Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
File: pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json)
Hash identifier: 3AP3hvghO7ECqPauZjp8+Z6hIryt1LpUxfw5LPNgWvM=
Subject key identifier: 63:E8:E1:89:EC:18:B2:23:C9:EB:EE:93:97:79:06:17:95:4B:E6:5E
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Certificate issuer: /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial: 01A0D4944BC2E53DE49DAF8BA7FD61D1F3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
Manifest number: 0CF8
Signing time: Thu 24 Sep 2026 18:01:23 +0000
Manifest this update: Thu 24 Sep 2026 18:01:23 +0000
Manifest next update: Fri 25 Sep 2026 18:01:23 +0000
Files and hashes: 1: 1-Ea5LT1K8F6WUZhY_U_lKnZaXcY.roa (hash: x7c/Qt2ZfBYPaYf0LxG+u+LvENTrFJB+iJAEDKpvDxM=)
2: LC9OsZPmFyHE-17gPISnP-rIekM.roa (hash: aLAimHcWzq8XoGgwDQKHrZcmH3h9ns5QyipqRfZdJDQ=)
3: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: oOGwnV0qN1yXR53K25R9eBQz0rBFpauymg+0+S2Y7XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:4b:c2:e5:3d:e4:9d:af:8b:a7:fd:61:d1:f3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Validity
Not Before: Sep 24 18:01:23 2026 GMT
Not After : Sep 25 18:01:23 2026 GMT
Subject: CN=63e8e189ec18b223c9ebee9397790617954be65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:89:aa:32:b1:37:58:9c:da:df:37:fa:1f:
9b:11:61:fc:7b:7b:f7:a8:e2:94:e4:3a:a3:3f:36:
b5:e4:1a:12:82:ff:fc:72:f0:1f:31:c3:28:43:9d:
63:7c:15:bc:a8:f9:e8:d3:93:fa:8c:51:32:c2:5b:
3d:34:c2:5c:1b:5f:ea:29:26:a1:7a:83:33:f0:6b:
57:20:bd:4e:61:5e:b5:cb:44:2e:97:3e:41:23:31:
ce:a0:bc:0e:da:42:a6:46:13:81:64:9d:b7:29:52:
17:d3:e8:3f:23:c3:46:72:a1:de:96:a8:66:fa:6d:
80:6d:d6:b4:7f:af:af:32:1e:4c:5b:c2:49:a3:57:
f5:f8:79:9a:fd:84:f9:b4:d3:65:99:b9:38:67:bc:
54:b5:7b:9f:2b:79:6d:86:30:49:28:47:8b:70:1e:
11:a2:6f:91:73:f8:d4:5a:ed:36:8a:7e:dd:03:ee:
e0:37:99:f4:9b:df:6d:9d:16:ef:cd:80:c9:c9:99:
40:68:f9:c6:36:41:34:62:be:8b:90:ed:04:f5:c3:
91:9b:c4:e7:ca:3c:2c:61:11:95:ca:5f:87:2f:4c:
76:e9:bc:90:78:26:d2:a2:89:99:52:e5:2d:d1:3a:
a0:87:f2:ea:6d:10:87:ca:10:c9:b4:2a:6f:96:2e:
5c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E8:E1:89:EC:18:B2:23:C9:EB:EE:93:97:79:06:17:95:4B:E6:5E
X509v3 Authority Key Identifier:
keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:02:6b:36:d5:2c:7b:d1:87:cc:16:d8:4c:6c:67:7b:9f:f8:
89:af:42:ff:60:c0:65:ea:52:d9:6d:34:62:e8:d6:15:ee:f5:
70:84:f2:e6:fa:31:8e:55:94:4b:ea:32:b8:e3:9b:28:c6:91:
f7:db:9f:cd:7b:17:5d:f2:af:c6:43:a8:ec:79:00:3d:b0:bd:
90:f9:5f:d6:48:24:4d:8b:28:37:20:08:ff:13:e7:04:04:99:
6d:31:94:73:e0:88:36:3b:18:be:0d:99:9a:cf:94:b0:e7:01:
c4:9c:f5:86:02:6d:f2:b6:a8:0e:7f:e9:6e:ee:cb:57:18:f6:
59:f0:40:f7:9b:3f:6a:02:7d:97:e7:22:2f:76:df:fc:e5:41:
de:9d:ab:23:bf:ed:2e:b3:ad:6d:e9:55:72:30:87:63:64:5c:
ab:57:a9:23:d4:a8:98:83:df:5b:fd:43:24:07:ac:56:7f:c2:
38:35:04:7c:85:2e:46:0b:38:d6:bc:78:b2:8d:49:8c:da:33:
ab:62:4a:3e:08:e0:c9:63:f5:9c:0a:91:1c:6f:25:68:6b:c2:
20:f8:82:fd:cc:d1:27:e3:0d:36:be:78:59:d2:e0:88:76:08:
2f:21:54:53:2e:92:84:fe:db:75:f2:16:59:38:f8:3e:ca:2d:
95:7a:42:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:26:16 2026 by rpki-client