number: B1
Signing time: Wed 26 Aug 2026 00:00:51 +0000
Manifest this update: Wed 26 Aug 2026 00:00:51 +0000
Manifest next update: Thu 27 Aug 2026 00:00:51 +0000
Files and hashes: 1: NL1w9Xj9eNNvZHja4bYi8u1uP0g.roa (hash: bGa7KQ5aQ4eZWg9YSqL9Pvq1iyjpLbcYhC9x7Z0XWS8=)
2: PvRdcGusxYrv9q5H8jLZKzwvsBg.crl (hash: zQnOgGLrXQP6gOS1scwrqfGNiOZXQ+O/t23k+1KyHgU=)
3: UGXYFC9jlohYNhw6f4qzRWdUTE8.asa (hash: EAHRau/OfR99p6HOKLABIO+IowH54Ml4zKfLXfBoos4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:5e:9d:2f:d4:34:aa:fb:c5:68:d9:c2:19:2f:fe:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef45d706bacc58aeff6ae47f232d92b3c2fb018
Validity
Not Before: Aug 26 00:00:51 2026 GMT
Not After : Aug 27 00:00:51 2026 GMT
Subject: CN=ad3f967830ed98c30720fd905a89e93eed913919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:f9:c7:cf:1d:8c:40:fb:28:32:76:c2:21:
dd:95:63:8e:2f:33:72:3a:14:20:81:2b:cd:e5:a6:
de:b8:7b:b5:af:96:61:fb:6b:e9:30:73:00:71:c7:
22:15:79:92:88:c5:6e:bc:3e:28:ca:68:a1:02:b1:
05:16:1f:31:57:d1:10:9b:47:9f:3d:e7:07:6e:cd:
27:39:15:39:7f:f3:0c:60:5f:b7:7b:ec:5a:b5:ae:
54:39:84:46:56:ec:bd:ea:6a:24:97:80:16:c4:7c:
26:73:38:3b:81:cd:12:a7:61:46:3b:58:c8:a4:0a:
1e:66:bd:ef:ea:ad:05:fe:01:f2:33:4e:0d:6c:8f:
93:04:c3:d7:d0:22:30:4e:c2:a0:21:8d:48:cf:e3:
c6:7a:cf:c6:79:11:70:b4:5a:3a:d7:da:dd:ce:49:
95:3e:c8:f0:b7:22:45:a8:a4:4f:8e:03:58:47:5f:
77:bb:cd:c8:aa:4b:eb:65:0a:93:cf:d5:30:e2:c4:
ce:fb:65:f0:b2:e4:e6:3d:05:a3:43:cf:15:b0:1a:
4e:0f:38:85:d9:cb:0b:bf:ec:df:3a:53:99:96:39:
9c:f5:77:49:97:f2:85:f7:78:78:3c:b9:41:89:18:
f9:18:8c:e9:88:85:2a:3a:40:fa:44:0f:d9:e9:18:
73:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3F:96:78:30:ED:98:C3:07:20:FD:90:5A:89:E9:3E:ED:91:39:19
X509v3 Authority Key Identifier:
keyid:3E:F4:5D:70:6B:AC:C5:8A:EF:F6:AE:47:F2:32:D9:2B:3C:2F:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRdcGusxYrv9q5H8jLZKzwvsBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/999295-31dc-4f8c-84b7-37ead6ab4eec/1/PvRdcGusxYrv9q5H8jLZKzwvsBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:04:f4:4c:79:aa:17:22:27:e8:f9:58:9b:18:08:65:7a:53:
98:f1:17:5b:44:e7:8f:3a:c8:b7:54:dd:a2:dc:78:48:aa:5a:
0f:05:76:78:89:24:bc:58:32:c9:66:4b:58:bb:44:47:ea:1f:
5e:1b:ae:e9:c7:7b:23:62:17:21:52:c2:10:d4:0a:be:d6:02:
7a:d2:c4:f4:aa:df:39:22:47:38:3e:b6:a9:6d:b3:91:9d:cc:
f3:2c:e8:14:73:82:58:ff:bc:92:c6:36:56:33:9e:49:a7:88:
81:cb:a1:fb:25:57:80:f4:ae:b4:98:8f:01:8b:18:cb:0f:2d:
66:7d:84:ec:ff:3d:ae:14:77:b4:72:5b:b3:80:3f:3c:8e:b3:
43:f0:48:43:e4:09:87:b7:4c:a3:e0:83:55:ff:11:31:91:90:
38:77:6c:1b:9d:d6:97:e6:88:92:c1:0d:ba:93:22:c6:d1:5a:
90:68:7e:34:8a:bc:57:b9:d1:1a:ed:23:c7:ec:68:8e:7e:b9:
93:3a:8b:d6:20:ad:a5:57:de:82:28:2b:ae:4c:ea:d0:58:b1:
77:99:17:21:c3:15:ba:cc:0d:9c:58:11:a9:9a:d2:46:97:ec:
6d:15:88:9c:19:b7:14:c9:26:0d:85:e4:c6:10:4d:ad:0f:b0:
3b:a9:f7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:07:03 2026 by rpki-client