Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json)
Hash identifier: DNmrpgmStKaL8bfPG1tgZwwNO8fCCTfZE8kXE3Rb/Og=
Subject key identifier: 56:52:6E:1E:56:16:01:52:75:93:A6:03:04:65:E4:FD:B9:61:44:58
Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6
Certificate serial: 019DD72F073280BC6BB1C4578B0DC41E7EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
Manifest number: 027C
Signing time: Wed 29 Apr 2026 03:01:16 +0000
Manifest this update: Wed 29 Apr 2026 03:01:16 +0000
Manifest next update: Thu 30 Apr 2026 03:01:16 +0000
Files and hashes: 1: 1I_-5VjCM2_OFHsmfVkBJKpEPdw.roa (hash: 7CWmUvdasbnykf0DjiU7gRJL7RLpAGl2V8qgnv1X5p8=)
2: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: vl9a5JF0uXcGvIMEcTi8prA4k6yfJ4IxatDWfNKS9vI=)
3: sIQZHyrMKrx0aGLhGaxyLwG43WI.roa (hash: 1DHs9q3U0NDHbbr1v8UvKlsFj4sQc1jDRLQRmJtbDIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d7:2f:07:32:80:bc:6b:b1:c4:57:8b:0d:c4:1e:7e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6
Validity
Not Before: Apr 29 03:01:16 2026 GMT
Not After : Apr 30 03:01:16 2026 GMT
Subject: CN=56526e1e561601527593a6030465e4fdb9614458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:a6:d4:d2:11:6f:c6:ac:28:0c:b8:d1:21:
d9:47:47:ae:ac:4f:ad:d0:22:eb:42:96:8d:40:81:
8e:09:19:e9:d1:ce:69:75:59:fe:80:db:e4:5e:5f:
a6:7c:8e:d9:e8:cc:0a:6c:1d:d2:44:d0:98:8f:8c:
87:2b:3d:c3:9d:ab:61:2b:08:ed:c3:af:38:6c:d7:
05:bc:ba:81:3f:d4:54:be:11:6f:35:99:d2:36:9a:
4b:43:6b:bc:5d:de:24:ce:2f:3e:43:91:ce:74:5e:
18:89:e8:b2:51:af:3b:ca:a0:22:bf:39:09:a7:fe:
39:13:2b:7e:cd:d1:40:b1:b6:5c:34:e1:45:43:17:
44:1b:0c:70:62:95:7b:a5:a8:9f:3e:2b:15:70:44:
8b:80:1c:5b:e8:e4:83:ad:3a:c2:2a:a1:26:e0:e0:
19:32:c9:39:1d:32:25:87:6f:46:0a:a7:74:b4:83:
99:d5:48:83:89:58:ac:32:b6:89:f3:8f:f2:14:09:
34:10:02:60:b2:60:39:02:14:f8:b3:ef:57:8d:2d:
4f:b9:78:d8:11:cb:e0:4e:71:a3:16:d1:d4:63:54:
20:30:42:25:06:02:92:da:78:92:ce:75:4c:d4:cc:
aa:e3:39:9d:cf:4b:a0:e9:a7:6c:73:60:a8:dc:1e:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:52:6E:1E:56:16:01:52:75:93:A6:03:04:65:E4:FD:B9:61:44:58
X509v3 Authority Key Identifier:
keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:f2:f3:36:15:78:88:fe:da:72:96:75:e4:c3:e1:90:71:8d:
36:98:88:d1:59:1f:ba:bb:48:39:e0:ad:54:3e:88:27:43:08:
aa:40:0f:07:e0:a6:2d:03:8d:db:dd:5d:7a:e8:ed:93:cb:91:
1e:1a:d5:b3:ad:78:5c:c0:7b:3d:93:28:43:d3:75:fe:c4:8c:
bb:c8:ff:c0:30:22:a7:d8:7b:a4:e2:f4:f5:b1:75:d3:50:93:
20:5d:b9:31:da:d3:c3:bc:03:2c:1f:f2:d9:1e:35:1c:37:d3:
67:b7:0e:b1:dd:e6:da:0e:41:58:0e:45:54:55:5e:49:60:db:
5d:b7:4a:41:1f:86:39:8c:11:6c:c0:72:a2:a1:f0:54:d9:d0:
41:04:04:a5:dc:7a:53:7d:c3:7c:1d:f4:fe:f4:76:fc:07:44:
90:76:d2:e5:5e:42:ac:a5:76:ac:6e:15:66:ef:df:0f:6b:bc:
58:b8:6b:26:58:5e:3c:e8:a7:92:c8:20:23:ae:bd:96:09:f9:
fd:d7:d4:a1:9d:d4:ab:d5:3b:b2:7c:ed:bf:27:31:17:ab:5d:
77:81:db:36:81:6d:d0:51:5d:4c:ba:6a:f2:31:16:f8:16:25:
0d:ed:99:ef:38:2c:39:01:92:df:9e:db:ce:59:b2:b2:ba:db:
86:b9:2e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 08:21:12 2026 by rpki-client