Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
File: PpvRijUxNTVm7RgUDK10GQW-r64.mft (raw, json)
Hash identifier: CIC4DE+R0xw8a1FjCgbw1xsB1N6qcLohs6+aH81yPyY=
Subject key identifier: 51:FA:35:C4:CC:DB:AF:1C:C4:2F:19:89:F9:CB:45:81:27:9D:C2:CE
Authority key identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE
Certificate issuer: /CN=3e9bd18a3531353566ed18140cad741905beafae
Certificate serial: 019E1F1197619BF39ADDBFA17B78BF61E154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
Manifest number: 01AF
Signing time: Wed 13 May 2026 02:01:46 +0000
Manifest this update: Wed 13 May 2026 02:01:46 +0000
Manifest next update: Thu 14 May 2026 02:01:46 +0000
Files and hashes: 1: A2ExeyQHGNk51S6yOHeJr6XOVf4.roa (hash: GO30lk5aBIlBJaHx15f4eDa39AuOipkWS6SvYKidn14=)
2: PpvRijUxNTVm7RgUDK10GQW-r64.crl (hash: BQ1wtAZ0SS8iTjRjXDY6o6Bhtj0tXA4b6fHho7q569g=)
3: _Wx9ZdmaJOp3eTANlK2NIeFmYuk.roa (hash: bRwEhLFQbPYT/IaKYTgc19M1MjVlqvi4YYR+NLvZd8U=)
4: c9WYdkuX9vqM1-rZ5wrXob8ras4.roa (hash: ejB+bZrxr1eJ74m85KOaG7NFYs4ZFTEAPocrQGNRHSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:97:61:9b:f3:9a:dd:bf:a1:7b:78:bf:61:e1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e9bd18a3531353566ed18140cad741905beafae
Validity
Not Before: May 13 02:01:46 2026 GMT
Not After : May 14 02:01:46 2026 GMT
Subject: CN=51fa35c4ccdbaf1cc42f1989f9cb4581279dc2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:f2:52:81:f7:a6:00:0f:dc:c2:6d:10:c9:
78:f1:07:51:76:ac:95:00:b8:4c:23:b1:90:22:d8:
b7:90:23:37:95:71:f2:9a:04:82:1c:a8:8d:b8:81:
c0:c2:94:a3:25:46:21:66:da:67:25:02:a9:df:a2:
28:c8:42:72:23:55:2b:4d:6a:d0:ba:ef:76:1d:dc:
f5:73:d8:85:74:6f:be:a7:c5:49:1a:fc:53:9e:f7:
8b:39:65:08:b4:f5:f7:1e:43:36:3a:88:f9:5b:85:
ae:ec:1a:dd:ca:51:c3:e2:08:b3:c3:7d:e8:46:91:
f2:f2:98:19:cf:c6:8d:65:3c:c2:96:1c:d1:7e:c6:
28:1f:75:bd:33:18:b3:27:65:f5:99:1f:8c:32:ef:
97:7e:a9:c2:1a:54:7a:8e:25:34:23:07:ec:e5:ef:
3b:16:f2:d2:ce:6b:42:80:65:8d:ac:d0:c5:ab:93:
89:5b:c3:ca:b1:c6:de:4e:77:02:92:1b:39:c0:5a:
49:42:c7:e4:87:e6:99:30:c0:a6:66:02:a8:4e:a9:
95:f3:c0:cb:05:04:f6:83:81:bd:44:12:0b:10:cc:
8c:5a:60:25:be:bd:2a:b3:04:db:2f:9f:69:ea:44:
0f:d2:2f:4d:1b:1a:33:cb:e7:c2:ca:15:5f:bc:fe:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FA:35:C4:CC:DB:AF:1C:C4:2F:19:89:F9:CB:45:81:27:9D:C2:CE
X509v3 Authority Key Identifier:
keyid:3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0c:e6:87:47:36:6e:b7:0b:e3:10:e9:68:97:5d:30:fe:83:
7e:36:9a:c3:c8:56:d0:5a:33:94:e2:73:8d:23:8c:d9:8c:a0:
7d:76:9b:a3:9a:55:69:cb:2a:27:a1:55:41:be:f9:5b:f5:2d:
4f:31:7d:45:fa:a1:44:fe:8e:97:f2:5f:d3:5a:85:f5:37:44:
32:39:a8:b5:e0:3b:29:92:0b:47:a6:cf:89:92:88:86:9c:0f:
63:c1:cb:2d:9c:12:bc:c1:d5:87:00:7c:a5:93:25:41:53:f6:
b5:ba:35:0b:38:05:8f:6a:b7:81:80:ee:ea:d2:8e:a4:17:2a:
73:06:2e:17:7e:64:3c:a1:93:97:26:ea:7f:ee:b4:76:d0:75:
dc:64:dd:e8:31:27:b7:05:18:88:d6:eb:1e:7e:6e:ca:44:fc:
54:89:a2:29:a4:7e:f0:5c:e2:25:09:df:37:35:05:05:fd:de:
5e:ab:ba:8f:40:ea:8c:a4:87:58:3b:8d:21:b2:ae:e6:c7:eb:
58:52:1b:14:04:c8:e7:99:7f:4b:05:bc:9a:c1:3d:9a:79:a4:
18:1b:16:c3:af:36:87:b5:22:df:1b:05:30:49:2d:b1:e7:2f:
75:4b:39:c7:10:04:d0:1b:23:01:9d:d6:8b:df:60:0b:c6:1f:
f9:04:b8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:00:44 2026 by rpki-client