Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
File: pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json)
Hash identifier: 4YQt4jMcjvygvrm/cVw4udfB1BsA/9kS7gEq4YmCUjw=
Subject key identifier: 3F:70:76:BD:83:57:09:07:62:31:3C:46:1D:40:CC:61:B6:45:B8:96
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Certificate issuer: /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial: 019D2FD04334E22932AA619AA93741D04B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
Manifest number: 0B15
Signing time: Fri 27 Mar 2026 15:01:11 +0000
Manifest this update: Fri 27 Mar 2026 15:01:11 +0000
Manifest next update: Sat 28 Mar 2026 15:01:11 +0000
Files and hashes: 1: 1-Ea5LT1K8F6WUZhY_U_lKnZaXcY.roa (hash: x7c/Qt2ZfBYPaYf0LxG+u+LvENTrFJB+iJAEDKpvDxM=)
2: LC9OsZPmFyHE-17gPISnP-rIekM.roa (hash: aLAimHcWzq8XoGgwDQKHrZcmH3h9ns5QyipqRfZdJDQ=)
3: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: sXtmI87LEt0OJiuiQqs2EPCsCM0Ojxft8SKxPJAtlwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:d0:43:34:e2:29:32:aa:61:9a:a9:37:41:d0:4b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Validity
Not Before: Mar 27 15:01:11 2026 GMT
Not After : Mar 28 15:01:11 2026 GMT
Subject: CN=3f7076bd8357090762313c461d40cc61b645b896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:bd:79:83:44:27:2c:52:f0:4a:34:ae:b6:
b4:9c:f6:60:59:99:ff:b9:2f:77:eb:63:d8:fd:b4:
1e:e0:8b:ac:04:7b:63:15:ae:66:b0:3f:7d:c6:8a:
c5:42:48:7c:86:a0:a2:8a:a5:b0:3e:ee:14:5d:68:
5e:7b:96:20:37:36:f2:48:5f:fa:2e:6d:55:81:b1:
3f:b7:19:18:8d:2c:8b:6f:8e:a3:49:cc:cf:85:f8:
41:26:e8:d0:bd:33:13:cd:9f:75:29:56:bd:be:94:
89:42:5b:a8:00:28:25:09:02:69:d4:ed:e8:7d:08:
f1:67:4b:51:2d:fa:73:fc:a9:1e:4b:2a:1e:9b:40:
d1:fb:ca:a5:ae:06:07:8f:c4:c4:5d:94:d5:d5:df:
86:a8:41:91:51:b9:53:40:3c:ad:ba:7c:dc:6a:3a:
23:88:28:1e:b2:34:3a:83:e4:c2:dc:15:77:af:5f:
6e:fb:26:51:43:2a:14:10:ea:4d:96:24:08:d4:20:
34:29:14:fc:3f:48:00:a6:29:11:ad:1b:86:60:4b:
d6:4e:58:ce:17:87:79:ba:31:c3:e4:5e:c2:ff:e5:
20:8a:a1:48:eb:f8:76:26:a3:98:af:6d:98:72:f7:
a4:ab:80:71:46:4a:c7:8c:22:33:44:53:f2:35:4c:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:70:76:BD:83:57:09:07:62:31:3C:46:1D:40:CC:61:B6:45:B8:96
X509v3 Authority Key Identifier:
keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:43:59:54:02:34:1e:68:b7:42:29:3d:13:74:4d:48:12:ed:
83:24:28:b7:ca:cb:97:00:ca:6e:6e:ee:7e:c3:fb:54:af:57:
d7:3f:d9:59:4f:29:29:39:6f:20:5b:2d:6c:d6:b0:00:4c:95:
61:4d:81:e7:5d:7e:21:41:71:28:4f:5f:d3:6e:aa:5a:de:2a:
42:4b:48:27:ff:75:b8:8f:c7:72:14:b9:bb:cc:4b:76:5a:11:
7f:14:63:a2:83:81:45:d2:48:d4:b1:16:1b:7b:d7:ef:be:50:
13:6b:f7:b5:44:2d:f0:b9:97:35:0e:a4:cb:99:ec:9b:90:75:
2e:8c:77:a4:ad:22:44:bb:f5:39:de:e0:ae:45:6c:84:3a:7d:
dc:2e:39:8a:ab:bf:f2:41:53:d3:96:51:f4:35:83:01:23:12:
d8:b2:32:e0:98:32:50:38:75:15:57:b4:c4:fd:13:92:a0:06:
ae:8d:84:fc:f2:0a:12:a0:99:d4:fb:1a:5c:9e:fd:0a:a8:0a:
82:82:42:8a:44:22:ad:6c:56:2a:e6:43:94:56:08:5c:80:26:
b6:c8:cf:4d:95:51:11:14:5f:58:33:04:46:3b:36:7a:a8:4e:
54:72:20:46:89:36:10:1c:ce:b0:c7:51:8a:1a:cf:64:13:9a:
a4:f5:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 21:16:20 2026 by rpki-client