Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json)
Hash identifier: 0d3zbhaKrIcHJG39L37/sZt2nQURfMV6Y/8axwioeLs=
Subject key identifier: EA:80:57:4D:B1:DC:A1:BB:A3:D9:A0:57:3F:C8:47:5A:E8:4F:CB:87
Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6
Certificate serial: 01A0051504BD741E4D03D7187D084CC1834B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
Manifest number: 039D
Signing time: Sat 15 Aug 2026 11:00:58 +0000
Manifest this update: Sat 15 Aug 2026 11:00:58 +0000
Manifest next update: Sun 16 Aug 2026 11:00:58 +0000
Files and hashes: 1: jYQejTs_VCB1cpCr7qrPeVI5_VI.roa (hash: RuEfXGQ8FdYs+It13SdSHwiFRFM5ZGec+HI06Kuq/Ik=)
2: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: inje9MVAepT4nxuGFezIykK27V6bqYrYPT2E05+pPKI=)
3: sIQZHyrMKrx0aGLhGaxyLwG43WI.roa (hash: 1DHs9q3U0NDHbbr1v8UvKlsFj4sQc1jDRLQRmJtbDIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:05:15:04:bd:74:1e:4d:03:d7:18:7d:08:4c:c1:83:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6
Validity
Not Before: Aug 15 11:00:58 2026 GMT
Not After : Aug 16 11:00:58 2026 GMT
Subject: CN=ea80574db1dca1bba3d9a0573fc8475ae84fcb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9c:82:de:fb:b8:ca:3b:8a:67:ee:16:d7:a5:
af:f2:ba:88:23:43:07:7f:ad:f1:65:87:28:c7:2f:
4b:33:6b:14:36:15:5f:19:e3:1a:d5:1d:0f:80:d9:
89:fa:4c:d3:1b:d8:d6:22:84:47:70:3b:10:da:5e:
e4:89:ab:f3:1d:66:55:f5:db:49:b4:73:5a:f3:36:
77:e8:78:24:c2:ea:52:0f:f8:dd:c1:ca:73:26:3c:
bf:57:a6:72:a4:21:56:71:f9:b5:cb:86:c3:57:3a:
13:3b:2f:9b:44:f5:6a:72:5f:f1:f3:df:2d:d7:0c:
a0:88:17:1e:c6:5c:bc:51:69:27:cd:8e:0e:e7:97:
c2:69:52:db:d4:57:5a:e2:8b:31:77:e2:86:45:df:
86:70:e9:41:ae:84:37:d0:8d:9f:04:05:fc:e1:17:
aa:05:bc:f9:d8:52:68:26:bd:a6:55:c8:f5:54:a4:
0c:da:5b:1a:9d:0a:0a:f7:2b:49:5e:0f:2e:57:d1:
f2:c8:c2:af:15:d4:81:4b:04:c4:9c:0f:0e:d5:6b:
20:cc:35:67:f3:67:91:ff:ae:bf:53:5b:73:92:95:
1e:98:24:b2:d4:5b:c2:a9:82:4b:80:3e:95:6d:e9:
3c:13:e8:da:53:48:66:6c:c0:24:76:9b:87:fe:15:
f5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:80:57:4D:B1:DC:A1:BB:A3:D9:A0:57:3F:C8:47:5A:E8:4F:CB:87
X509v3 Authority Key Identifier:
keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b8:64:c0:be:ff:44:f2:6d:83:b5:d2:4d:6b:72:56:09:ae:
7f:34:13:4c:b0:a0:49:c2:94:6e:39:38:81:e6:5a:22:b5:cb:
c0:2f:b0:18:64:0b:23:63:9e:bc:f7:f5:df:e9:ed:14:e6:7e:
21:cf:65:da:fa:ef:c2:7f:f5:0c:6e:29:77:33:6f:70:49:5b:
95:16:f9:ec:39:05:37:a5:8f:c2:a1:77:4a:b8:aa:8b:6a:7a:
1e:b9:cb:35:53:7c:3c:41:53:b2:2d:73:6b:41:67:7a:5c:77:
eb:54:ff:61:d4:fa:9c:d2:83:43:9f:0e:34:14:a9:59:1b:f5:
0e:48:37:cc:1e:6b:4d:2d:c2:77:77:38:3f:b9:ab:cb:17:d7:
2c:28:91:8d:5d:50:e5:39:db:18:09:2d:bb:35:d1:b6:e5:19:
f1:8c:c6:1e:5c:42:9d:8e:87:ad:26:c3:3b:5a:0e:94:78:69:
93:29:02:2d:57:3c:6d:45:a7:2a:94:24:c0:d4:70:ae:5b:00:
ff:37:95:d2:9f:10:fc:42:2c:1f:02:43:0b:0a:66:a4:f6:2a:
80:a0:0b:16:63:f2:0f:d9:12:1d:96:2b:0c:d5:ec:9d:8d:62:
ac:f4:d6:90:6c:1a:34:88:01:82:b9:c4:de:14:46:06:05:b0:
9c:f7:7c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 13:55:46 2026 by rpki-client