Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
File: 1vvg67NTA0y7YyjrPo4_zTYLL7s.mft (raw, json)
Hash identifier: 12ovZlKSRgo8Jw/YIRT7Dr5KtFyfl+C7GuALJCCu61o=
Subject key identifier: 2D:98:CB:87:3B:C2:4E:5B:4D:AF:E5:F6:6B:F4:85:83:17:33:74:FD
Authority key identifier: D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
Certificate issuer: /CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Certificate serial: 019D25F129D4DD4FE4561B2B47E103604DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:00:55 +0000
Manifest this update: Wed 25 Mar 2026 17:00:55 +0000
Manifest next update: Thu 26 Mar 2026 17:00:55 +0000
Files and hashes: 1: 1vvg67NTA0y7YyjrPo4_zTYLL7s.crl (hash: /jkY30xNT4BkEE3idyDpnVffJpqYtqI6ixrwYIv3HQc=)
2: UYxV8QSgYZ229nA1vzJ1qGvwQXc.roa (hash: LcGONu3wOoaVH6EWybaw4+qxO61czSJNIoY1SzqQdQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:29:d4:dd:4f:e4:56:1b:2b:47:e1:03:60:4d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Validity
Not Before: Mar 25 17:00:55 2026 GMT
Not After : Mar 26 17:00:55 2026 GMT
Subject: CN=2d98cb873bc24e5b4dafe5f66bf48583173374fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:d3:4a:b6:6e:6c:60:fb:93:41:37:40:09:
7f:72:27:1b:5d:24:5c:91:9f:8e:3a:24:d8:2e:17:
5b:d6:2e:fd:89:62:7a:fd:48:92:9e:9a:05:ab:4e:
5d:8e:ce:8e:6c:7a:65:54:c6:39:42:df:0b:6f:1b:
27:aa:f7:a9:9e:0d:67:08:57:6c:7a:a7:6b:f2:c2:
7a:9d:90:6e:9f:ce:ea:af:17:c8:01:bd:83:5f:9a:
bf:3f:52:ca:d5:07:7c:08:ea:ad:0b:38:6c:c1:14:
a1:ec:74:73:af:7d:43:c2:43:01:e0:79:f2:10:69:
c8:04:75:e8:14:c1:1c:61:42:59:38:b1:bc:b8:47:
2c:c8:ee:f4:1e:c6:46:d2:60:0b:ec:41:74:b2:6b:
51:96:ba:8c:fd:0e:da:87:87:3e:1f:b7:f7:c0:da:
e1:6e:cb:96:3c:c1:4f:b6:cd:9e:fe:57:32:24:fa:
59:50:13:be:a9:7c:4f:7d:b6:fc:f7:a1:bd:1d:25:
e3:71:88:d3:69:90:b2:eb:3f:d2:ed:d2:63:60:11:
17:9b:0f:54:3d:9a:4c:32:77:eb:fe:d1:11:31:67:
f4:23:9f:f2:fd:3d:4d:6f:7a:d8:f0:7f:33:c5:d7:
0a:11:24:bf:08:53:57:c2:af:2d:9a:ea:b6:2a:45:
69:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:98:CB:87:3B:C2:4E:5B:4D:AF:E5:F6:6B:F4:85:83:17:33:74:FD
X509v3 Authority Key Identifier:
keyid:D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:77:68:9c:33:5b:f4:62:96:5c:c2:bf:f8:4c:c9:d9:ea:8e:
58:57:3d:9d:aa:b2:c2:df:9e:a7:5d:ee:68:88:0f:30:87:07:
e2:a7:1e:b7:40:32:c9:06:78:44:a5:48:7f:ef:a8:d9:4e:55:
70:9f:83:5c:cd:67:04:eb:50:9d:88:1f:3e:d0:5f:b7:26:e6:
c5:74:74:56:11:1c:8e:95:4d:85:24:16:35:5d:94:e8:5a:84:
06:4f:a7:5a:1e:1c:71:2f:e4:a9:bc:a1:28:31:62:54:aa:06:
8d:8a:a2:cf:fc:21:55:db:21:98:b7:88:66:62:4e:e8:77:6a:
fb:de:06:fd:e8:b8:b8:0f:ea:81:40:12:69:b2:dc:7b:90:94:
7e:6b:25:13:cf:b0:ad:8b:84:57:a7:bc:7b:89:05:e5:e3:f2:
0a:d7:5f:7a:e4:3c:1e:f9:81:1a:30:f2:18:43:7c:45:3b:51:
6b:b4:8e:38:77:3d:96:81:ab:b0:3f:3e:06:79:15:6a:53:57:
e5:f7:9d:35:61:9a:a1:86:b7:e0:da:0d:79:ac:fb:37:9b:35:
d5:a8:8e:fb:59:96:d2:4b:77:b8:de:dd:cc:3d:0f:23:53:cb:
c4:0c:53:e8:ce:80:e2:3f:d5:c3:00:30:9e:bb:c6:86:99:2c:
9f:a0:9c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:37 2026 by rpki-client