Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json)
Hash identifier: 6qhgiV54kXv7NcD3dGOm+4gBil0lq2LVzzxXDxqIo1U=
Subject key identifier: 0B:64:B6:78:C4:5F:5C:10:9D:05:3F:BA:17:88:89:2C:F0:44:A9:F5
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial: 019D2A3C3B0333B744D9ABAE4769EBB0C058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 13:01:23 +0000
Manifest this update: Thu 26 Mar 2026 13:01:23 +0000
Manifest next update: Fri 27 Mar 2026 13:01:23 +0000
Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: qH6rJWOrG68ECR38zV6v8jLwmkNTz1fulLHBduaNXRU=)
2: DcQtZ-Dz8X8GVNr2BI2zUcr15D8.roa (hash: ARWpTu4Im5vDVchDP7TKrgojtqolrGKcQ5Qr0gDHopw=)
3: pBfnRaa4uT2fJ1J0F8evwtWCvCs.roa (hash: nmGG8AuPdljBBkNiuco4BAfX85eXAF9UrVPHWokUo4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:3b:03:33:b7:44:d9:ab:ae:47:69:eb:b0:c0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
Validity
Not Before: Mar 26 13:01:23 2026 GMT
Not After : Mar 27 13:01:23 2026 GMT
Subject: CN=0b64b678c45f5c109d053fba1788892cf044a9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1f:8f:66:c8:ba:3d:97:ac:6a:a2:f7:83:c3:
4a:e6:91:27:cb:6e:18:7d:36:bb:2a:97:25:6e:f9:
6d:37:71:bd:0f:28:2d:02:66:01:ae:fb:79:87:c6:
12:9d:6b:88:45:ad:ab:13:fe:a4:20:7d:5b:4f:6a:
41:8a:a3:6e:c1:7c:52:af:4f:b4:24:ec:a4:8d:ba:
c0:e2:46:05:d2:ba:0e:c2:39:04:72:69:44:0c:ae:
db:78:81:51:3b:4f:8b:78:1f:e4:8c:84:8c:19:4f:
dc:73:50:cd:2b:2f:9c:b6:eb:98:a1:1b:a5:fc:db:
db:28:20:62:55:9a:b0:c3:57:ef:57:d1:9d:84:6a:
0b:f6:f2:5b:77:fa:7b:85:9c:4b:55:62:4d:20:81:
3e:cb:83:37:33:8b:0d:0f:ab:1f:9d:16:81:cb:c1:
72:68:01:0f:69:9a:42:c6:ed:1f:c6:25:79:9c:07:
d6:9a:3b:3a:95:3a:f3:fa:6e:cf:d3:41:8e:7b:eb:
12:7a:47:60:27:53:e2:9e:e0:60:07:cb:53:ea:0a:
84:04:a9:db:bf:5b:f9:6a:35:32:26:39:11:34:01:
d5:3c:15:b1:c6:7d:33:4f:76:2a:22:9e:f6:3e:76:
0a:58:9c:43:94:0f:d8:80:09:9d:a5:bc:4f:d2:0f:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:64:B6:78:C4:5F:5C:10:9D:05:3F:BA:17:88:89:2C:F0:44:A9:F5
X509v3 Authority Key Identifier:
keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:56:fc:ac:1b:c1:3d:08:97:c9:96:e6:e0:17:72:21:8b:bf:
0c:37:5e:6a:2b:a4:08:30:c3:73:9b:fa:60:fb:b4:1f:10:f1:
50:37:e8:bb:c5:37:58:a2:7c:6b:8a:e9:18:6f:5d:50:ea:4e:
99:1c:6a:64:2c:31:8e:35:2b:dc:6d:a5:94:c1:07:fd:03:37:
8c:8c:4d:19:a8:09:62:42:74:bf:73:20:9d:f2:f3:8d:ff:ff:
79:3a:68:16:5a:37:b1:9c:f4:0a:9d:ac:57:40:64:d2:b8:82:
18:80:2e:8f:d9:15:e4:8f:16:5b:bd:8a:4b:64:37:cd:63:c5:
b3:f4:48:79:af:4a:db:dc:f3:69:c1:51:7c:92:47:65:f9:31:
f3:9b:6a:70:f4:54:7a:e3:99:cd:dc:e6:ea:a1:15:59:4d:4f:
39:e5:2f:c4:a7:09:70:07:77:e7:04:40:17:ba:c9:d8:65:fa:
a7:79:2b:97:9e:12:70:31:9e:0a:c9:dd:f5:db:69:0b:f0:26:
65:c1:9c:ac:58:05:0c:e7:dd:a5:1f:76:63:1a:26:ce:5b:4c:
4d:2c:25:00:ca:d2:73:33:ec:19:1e:90:17:ff:f4:f4:5c:4e:
f2:64:00:5c:83:91:60:0c:27:23:64:b5:d5:c5:db:33:25:5d:
8d:d8:1e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:38:06 2026 by rpki-client