Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
File: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft (raw, json)
Hash identifier: 7lhSkmigIwQdCrEmuq6kqlzMkP1dLnqXL3eYpCARJMU=
Subject key identifier: A6:91:53:02:A7:A3:57:F8:E1:55:29:6D:B0:28:BE:94:56:1C:92:8F
Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
Certificate issuer: /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Certificate serial: 019D33754CBB816D492ECB7AE32C19A4F817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
Manifest number: 1890
Signing time: Sat 28 Mar 2026 08:00:18 +0000
Manifest this update: Sat 28 Mar 2026 08:00:18 +0000
Manifest next update: Sun 29 Mar 2026 08:00:18 +0000
Files and hashes: 1: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl (hash: 0HQ/uL+vE6RtgROZ5fa/2tv9mzDwzEFZXk9S85J5jP0=)
2: b9f-YG3sRgz3Cpq8Tydn4ruqPgI.roa (hash: qVB8vS/+30gYKUJ73KLGwaTJdr2WF4QKkFEP1LjTXyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:4c:bb:81:6d:49:2e:cb:7a:e3:2c:19:a4:f8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Validity
Not Before: Mar 28 08:00:18 2026 GMT
Not After : Mar 29 08:00:18 2026 GMT
Subject: CN=a6915302a7a357f8e155296db028be94561c928f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:c1:4d:b3:18:7d:bd:a0:a6:7b:a7:fe:fc:
e7:ab:ba:33:02:33:ab:44:96:42:3a:20:fa:c5:90:
e2:14:d3:ec:1c:08:d3:65:73:c1:ad:9d:fa:cc:fd:
f9:a2:f0:3a:4b:06:03:56:8f:89:fd:b0:dd:d0:32:
e7:50:41:5e:9f:e4:16:0c:8f:2c:80:31:58:f9:c4:
f9:56:7f:cd:48:9d:f8:4d:5a:95:2e:39:79:cb:e5:
4d:6b:50:a8:98:c1:49:59:e4:ab:18:2f:df:f2:ab:
26:20:79:44:26:f2:f7:34:b6:32:c8:67:11:9f:de:
6f:97:58:f0:83:68:71:d8:00:d7:b4:74:e2:5d:f4:
8f:6d:b3:bb:32:59:85:37:8a:fd:69:35:a4:e0:dc:
13:38:9d:6a:04:23:b6:34:af:24:28:4a:ce:ef:6d:
e7:39:bb:37:c0:92:64:04:11:90:de:df:5c:58:64:
74:b5:6a:dd:e1:d6:f1:f7:51:0d:e5:8a:f5:aa:6a:
fa:14:0d:7e:88:3a:2a:3b:bd:71:aa:ac:49:5e:f4:
06:89:7f:26:b5:a5:41:de:c0:43:cd:40:6e:b6:ef:
d2:83:f5:c9:75:c3:ca:bd:99:62:23:b9:31:80:ab:
54:14:18:a1:c3:27:b7:f2:a2:5a:dd:22:36:bd:1d:
bd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:91:53:02:A7:A3:57:F8:E1:55:29:6D:B0:28:BE:94:56:1C:92:8F
X509v3 Authority Key Identifier:
keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c2:d9:74:31:ef:b9:f3:5e:18:dc:a4:a1:20:52:4b:c8:58:
9b:8b:23:00:75:eb:11:50:9f:c0:2b:93:cf:77:b9:31:a9:e4:
9a:f5:bd:fd:50:08:97:f3:b8:e5:95:c0:f8:17:dd:fa:ad:99:
48:0b:27:29:d6:40:9e:f9:a8:43:d2:21:e0:8f:1e:81:45:62:
36:5f:0f:c4:e2:b5:8a:6e:dc:fd:ce:ba:b4:c4:96:c2:33:37:
e6:7b:47:c3:5e:2a:d6:e5:ab:be:7d:b0:2c:0c:be:2f:64:d8:
d0:4f:47:1f:39:53:d6:37:1f:2e:d9:1d:06:53:7e:9e:53:63:
ab:58:5a:c2:82:4f:dd:28:df:59:b3:20:a3:94:69:9f:58:ef:
44:7d:40:a0:a2:bc:41:24:e5:52:29:be:b1:a8:50:49:b3:ca:
24:d0:bd:6a:95:b8:c9:f8:4d:77:c2:93:0b:72:fe:c9:3c:be:
76:de:b6:ab:c8:03:3a:58:f9:7c:3e:96:d0:c0:bc:d4:73:c7:
cf:41:f5:e0:bd:8c:1d:99:79:31:de:bc:68:f4:35:22:c5:0d:
73:19:c6:99:9a:48:e2:b6:fa:b9:12:ba:df:13:1c:d5:5c:f4:
a1:b1:f5:34:e6:21:bf:f1:cd:39:2c:06:08:07:be:ea:e7:20:
fe:1a:3c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:21 2026 by rpki-client