Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/3d6590-c437-405d-a8d9-a882e43b318a/1/pp4xj_I3IGkxoQWbjZWG66iH8yg.mft
File: pp4xj_I3IGkxoQWbjZWG66iH8yg.mft (raw, json)
Hash identifier: fviVsH0EjUpOehPagtyQSQcpbyQE6rrzTA5b/iwp+OY=
Subject key identifier: A3:AE:74:7E:5B:73:82:38:5D:71:83:79:4C:57:2D:A1:45:5D:02:0B
Authority key identifier: A6:9E:31:8F:F2:37:20:69:31:A1:05:9B:8D:95:86:EB:A8:87:F3:28
Certificate issuer: /CN=a69e318ff237206931a1059b8d9586eba887f328
Certificate serial: 019F19E7D2A1F1FA536768D3BDBFE541E4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pp4xj_I3IGkxoQWbjZWG66iH8yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/3d6590-c437-405d-a8d9-a882e43b318a/1/pp4xj_I3IGkxoQWbjZWG66iH8yg.mft
Manifest number: 2A
Signing time: Tue 30 Jun 2026 19:00:50 +0000
Manifest this update: Tue 30 Jun 2026 19:00:50 +0000
Manifest next update: Wed 01 Jul 2026 19:00:50 +0000
Files and hashes: 1: HBb1HdbTpkkZ4I4n2Q6fg9MiULg.roa (hash: pkve3g53jmybFKOaGXzmIhJtmGYscgIQMcLuncFXZzg=)
2: pp4xj_I3IGkxoQWbjZWG66iH8yg.crl (hash: U0MMXJakJrhvcPgdmYa/cpS1nKrCisyy327UgRaV5Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/3d6590-c437-405d-a8d9-a882e43b318a/1/pp4xj_I3IGkxoQWbjZWG66iH8yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/3d6590-c437-405d-a8d9-a882e43b318a/1/pp4xj_I3IGkxoQWbjZWG66iH8yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pp4xj_I3IGkxoQWbjZWG66iH8yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:e7:d2:a1:f1:fa:53:67:68:d3:bd:bf:e5:41:e4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69e318ff237206931a1059b8d9586eba887f328
Validity
Not Before: Jun 30 19:00:50 2026 GMT
Not After : Jul 1 19:00:50 2026 GMT
Subject: CN=a3ae747e5b7382385d7183794c572da1455d020b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:29:25:66:24:f9:6a:eb:1c:86:2e:70:ef:
25:9c:fe:59:b1:29:b2:37:43:f2:f0:4d:e7:d2:9e:
bc:af:18:d0:6c:3b:04:ee:14:01:88:1e:31:2b:1b:
92:02:8d:e9:29:cf:00:c6:e9:8a:de:ed:8d:fd:a2:
5f:01:ae:f2:e5:77:41:11:24:10:df:19:c9:a9:57:
ef:48:15:d9:47:7c:c9:18:5f:a8:29:59:76:58:5a:
d1:fa:21:fd:7e:1d:fe:2c:79:f4:38:b2:b2:a7:e8:
94:8b:c6:ba:c2:4d:fd:0e:94:7f:88:86:3b:1d:75:
db:52:f3:7b:83:0c:48:51:db:55:4a:93:9e:6c:ed:
97:9b:10:b8:92:18:95:a0:fd:5d:e9:2a:5e:78:71:
ac:c2:e8:62:bb:ab:80:6f:47:58:a7:70:34:8b:81:
31:fc:2b:fb:58:6d:65:ca:0c:e4:36:0a:81:aa:22:
bf:a4:79:81:62:11:94:9c:4a:a9:7c:75:fd:5b:54:
16:31:a1:1a:18:a1:ff:b3:53:76:31:af:4a:18:2b:
82:0a:21:bb:25:7a:0a:0a:18:2b:72:62:99:26:18:
e6:b2:24:ea:fe:92:06:26:d4:71:e0:2f:3f:bf:07:
f8:da:2e:55:59:f6:59:3e:40:a5:94:9e:ac:7a:42:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AE:74:7E:5B:73:82:38:5D:71:83:79:4C:57:2D:A1:45:5D:02:0B
X509v3 Authority Key Identifier:
keyid:A6:9E:31:8F:F2:37:20:69:31:A1:05:9B:8D:95:86:EB:A8:87:F3:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pp4xj_I3IGkxoQWbjZWG66iH8yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/3d6590-c437-405d-a8d9-a882e43b318a/1/pp4xj_I3IGkxoQWbjZWG66iH8yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/3d6590-c437-405d-a8d9-a882e43b318a/1/pp4xj_I3IGkxoQWbjZWG66iH8yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f8:76:98:51:e4:7e:e8:04:94:f3:a4:2a:85:9f:98:f0:6f:
a7:2c:7b:9f:33:c3:6e:d8:9e:45:00:ce:21:06:5a:4c:75:64:
31:0d:5c:38:4a:b7:c2:6e:8f:47:88:c1:7a:a0:ab:45:65:f0:
55:ae:0a:f6:03:a5:89:1b:50:02:a3:49:cd:82:88:15:e9:6d:
8d:a4:e2:8b:88:8c:99:65:17:6d:a6:d8:36:b3:99:e6:3e:9e:
a0:83:7a:57:e2:48:33:8e:a5:af:6a:bd:0a:21:d2:1b:09:9e:
91:fa:7d:d6:bc:ba:75:31:48:d4:72:3b:f8:2e:24:96:d1:73:
c0:99:64:fc:7f:67:9c:49:05:a6:e9:30:77:7a:0a:03:bc:08:
ec:59:8f:5b:b1:ef:e7:d1:87:56:4c:9b:32:2c:93:d9:eb:53:
34:85:fe:ec:cc:54:e7:91:df:19:35:fc:21:a4:13:be:b4:e8:
55:7a:90:6a:21:1d:b4:6f:f8:64:19:04:6e:a5:42:86:ce:81:
24:f6:9d:95:57:c9:a0:68:3b:01:1c:82:a0:a1:a9:66:b4:a5:
6f:89:0c:03:e1:46:1d:59:39:6e:39:a7:3d:e6:d8:68:f2:8b:
92:96:04:bf:6c:50:be:ba:06:81:3a:84:6c:ee:11:10:c3:de:
92:bc:8c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:37:46 2026 by rpki-client