Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json)
Hash identifier: bhDgoVMGh+1MCBA4Wzc1TPYdEzCfKxn8oINXRv5lcac=
Subject key identifier: C7:7C:59:49:A5:ED:00:82:58:33:1E:38:6D:AA:8F:15:42:77:C9:73
Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6
Certificate serial: 019CE5C913D6D41EE46232D2873554EA3763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
Manifest number: 01FF
Signing time: Fri 13 Mar 2026 06:01:25 +0000
Manifest this update: Fri 13 Mar 2026 06:01:25 +0000
Manifest next update: Sat 14 Mar 2026 06:01:25 +0000
Files and hashes: 1: 1I_-5VjCM2_OFHsmfVkBJKpEPdw.roa (hash: 7CWmUvdasbnykf0DjiU7gRJL7RLpAGl2V8qgnv1X5p8=)
2: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: QIZQxCpxmECluzgHN/xieyPoB+atYHmWrsG84MHJDyQ=)
3: sIQZHyrMKrx0aGLhGaxyLwG43WI.roa (hash: 1DHs9q3U0NDHbbr1v8UvKlsFj4sQc1jDRLQRmJtbDIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:13:d6:d4:1e:e4:62:32:d2:87:35:54:ea:37:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6
Validity
Not Before: Mar 13 06:01:25 2026 GMT
Not After : Mar 14 06:01:25 2026 GMT
Subject: CN=c77c5949a5ed008258331e386daa8f154277c973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:0c:43:ac:55:6b:52:41:2e:cf:4e:27:7f:
ab:8a:8f:cb:bb:39:d6:d5:41:69:79:38:8f:b2:c2:
97:8c:e8:4b:a0:1a:fe:dc:49:d9:35:57:45:b0:bc:
76:ed:64:d0:50:11:49:7a:83:62:aa:ce:58:e4:cb:
d6:fc:5f:33:8c:8f:89:b1:7a:74:52:30:d7:6f:1f:
e8:af:5a:11:4e:55:fc:f0:68:6b:a4:b1:86:bf:1b:
04:97:9f:4a:bc:62:48:5e:af:68:89:20:79:96:07:
a4:60:b1:29:71:9b:6a:ec:8e:89:88:57:b5:13:3c:
99:41:4d:3f:d1:d2:f5:94:64:81:cc:4b:db:ce:85:
1e:55:2d:d4:a8:6d:b2:e7:96:1f:f6:40:58:6a:7d:
2c:98:2d:15:b0:9d:13:da:6e:54:0d:21:fe:1b:e5:
a9:7c:70:c4:54:3c:f3:6f:6f:62:19:18:32:72:82:
b4:c0:c6:8b:56:68:d0:e6:55:6a:c4:ce:68:23:7a:
36:a4:7e:e3:d2:d9:75:b7:27:2c:9d:df:93:5a:35:
2e:b6:12:2f:ad:18:63:57:75:a0:a8:87:79:ce:9b:
ad:f5:04:46:b4:a0:79:21:cc:ca:11:c5:c4:59:21:
18:6e:73:60:9b:62:a9:45:9d:dd:b3:eb:9a:83:c2:
be:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7C:59:49:A5:ED:00:82:58:33:1E:38:6D:AA:8F:15:42:77:C9:73
X509v3 Authority Key Identifier:
keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:78:ac:56:ae:14:97:ed:d8:f2:f6:18:22:50:92:ab:2a:0d:
62:b1:68:e3:9a:47:49:1c:61:35:ca:33:bf:62:ae:1b:10:9e:
39:e9:85:56:c6:fd:2e:32:1b:6d:3f:d7:c9:ac:45:7f:a8:52:
54:e6:63:ab:f7:d1:50:41:f0:ef:ab:1a:fd:0a:4d:29:be:2f:
6b:42:90:82:da:f5:f2:c0:12:3f:fd:ca:63:da:b0:5b:5f:c0:
7a:93:6c:84:aa:f9:bf:84:71:6e:62:0e:bc:c4:60:0c:d4:16:
b5:6e:ae:bd:06:7a:57:2d:a2:89:57:bd:03:58:ca:78:6d:f5:
64:6d:4a:71:67:98:05:81:a5:c1:e0:40:5a:e6:f3:64:79:7b:
56:a1:eb:5f:92:19:40:d3:f0:2b:b3:55:d0:6c:1a:0c:ca:52:
d9:cd:47:36:58:b5:a8:4d:1f:c0:c3:4f:d5:89:4a:af:2f:17:
f9:f5:42:33:d7:11:dc:f9:47:05:00:9b:ff:a1:af:1c:2f:84:
a6:db:ed:a1:3a:9e:b9:1c:01:97:58:73:72:0b:f2:69:f9:58:
86:db:ee:e2:a6:d0:2b:88:b4:6f:cf:a6:34:b5:d6:48:b6:3d:
12:72:4a:20:7e:6a:5b:ed:70:dc:fa:7d:9f:a1:7e:d5:2c:8e:
ee:30:23:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:32:15 2026 by rpki-client