Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: C6nVcwO2bTX6X5VRkEgMFmaAiB1krqi6KQKFI6cPGVM=
Subject key identifier: ED:AB:4E:47:6B:51:E2:18:B2:7A:41:8F:82:C1:FF:02:32:36:27:00
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 019D273A9DF4F1470DA5069E3D92E92AABB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 23:00:46 +0000
Manifest this update: Wed 25 Mar 2026 23:00:46 +0000
Manifest next update: Thu 26 Mar 2026 23:00:46 +0000
Files and hashes: 1: 1iRbLYf4C0y3oJ3-4xIANjl72wA.roa (hash: UG6S1kmkOsd5y0L7phKRaWuOG6F5o7BKD1/4AyWvM5A=)
2: JjyvVDVovIRDvh2WAPN4qcYKbB8.roa (hash: YWVGU0nc40f+duH6QOCC8OFDRM3GdOHIxFuAUo2EzwY=)
3: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: iuwP8+W99UYo5nyzMTofA2bVAA0YOSQQwYM0KF1JlYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:9d:f4:f1:47:0d:a5:06:9e:3d:92:e9:2a:ab:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Mar 25 23:00:46 2026 GMT
Not After : Mar 26 23:00:46 2026 GMT
Subject: CN=edab4e476b51e218b27a418f82c1ff0232362700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:5f:40:87:0c:13:73:66:5b:5b:3e:66:e9:
90:a2:41:54:ba:6a:df:31:06:cf:9b:1f:1b:a4:f6:
c8:72:a3:07:41:b7:1e:b1:4c:fa:c0:f4:0b:cc:95:
4c:94:4e:79:61:41:8b:b7:02:43:7d:ea:89:e5:8a:
38:e9:61:ea:7e:7b:d7:96:04:7c:04:65:58:51:f8:
20:2a:4e:04:61:40:52:17:93:4d:5a:66:d3:c0:b9:
94:4f:8f:0e:69:3d:c8:9c:44:49:d1:e4:1a:fc:42:
18:64:06:0d:b9:f0:05:08:77:c3:e2:dd:d1:dd:04:
d7:3f:1c:d2:09:34:39:d6:e7:71:11:32:9a:0d:27:
e4:4f:a0:53:a8:e2:86:1d:90:e0:0c:e3:8f:67:a0:
f0:f8:46:ca:2f:39:b6:e4:0f:e0:fe:4a:db:88:36:
4b:1a:a4:9e:03:0b:52:59:39:5b:b0:2d:8c:60:33:
da:4e:b9:2a:cc:21:b7:c7:05:fb:0d:1c:00:86:58:
14:ca:40:62:10:7d:ee:28:a7:59:a4:97:ad:9c:7c:
28:8d:2c:e7:d7:1e:3d:a5:6a:5c:02:85:9b:50:92:
6d:4f:be:05:e0:72:fa:01:e9:85:67:2b:c0:df:6e:
d6:9a:aa:f3:63:57:e7:25:07:08:4f:26:eb:a0:4b:
ba:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AB:4E:47:6B:51:E2:18:B2:7A:41:8F:82:C1:FF:02:32:36:27:00
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:51:b0:83:71:57:15:2e:39:69:47:f9:2d:c6:b5:bc:db:5d:
1a:d4:05:84:1e:34:0e:02:1d:0c:5a:ac:43:e6:53:89:2e:61:
5b:dc:5f:e7:35:e6:e8:c3:30:56:39:f2:4d:b5:0c:21:12:b3:
02:97:e5:cc:13:ed:2e:ea:50:42:59:c8:a1:a4:f2:05:a6:d9:
bf:38:b9:bb:a3:69:ac:de:0a:d7:f5:52:a7:a3:5d:49:60:d6:
1e:3b:be:39:ae:9e:68:b5:13:b3:b2:e8:d3:b7:aa:ab:fe:ad:
d2:d1:54:49:90:6c:b7:21:bb:70:63:be:f2:34:ba:32:72:74:
87:32:51:a6:e7:66:24:35:ca:a1:61:b5:9a:5c:84:f4:b1:60:
9b:2e:40:c6:d6:67:dc:92:1d:0e:bf:bf:7b:ee:c5:39:11:d5:
8e:d0:cc:b2:4f:1f:18:67:9f:cb:c6:b2:7a:35:a7:40:a8:ca:
ab:d9:00:d5:22:fd:07:83:ae:e6:17:c4:54:db:e2:cd:8c:17:
b9:25:0a:4d:a2:02:b2:32:9f:b4:65:d4:d1:ab:d7:00:d7:8f:
2d:90:c1:c6:2c:a6:48:0b:a6:36:e2:76:6d:1d:5c:c9:bb:ed:
ae:eb:80:b4:8e:87:e0:55:d5:a6:3b:dd:62:ff:1a:e3:30:19:
da:a7:6a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:47 2026 by rpki-client