Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
File: PpvRijUxNTVm7RgUDK10GQW-r64.mft (raw, json)
Hash identifier: eDrp/I0rlgbmSjqOq4cmDG6TKOBAombzN+Hkau5Ogt4=
Subject key identifier: BF:96:CF:98:48:8D:51:A7:F3:66:1D:4F:75:96:50:7C:91:91:EB:0E
Authority key identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE
Certificate issuer: /CN=3e9bd18a3531353566ed18140cad741905beafae
Certificate serial: 019D33768178D47C7F5B155C00E28813A7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
Manifest number: 0135
Signing time: Sat 28 Mar 2026 08:01:37 +0000
Manifest this update: Sat 28 Mar 2026 08:01:37 +0000
Manifest next update: Sun 29 Mar 2026 08:01:37 +0000
Files and hashes: 1: A2ExeyQHGNk51S6yOHeJr6XOVf4.roa (hash: GO30lk5aBIlBJaHx15f4eDa39AuOipkWS6SvYKidn14=)
2: PpvRijUxNTVm7RgUDK10GQW-r64.crl (hash: eMC0+QXcShI3r1o4FqqaXSbWa4oirnFR9f3rlBk7FqU=)
3: _Wx9ZdmaJOp3eTANlK2NIeFmYuk.roa (hash: bRwEhLFQbPYT/IaKYTgc19M1MjVlqvi4YYR+NLvZd8U=)
4: c9WYdkuX9vqM1-rZ5wrXob8ras4.roa (hash: ejB+bZrxr1eJ74m85KOaG7NFYs4ZFTEAPocrQGNRHSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:81:78:d4:7c:7f:5b:15:5c:00:e2:88:13:a7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e9bd18a3531353566ed18140cad741905beafae
Validity
Not Before: Mar 28 08:01:37 2026 GMT
Not After : Mar 29 08:01:37 2026 GMT
Subject: CN=bf96cf98488d51a7f3661d4f7596507c9191eb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:99:74:6d:bd:f8:fc:aa:48:64:31:cf:5e:77:
37:b3:ed:ab:c2:51:0d:98:db:35:29:5c:60:4e:65:
79:c9:dd:f1:64:12:bc:74:2a:d9:f6:a5:a1:88:e0:
69:6c:db:f6:ea:47:19:4d:0c:d1:75:09:78:3c:57:
dc:d4:bf:ab:b9:3a:20:59:e8:bf:ad:d3:c8:ee:07:
1f:48:e7:ae:9c:07:a0:af:9c:50:60:29:7d:98:0a:
7c:ee:66:43:34:13:67:35:f7:f8:82:ea:c8:f4:1f:
57:d4:32:9f:ae:49:6a:e6:7d:73:0a:ff:df:4c:3d:
d7:2e:61:b7:9e:ff:46:3b:f6:bf:d2:53:5d:53:3c:
d7:ee:02:91:d7:7f:76:a4:c5:7a:18:81:10:61:1d:
83:ad:d2:e0:9b:ad:0d:90:98:dc:a5:25:87:ff:10:
56:e9:81:26:e9:d7:0b:49:a6:eb:77:89:0f:76:f1:
6c:c9:c5:e7:c0:2a:f0:7e:e7:7f:2f:c9:fb:ba:9b:
1d:e6:5a:b7:ad:5e:80:46:43:04:aa:f2:6a:9f:56:
56:03:13:18:55:3f:93:97:e4:36:46:83:f3:43:cd:
ed:0a:45:70:ae:6a:51:d8:f9:c5:16:95:46:ef:51:
39:75:15:7b:52:33:b2:88:5a:94:89:c2:5c:6e:a4:
b1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:96:CF:98:48:8D:51:A7:F3:66:1D:4F:75:96:50:7C:91:91:EB:0E
X509v3 Authority Key Identifier:
keyid:3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5f:80:90:4a:da:11:6c:9e:82:22:66:f6:fe:5d:38:8d:38:
05:b7:7a:d7:62:04:7b:bc:9b:af:c3:a4:61:77:24:db:05:f7:
95:ce:f9:df:85:f5:b7:3e:56:0c:b4:c7:da:30:bb:ee:68:02:
c4:75:03:ff:fc:31:a2:8b:64:21:1e:fe:ca:0e:03:a6:75:21:
b9:01:f9:6c:be:7a:b6:4f:44:9f:8c:06:52:10:2d:3a:6d:ac:
01:1f:a5:a4:46:4c:33:83:53:db:de:71:bf:5d:42:c9:06:e8:
83:ec:0b:ee:74:01:66:03:72:6a:c9:84:8b:98:5e:b6:0d:53:
41:33:9f:e3:03:86:cd:fe:4e:51:64:68:44:3a:f8:96:0e:1b:
d0:7d:e4:5e:b0:1f:41:5a:64:06:6f:e4:5f:de:c6:01:b1:fe:
fd:4d:4c:1b:e3:df:f3:bb:f0:3d:17:a0:b1:ec:01:bb:8a:39:
08:95:ec:a8:ec:7b:dd:e1:77:29:1c:30:73:7e:20:db:e9:82:
17:cc:1d:80:e9:b8:83:92:37:13:bf:34:fb:51:88:1c:4d:07:
1b:ec:a9:04:62:dc:1b:2b:a6:48:10:db:7a:c0:7c:e1:ae:21:
ce:47:b8:fc:eb:56:ef:88:ff:01:c7:51:e7:3b:6f:df:7a:4c:
89:67:42:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:06 2026 by rpki-client