Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File: 1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier: 8GJbH4yM9I0nieBBNNBuydoE0hc4d4+zUu8ky/1jMxU=
Subject key identifier: D3:4F:8D:98:21:3E:14:9F:1B:0F:43:F4:24:51:EA:7D:4A:F9:2D:97
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 019D2704D3E09621EE4301338C7D34DD29D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:02:00 +0000
Manifest this update: Wed 25 Mar 2026 22:02:00 +0000
Manifest next update: Thu 26 Mar 2026 22:02:00 +0000
Files and hashes: 1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: Hb8fGa2E1Se/tcl8Wk/UtuCTQwWLQXrjS2V/O/D15s0=)
2: Fe8C_WdJ22L_dUyWBiMD7GctyW0.roa (hash: jgg9eOYs6Fp1X/VK0bPmmQUSKdjdeLQeRgEOHtqy2sM=)
3: iZkVXsS9yGQ5uNDpG7uCxyLqe-E.roa (hash: 1BhAgUiLaur5U/BDzt8YwtvIu/RtYONux/FF3rMGdkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d3:e0:96:21:ee:43:01:33:8c:7d:34:dd:29:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Mar 25 22:02:00 2026 GMT
Not After : Mar 26 22:02:00 2026 GMT
Subject: CN=d34f8d98213e149f1b0f43f42451ea7d4af92d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:27:6e:88:5a:77:96:82:5e:b4:8c:d5:25:ad:
4b:10:05:40:c6:0b:bb:60:af:54:50:32:5c:3c:ee:
b5:9a:26:51:07:88:43:82:c8:7d:ea:a2:d4:1c:86:
3c:a9:0e:48:8c:66:0c:28:ae:f9:9a:28:ba:67:13:
8e:8e:18:1c:c8:2d:fe:aa:56:9a:58:60:61:c7:8a:
dc:da:48:2b:81:4e:33:91:91:0e:2c:72:b7:b9:fd:
32:e8:b9:c1:f7:26:1e:78:6d:fe:cd:2c:6e:26:82:
8c:67:16:f2:34:81:e1:08:9a:88:30:57:3f:9b:4b:
b9:89:0b:e9:58:89:bf:05:f8:06:e5:f6:e0:cd:55:
b3:fb:38:1f:32:c3:1c:1a:9e:61:f1:24:44:47:8d:
ce:1b:e0:4f:16:fe:43:47:ee:15:27:3e:8f:a5:55:
5d:05:a2:ea:47:87:a7:d0:fc:93:14:d5:9b:35:65:
53:49:d6:4f:47:c5:4f:f2:a5:b6:36:9e:7c:21:48:
b9:c9:f3:d3:f3:c5:e0:dc:1e:2e:99:1f:bc:55:bc:
2d:9e:a7:d4:92:72:f3:b4:c2:e9:43:57:27:8e:41:
02:1d:e7:78:0f:33:99:5e:90:46:69:32:7c:68:06:
2e:77:be:2d:45:62:75:32:1c:8f:fd:c5:bb:49:aa:
2b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4F:8D:98:21:3E:14:9F:1B:0F:43:F4:24:51:EA:7D:4A:F9:2D:97
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a6:71:42:7a:52:65:0c:3f:26:96:d8:76:ff:1b:a7:03:26:
02:18:76:ac:20:4d:6d:f0:70:a8:76:e4:a9:0e:36:91:86:25:
58:f8:b6:48:b8:2d:d8:8d:50:f3:5e:ef:37:c7:1c:17:08:49:
cd:80:a8:1e:de:46:30:2a:bb:46:e0:d8:de:6d:38:0c:1b:23:
12:df:29:d2:52:8c:3d:a7:9c:ae:b5:83:94:ce:40:93:cc:62:
5b:51:64:d4:25:b8:90:ab:fb:15:09:67:6a:c2:1d:68:c2:86:
37:91:c0:2e:1c:54:b0:c0:29:af:80:f5:ab:dd:50:cc:90:5e:
ed:b9:27:19:39:e5:48:ff:62:55:99:d4:7c:7a:5b:80:c9:29:
c8:71:43:9f:b5:75:61:84:b3:4d:7e:6d:05:53:fc:a2:f6:54:
b9:0b:a2:58:68:e6:62:73:27:f4:8a:29:9d:fc:c0:b4:7e:a4:
82:0a:07:91:33:11:29:76:50:e1:17:9a:e3:72:20:fe:0b:50:
29:ee:3e:7e:40:13:39:8a:61:f6:7e:f7:fd:b1:46:da:e5:d9:
7b:e6:23:10:13:6c:8b:57:36:52:a4:05:b0:bd:24:48:84:67:
9d:1a:fc:5c:78:43:f1:ab:75:25:2f:63:7f:8f:e4:cf:f0:d0:
a8:89:5e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:40 2026 by rpki-client