Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
File: ppv5fceDSX88N716huWZSs7ngbA.mft (raw, json)
Hash identifier: pKTwpqodTI6rJMlonBQ6XUt0kvPeQJUXZFiBcyolV3w=
Subject key identifier: 62:7A:6A:18:57:DB:99:75:B0:F3:AF:D2:9F:19:7C:D8:58:A8:F2:A8
Authority key identifier: A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
Certificate issuer: /CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Certificate serial: 019D3A54753A247A295B40CE5C154DA2A64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
Manifest number: 1288
Signing time: Sun 29 Mar 2026 16:01:46 +0000
Manifest this update: Sun 29 Mar 2026 16:01:46 +0000
Manifest next update: Mon 30 Mar 2026 16:01:46 +0000
Files and hashes: 1: ppv5fceDSX88N716huWZSs7ngbA.crl (hash: pZ3qTe+Mz5Tc0CDi/wa6hvWk68mhr7GNQFNKNJRvF1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:75:3a:24:7a:29:5b:40:ce:5c:15:4d:a2:a6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Validity
Not Before: Mar 29 16:01:46 2026 GMT
Not After : Mar 30 16:01:46 2026 GMT
Subject: CN=627a6a1857db9975b0f3afd29f197cd858a8f2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:b9:e7:2b:00:19:ab:87:b1:16:36:18:40:
6d:fa:17:b3:5e:e1:cb:38:80:ac:11:85:41:bb:dd:
72:45:00:c2:59:13:be:2b:03:4f:73:9c:21:db:b1:
1f:9e:56:cd:69:20:0c:79:9f:ec:8f:be:c7:d7:9d:
c7:3c:02:c2:5c:18:06:a7:7a:0c:10:5c:25:43:32:
ff:5c:11:64:d2:6f:95:4f:a1:0b:bc:80:c4:87:f8:
1f:e7:d5:c5:6c:95:c8:bf:48:4f:3c:d2:c2:d5:cb:
42:db:af:11:0b:53:eb:3a:52:d1:ea:d4:46:88:4d:
5b:89:8b:3b:e6:ab:1b:53:ae:97:d2:37:31:97:77:
8f:a9:5b:02:cf:76:35:31:2e:22:2a:9a:dc:ec:73:
31:dd:18:db:f3:e4:03:ee:71:7c:ff:c0:ce:1c:c4:
0c:7b:cc:02:17:c2:e0:43:df:95:82:ff:b3:f4:7d:
e3:5a:a2:d6:cd:72:59:a6:4f:9e:50:87:c1:17:d9:
c5:f5:f2:19:f2:af:7f:b0:9a:c5:73:f0:9f:c2:d4:
b8:76:92:c5:b7:9a:cc:96:79:a9:24:b6:a5:8a:4a:
3d:51:5f:69:dd:78:a3:d0:de:e2:8f:37:48:e7:61:
46:ed:b6:74:95:78:88:12:ef:ec:0e:93:99:65:bb:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7A:6A:18:57:DB:99:75:B0:F3:AF:D2:9F:19:7C:D8:58:A8:F2:A8
X509v3 Authority Key Identifier:
keyid:A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:52:67:b5:78:33:3b:ae:fd:7d:08:61:48:d3:43:4e:6e:a2:
40:ab:eb:f0:ea:01:42:d2:29:e8:af:6c:c8:83:36:d7:79:bf:
cc:81:2c:fc:06:fc:25:af:fb:27:4f:c4:e2:8d:13:80:09:7b:
ac:45:aa:03:7f:42:88:95:ca:8c:c1:b3:4b:3d:1e:62:50:bc:
80:b0:55:74:0b:dc:19:5d:d9:77:9b:ca:f8:30:79:25:92:ab:
42:c4:be:15:ef:7a:1b:19:fc:05:62:88:fd:7d:18:d5:46:6c:
71:91:34:2a:ed:00:25:e1:b0:35:d4:a6:e4:d9:dc:33:50:c9:
78:fb:a4:0d:7b:ee:92:de:2d:da:12:4a:a2:eb:2a:c9:50:17:
93:79:5f:14:2d:63:4c:f3:52:b7:e4:c9:eb:c3:76:9d:cc:49:
35:fa:6f:2e:d8:04:f1:57:8c:eb:44:b5:fb:ac:08:fa:b1:ca:
e6:5d:40:16:97:22:27:3b:ab:ce:5c:fc:81:c9:62:fd:66:a0:
d7:25:8a:9a:e2:15:f2:5f:2d:a8:a6:80:c2:89:46:3d:0d:64:
3c:b5:dc:7b:5b:c2:c1:7c:9c:2e:47:03:ac:0b:95:74:64:d4:
db:2f:53:5e:e4:25:48:56:62:3b:18:59:18:ee:f4:00:27:ee:
fb:f5:aa:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VHU6JHopW0DOXBVNoqZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OWJmOTdkYzc4MzQ5N2YzYzM3YmQ3YTg2ZTU5OTRhY2Vl
NzgxYjAwHhcNMjYwMzI5MTYwMTQ2WhcNMjYwMzMwMTYwMTQ2WjAzMTEwLwYDVQQD
Eyg2MjdhNmExODU3ZGI5OTc1YjBmM2FmZDI5ZjE5N2NkODU4YThmMmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZC55ysAGauHsRY2GEBt+hezXuHL
OICsEYVBu91yRQDCWRO+KwNPc5wh27EfnlbNaSAMeZ/sj77H153HPALCXBgGp3oM
EFwlQzL/XBFk0m+VT6ELvIDEh/gf59XFbJXIv0hPPNLC1ctC268RC1PrOlLR6tRG
iE1biYs75qsbU66X0jcxl3ePqVsCz3Y1MS4iKprc7HMx3Rjb8+QD7nF8/8DOHMQM
e8wCF8LgQ9+Vgv+z9H3jWqLWzXJZpk+eUIfBF9nF9fIZ8q9/sJrFc/CfwtS4dpLF
t5rMlnmpJLaliko9UV9p3Xij0N7ijzdI52FG7bZ0lXiIEu/sDpOZZbtYgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJ6ahhX25l1sPOv0p8ZfNhYqPKoMB8GA1UdIwQY
MBaAFKab+X3Hg0l/PDe9eoblmUrO54GwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHB2NWZjZURTWDg4TjcxNmh1V1pTczduZ2JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85ZTIyYjgtNGViMS00ZDJmLWE4MDct
N2I5NGZiNDNiNjBhLzEvcHB2NWZjZURTWDg4TjcxNmh1V1pTczduZ2JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85ZTIyYjgtNGViMS00ZDJmLWE4MDctN2I5NGZiNDNiNjBh
LzEvcHB2NWZjZURTWDg4TjcxNmh1V1pTczduZ2JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1JntXgz
O679fQhhSNNDTm6iQKvr8OoBQtIp6K9syIM213m/zIEs/Ab8Ja/7J0/E4o0TgAl7
rEWqA39CiJXKjMGzSz0eYlC8gLBVdAvcGV3Zd5vK+DB5JZKrQsS+Fe96Gxn8BWKI
/X0Y1UZscZE0Ku0AJeGwNdSm5NncM1DJePukDXvukt4t2hJKousqyVAXk3lfFC1j
TPNSt+TJ68N2ncxJNfpvLtgE8VeM60S1+6wI+rHK5l1AFpciJzurzlz8gcli/Wag
1yWKmuIV8l8tqKaAwolGPQ1kPLXce1vCwXycLkcDrAuVdGTU2y9TXuQlSFZiOxhZ
GO70ACfu+/Wqfg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:57:52 2026 by rpki-client