Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File: 1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier: H5iy9y89yKGr8IroCVFvPqLK/1yshMLOQ1ajF4qeDVg=
Subject key identifier: AA:CA:52:11:6E:5B:12:AB:54:42:57:FF:70:58:00:59:D8:A3:79:4E
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 01A0CFA4ABADF74896B30775506D612097B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 19:01:10 +0000
Manifest this update: Wed 23 Sep 2026 19:01:10 +0000
Manifest next update: Thu 24 Sep 2026 19:01:10 +0000
Files and hashes: 1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: ZSYSnEl0avIyr2gShV98sDxtsLDFd9tb3bpp2ahAYS4=)
2: Fe8C_WdJ22L_dUyWBiMD7GctyW0.roa (hash: jgg9eOYs6Fp1X/VK0bPmmQUSKdjdeLQeRgEOHtqy2sM=)
3: iZkVXsS9yGQ5uNDpG7uCxyLqe-E.roa (hash: 1BhAgUiLaur5U/BDzt8YwtvIu/RtYONux/FF3rMGdkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:ab:ad:f7:48:96:b3:07:75:50:6d:61:20:97:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Sep 23 19:01:10 2026 GMT
Not After : Sep 24 19:01:10 2026 GMT
Subject: CN=aaca52116e5b12ab544257ff70580059d8a3794e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:93:52:1f:12:c4:4c:87:13:6d:7f:29:31:df:
b0:91:74:ef:e1:ac:b5:f9:2c:62:6a:c5:71:ec:98:
41:c5:8c:7f:9b:9c:c3:9e:1a:13:0d:9c:ad:79:e3:
bd:11:ce:15:e1:26:4c:10:54:d6:75:82:a2:58:a1:
88:f1:19:2b:c9:40:93:6c:78:f0:0d:90:e6:fe:47:
67:9a:f4:83:be:0e:04:86:be:9d:46:bd:bd:36:81:
83:d0:6f:40:11:fc:aa:ea:2f:4c:13:f4:79:16:65:
5b:e0:13:ba:48:7f:91:83:24:84:5b:61:6d:ba:eb:
be:e6:20:6a:af:b5:76:22:d5:60:ef:cb:07:db:e3:
e9:b3:70:77:b3:e3:f1:35:a5:8b:ba:74:db:c4:88:
c3:75:46:b3:0a:71:be:1c:8e:51:62:1e:ef:38:b2:
17:78:96:5d:ca:53:8f:fb:11:16:f6:79:64:ad:c1:
bf:79:48:c4:6d:74:78:c4:d7:e5:8b:1d:d2:4d:f5:
80:39:56:35:09:8a:18:49:76:29:a5:87:94:2f:06:
84:cf:d1:8f:b0:09:8a:5e:38:77:1a:70:99:16:3c:
34:0e:70:9e:81:c9:45:8f:01:b0:d5:b9:30:63:11:
e7:ff:11:6e:a5:a4:a9:de:c6:b8:f7:92:f8:15:d1:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CA:52:11:6E:5B:12:AB:54:42:57:FF:70:58:00:59:D8:A3:79:4E
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6b:05:aa:93:94:b7:9d:6f:4e:61:7c:4d:4c:d8:e8:81:51:
ff:60:c5:25:81:4a:6c:63:b1:35:9d:82:f2:32:d9:d5:1f:97:
c2:09:95:c3:1a:ea:45:95:0e:77:b4:7b:45:1b:9a:a6:12:bc:
87:a7:62:e3:b9:ba:2d:d6:ad:e9:20:d9:42:71:d9:61:8a:a4:
ca:80:43:55:8f:4d:2f:33:6d:74:69:0d:0f:4c:ea:18:4e:20:
bb:dc:93:12:39:27:fe:c9:71:48:ed:8a:ad:e3:e5:c6:49:e5:
58:0e:d8:7d:5c:7e:74:43:2c:53:73:c5:4c:a9:ea:fc:d0:70:
83:ac:ef:d6:b0:e6:42:82:1b:4d:b7:75:f2:34:c7:52:35:55:
44:7e:0a:8f:e6:be:93:4d:20:42:46:9e:44:ba:b3:41:90:d9:
05:6e:c8:5c:c6:e3:9d:03:ce:89:d1:89:55:d1:dc:cd:21:9c:
0c:5c:62:a5:95:22:e3:c8:10:23:80:b0:b4:04:77:1b:b6:5e:
14:f7:66:8b:e0:09:d8:9f:d3:1d:85:cc:e2:cc:78:66:7b:04:
d8:ec:c1:ed:99:6b:25:a0:32:3f:23:1c:f3:c5:0c:46:ce:c9:
5a:e3:4f:4d:2f:93:66:85:a1:c1:e2:db:91:dd:94:e1:87:e1:
20:9a:00:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:42:09 2026 by rpki-client