Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
File: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft (raw, json)
Hash identifier: eEqJMKyi616+Gh+P73zJB9Y6wUPTU0tV3XTUjOmNWFE=
Subject key identifier: 77:29:C4:1A:3C:DD:FE:8D:8F:36:3E:45:A5:41:47:88:EB:B8:EE:AC
Authority key identifier: D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
Certificate issuer: /CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Certificate serial: 019D284DB560BC068CBD19D0824E4A1B947F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
Manifest number: 0FC1
Signing time: Thu 26 Mar 2026 04:01:14 +0000
Manifest this update: Thu 26 Mar 2026 04:01:14 +0000
Manifest next update: Fri 27 Mar 2026 04:01:14 +0000
Files and hashes: 1: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl (hash: 3qkusbFYynC61u1SAE6xB8kYb5MF+HRjaQ5zuCiJgGw=)
2: IW5RRSc1tcxUkpep-k7tW7PM6IA.roa (hash: +vPce20uhSaSDtSFtXFa/l0cGONxsb2HzBtheECvy6k=)
3: ovfxiPaVz0-xay5q5Zj6zS69Ic8.roa (hash: W4GWKNzxx0OFecL5XCcFwfyUup5/r9meKHE/Pk1WXCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:b5:60:bc:06:8c:bd:19:d0:82:4e:4a:1b:94:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Validity
Not Before: Mar 26 04:01:14 2026 GMT
Not After : Mar 27 04:01:14 2026 GMT
Subject: CN=7729c41a3cddfe8d8f363e45a5414788ebb8eeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:ee:71:16:14:44:bd:af:40:9b:06:2e:c6:
ce:45:18:a7:85:ca:0d:db:2b:6a:ba:da:6f:f2:22:
32:2d:95:03:7f:62:ea:07:c9:74:30:a0:0e:29:93:
5d:1f:dd:85:bb:b0:4c:38:92:82:bb:73:57:6a:8f:
be:bd:e9:32:9c:3d:f8:bd:b1:c7:73:ed:2a:e0:f5:
82:d3:b5:49:80:c1:ae:b4:1f:32:fd:68:63:8b:b7:
b1:75:ac:02:c0:30:59:1e:96:f9:9c:36:f5:c0:e0:
40:c8:e5:fa:7d:ce:ad:d6:c0:5c:34:f6:35:6c:b2:
b4:d0:44:70:1a:0f:07:be:95:6c:bb:07:44:55:c6:
48:eb:5f:3e:4d:02:a1:05:a7:47:28:a8:13:52:14:
ff:7c:a0:ff:d4:f2:b4:30:a4:e8:49:0c:0f:4a:e8:
ec:f2:83:bc:ea:7b:0c:9b:4e:dd:cb:56:85:7f:93:
af:99:77:83:44:f6:e9:6c:f6:2d:92:a9:a1:04:c7:
61:c8:9e:46:62:57:6f:26:0e:61:18:c9:b3:31:7b:
8a:51:83:87:ab:6d:9f:85:a4:63:64:e5:0c:13:4a:
72:25:5b:39:11:1c:78:97:7f:c8:36:57:80:c5:0b:
3a:8f:65:90:e4:29:e8:93:c1:aa:e3:5f:0e:e1:d0:
89:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:29:C4:1A:3C:DD:FE:8D:8F:36:3E:45:A5:41:47:88:EB:B8:EE:AC
X509v3 Authority Key Identifier:
keyid:D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9f:ec:c4:db:0b:e3:b5:27:46:4a:48:2b:a0:6b:e2:78:9f:
a8:79:85:71:d7:90:1b:4a:ab:f5:21:44:2e:09:3a:ea:77:73:
33:b9:15:ab:b9:7c:32:cc:23:0b:ca:59:d8:c4:66:af:f4:fe:
3c:43:f3:73:a2:93:98:2a:60:72:64:7e:04:47:ff:20:3a:18:
41:3b:eb:09:ba:8e:40:2b:1b:87:f6:ef:2a:d8:19:fa:87:7e:
a0:9e:ed:18:1e:79:63:e9:57:41:e4:d1:76:c4:0e:a4:49:20:
fb:91:be:b5:4d:f2:7e:6d:a0:c8:59:c3:c4:2d:7f:18:52:89:
59:14:6a:e2:b3:3b:b7:fb:66:60:7d:57:09:f1:f7:1d:63:9e:
e4:4a:a7:5e:33:fb:cd:74:a4:51:fb:ea:29:38:3a:d6:74:e8:
2c:aa:6d:59:39:7c:27:26:9e:93:31:81:09:74:d0:27:6d:50:
17:5f:d5:6d:1a:ff:4d:0d:c1:be:87:b9:4f:cd:5d:a9:52:0c:
70:2b:d7:54:5b:45:47:d1:96:6a:86:07:74:56:1c:e7:48:e2:
0b:3d:ba:b9:aa:7f:33:ba:83:d5:4b:2e:bf:a1:19:66:04:c4:
d4:2b:8d:ce:2a:be:97:53:6e:cb:a1:c8:3d:59:2a:16:9b:56:
79:4f:d3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:07:02 2026 by rpki-client