Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
File: 1vrDln6phZIn2fe-dE4qbqSG4Rc.mft (raw, json)
Hash identifier: TqFMuimXk1tSXe6kcNnry0OpkR8XkXrAX0TlhTxUP1c=
Subject key identifier: 9A:67:40:AE:6F:CF:E7:3F:FA:91:8B:0E:03:BC:BC:EA:A5:F9:AB:F4
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Certificate issuer: /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial: 019D25F109DC36CDAB6A8891B5FCA7A5C068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
Manifest number: 17BE
Signing time: Wed 25 Mar 2026 17:00:46 +0000
Manifest this update: Wed 25 Mar 2026 17:00:46 +0000
Manifest next update: Thu 26 Mar 2026 17:00:46 +0000
Files and hashes: 1: 1vrDln6phZIn2fe-dE4qbqSG4Rc.crl (hash: L+TMQVRKWFLgJHG8np4Xt2iyN1NdeUwqhgzcQkV5vkQ=)
2: 58jG5a4etI7HLIjlMWRu8EZHcBI.roa (hash: h6AjzB3AJvNdpXgK77pPU3V49NDZDTYGpMVhHidUW8I=)
3: 9rQtcYniJqaTmpf5xB6cfsXG52I.roa (hash: du7a+9+coel4o3rj5T2HDR19krlEKiSzpeQoq4pnzXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:09:dc:36:cd:ab:6a:88:91:b5:fc:a7:a5:c0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Validity
Not Before: Mar 25 17:00:46 2026 GMT
Not After : Mar 26 17:00:46 2026 GMT
Subject: CN=9a6740ae6fcfe73ffa918b0e03bcbceaa5f9abf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:af:a0:a0:8a:f3:8f:af:21:d1:0e:4d:b9:45:
fa:47:7c:8c:0a:70:71:22:a5:20:e7:80:fb:e7:60:
a8:69:b1:38:b2:30:c3:55:d6:db:66:46:3c:7e:cd:
0b:3a:3d:cf:5c:7e:84:34:c0:4e:1a:69:d6:63:70:
cc:ea:5b:b5:30:83:2e:61:5c:bd:07:d5:a4:47:47:
57:0e:8e:b7:1e:42:46:3a:af:a7:07:30:c7:03:33:
0e:06:ae:d2:12:1a:da:cd:33:f1:f6:50:06:9c:f1:
ba:68:a9:d8:30:58:66:00:7c:be:d9:16:b8:c8:0c:
56:07:db:a1:b0:58:6b:3e:f1:2c:74:93:c1:4e:b9:
38:5b:0c:9b:dc:3a:9c:7d:3a:73:dc:fb:2c:5f:63:
db:8a:57:ef:33:43:18:7c:55:c1:8c:0b:01:4d:f8:
2e:a8:f7:ad:ca:e7:56:bb:fe:f4:28:f1:02:15:a0:
96:08:da:67:df:d9:18:c8:30:5d:bf:aa:41:26:cd:
be:68:7b:7d:f0:9b:20:58:2c:c2:c2:b8:7b:3b:de:
b8:ac:92:53:17:81:12:c4:39:9e:8d:9b:37:1d:f1:
85:2b:c6:6e:3d:71:23:61:87:e4:29:46:c5:1a:6b:
5d:7b:9e:89:3c:23:6b:0c:a0:e4:47:ec:0a:6b:58:
c4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:67:40:AE:6F:CF:E7:3F:FA:91:8B:0E:03:BC:BC:EA:A5:F9:AB:F4
X509v3 Authority Key Identifier:
keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:eb:2f:52:7f:84:73:53:93:3e:f8:f5:50:f3:77:a2:13:8d:
70:22:8c:32:29:b4:8f:ed:5c:47:8e:15:fe:c6:87:16:1a:12:
1f:21:7b:4a:e4:ab:73:d0:5b:3a:7c:4c:8e:4c:c1:87:d3:48:
ef:d0:8a:ed:a6:12:c5:57:d6:b8:6c:c1:5a:5b:0f:11:b8:3a:
09:aa:a8:ae:10:20:ef:08:c3:c4:99:79:1a:7f:51:00:f3:e6:
a5:88:af:78:ea:49:88:97:79:41:3f:ce:23:33:fa:71:ef:26:
c1:50:12:db:7f:c3:ac:08:dc:96:e3:d2:d6:a0:84:a8:92:82:
55:6a:dc:72:54:1c:3b:24:2e:8c:c4:d7:fc:b5:c4:08:77:aa:
70:f7:8a:a3:92:60:30:44:72:47:4e:f8:ec:bd:a6:59:91:8f:
a8:18:98:80:57:db:33:c9:4d:e8:6a:52:1d:dd:ce:3e:11:9f:
53:f4:80:02:ec:ae:24:e5:55:1b:84:e8:20:a8:b1:fb:73:8c:
41:ad:ed:f1:dd:1b:f6:ae:bf:5a:6b:e7:af:c9:99:20:ef:37:
a3:5f:a3:51:35:28:7e:f9:07:ac:a3:16:49:35:2c:15:ff:ad:
57:25:10:fb:22:cf:cf:b7:7f:4a:7b:87:2f:fa:39:db:2c:8b:
d3:d5:ab:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:51:00 2026 by rpki-client