Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
File: PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft (raw, json)
Hash identifier: FA6AtB9vWrjgSiHhvT4/odt74c1crcIu0sSmzthUKgg=
Subject key identifier: 92:55:96:6A:0E:74:E4:D0:CB:7A:36:A3:36:65:29:EB:78:DE:90:22
Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
Certificate issuer: /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Certificate serial: 019D28F257845963825D027FBF2E2A52E9F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 07:01:03 +0000
Manifest this update: Thu 26 Mar 2026 07:01:03 +0000
Manifest next update: Fri 27 Mar 2026 07:01:03 +0000
Files and hashes: 1: PAgTss81EypznIUSXUrAempw_so.roa (hash: hVAKVYVtH7pfRFO9nXZRlBkZwPvwRW2v9xDHqxcNeV0=)
2: PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl (hash: l4YlIOndQOp2SWG4WeAAY4X9avFGKwmgCYcKK0aZu4Y=)
3: g873udppqiGZfDfxEVPwS0fN2iE.roa (hash: vGYcXaCIiPom9FCy5Ogp8Jq2cO/kNZJXFstzgmVZSYM=)
4: o8OHfV95jFDGQMcKlS4Elzm403c.roa (hash: wX1Olvy8rFtI4rUY+LS6paVP5fazc6rWqyHgWeMMLFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:57:84:59:63:82:5d:02:7f:bf:2e:2a:52:e9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Validity
Not Before: Mar 26 07:01:03 2026 GMT
Not After : Mar 27 07:01:03 2026 GMT
Subject: CN=9255966a0e74e4d0cb7a36a3366529eb78de9022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:e6:d3:f3:ca:42:04:b6:4b:69:6d:5a:bc:
6e:08:8a:87:5a:37:cb:2b:01:9c:cf:e8:fc:15:22:
d1:02:0a:ae:d6:7c:93:85:06:b3:8f:82:96:25:fa:
c5:9d:4a:61:7c:62:58:04:34:a7:56:0c:41:4b:9d:
fb:5c:72:8a:a4:24:70:fd:c5:62:a7:10:15:ac:a3:
b3:19:b7:cd:11:39:9a:47:f3:df:26:77:81:7a:44:
08:a4:ce:9c:6c:ce:3f:28:43:42:7e:fa:e9:d2:10:
ca:cc:58:6c:bd:4b:5c:61:d1:3f:5c:fd:9b:f8:32:
33:12:f8:d5:2f:3c:e7:cf:3a:33:4b:bf:5d:16:75:
d2:ae:6c:67:4e:af:a8:c2:9c:a7:c2:65:0d:91:0f:
96:92:ae:b1:e1:fc:b2:d0:9b:c0:3a:19:49:8e:0a:
07:1b:ae:ae:94:d5:84:18:a6:95:24:3c:02:bb:b3:
4d:21:88:c4:30:8c:26:7b:2c:2c:cc:0f:e5:b5:9c:
fa:7b:66:e0:e7:08:d1:eb:e3:9b:e6:cb:31:26:27:
90:61:30:bc:3e:26:83:b5:c3:70:f3:fc:d9:f9:21:
5b:31:b7:f2:de:9a:7c:21:bf:82:88:d5:c2:4a:74:
84:41:d0:02:94:f6:18:a4:fd:bf:0f:53:c5:84:73:
be:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:55:96:6A:0E:74:E4:D0:CB:7A:36:A3:36:65:29:EB:78:DE:90:22
X509v3 Authority Key Identifier:
keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0c:a5:ac:d0:c5:c0:93:6e:3a:33:7c:9f:62:e5:93:b0:b4:
00:e3:d2:bd:de:ea:f0:1f:57:13:0b:8a:03:e2:50:f0:4e:37:
95:43:4e:2d:3a:84:65:3d:c2:71:00:cb:62:a2:1b:15:a6:42:
ba:62:db:5f:e4:ac:33:17:1c:0a:fc:9b:92:69:fe:ee:02:b7:
da:b7:dc:44:56:86:0d:e3:f5:4f:20:9a:1e:d0:67:1a:42:05:
b6:43:3e:53:f9:1a:ad:0a:6a:7a:93:08:7a:37:77:52:49:30:
84:8d:aa:1b:80:74:d5:d6:ae:9e:20:85:ea:67:7b:e8:8c:3b:
95:86:37:c1:d7:cd:4a:d9:88:f2:0a:28:e4:b6:00:77:b8:eb:
2f:11:7b:c7:7a:bb:41:2e:49:d0:81:be:b0:97:64:43:84:3a:
20:68:5f:bd:43:cb:b6:4d:c0:88:96:e0:04:d2:35:e5:1a:d5:
57:6c:15:c6:cf:f1:26:fb:2c:27:cf:df:33:73:6d:a4:e2:33:
36:c0:fd:13:51:25:ac:70:0d:ce:99:53:a8:be:be:a9:da:06:
34:8d:cd:83:e9:0f:84:4f:db:79:9b:ae:2c:88:93:fd:0e:e2:
d5:50:39:54:f4:61:06:3d:a2:ac:00:5f:32:66:67:fb:98:6b:
db:14:96:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:59 2026 by rpki-client