Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
File: ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft (raw, json)
Hash identifier: PpbhCKiohkTzIteN+TZchJTykypq5AuloRvyVh4I2gw=
Subject key identifier: D2:9A:2E:69:E7:2E:BB:A0:02:43:C0:F0:BA:CE:3A:FA:65:6C:2B:E4
Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
Certificate issuer: /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Certificate serial: 019D389BACA09C1D54D3757FC6DE9476F345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:19 +0000
Manifest this update: Sun 29 Mar 2026 08:00:19 +0000
Manifest next update: Mon 30 Mar 2026 08:00:19 +0000
Files and hashes: 1: 30JLkNVBD74nB4dIkHC5g_Lkgp8.roa (hash: h+8A8xjPSyR+IasHtbO+WsP62yrj2rUoaLWd4gkX1ps=)
2: Nd1TnNt00oK2xr_oilTTzqexc7Q.roa (hash: +kz057WFCQ3qfR3EIzjNvOnka8S56ej02u7lcwgzBvw=)
3: fV79Senro57id6bOwy-8bI2dt7Y.roa (hash: MG+KbDbsLbpSzwp3gHCs1H8iXzaKkDKDQI00IvNa3Wg=)
4: ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl (hash: MA5tRwQWAWLX+F60WCxWVLI6AMx95BeTeIW02vb1qIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ac:a0:9c:1d:54:d3:75:7f:c6:de:94:76:f3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Validity
Not Before: Mar 29 08:00:19 2026 GMT
Not After : Mar 30 08:00:19 2026 GMT
Subject: CN=d29a2e69e72ebba00243c0f0bace3afa656c2be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:78:d4:f7:20:5f:b4:62:66:3f:ab:92:65:
c1:94:45:aa:fb:3d:81:4d:44:3c:fd:d9:34:90:c0:
a2:ce:1c:17:64:a1:ab:49:65:0e:9b:07:a8:13:61:
46:b4:4e:2a:39:91:93:4d:fb:fa:d4:ab:24:73:6d:
12:fb:0c:51:83:bb:38:8b:ea:43:24:0f:a9:d0:83:
a9:a3:c7:73:09:1e:21:bc:d1:f3:08:5b:5e:34:e6:
39:00:35:ec:dc:58:46:b8:7c:bc:c3:52:0e:73:9e:
02:3e:28:02:a6:9f:f3:80:d3:b3:79:9d:51:77:d1:
9a:b7:d7:57:b9:5f:d2:29:07:5d:b8:56:d6:db:8a:
56:88:ec:49:58:cc:2f:37:fd:5f:95:d5:ef:fe:ed:
62:20:20:cc:d8:13:45:96:63:45:a1:38:e2:db:4a:
4d:8e:60:13:4c:0f:93:01:2b:ba:c9:53:38:ac:11:
2c:1b:f3:4d:62:77:c8:d2:19:cc:b0:4f:5d:e5:a0:
b7:1e:85:ca:5b:cb:70:87:1d:13:89:2d:53:f3:87:
8f:c0:8a:66:71:38:34:ea:fe:83:1c:19:01:9b:33:
64:86:e2:09:45:07:c5:6d:be:5e:08:af:0a:71:b7:
6c:6e:17:b0:c5:45:e2:c4:22:f5:bc:ac:cc:8b:8b:
2e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9A:2E:69:E7:2E:BB:A0:02:43:C0:F0:BA:CE:3A:FA:65:6C:2B:E4
X509v3 Authority Key Identifier:
keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:17:25:2b:0e:c6:29:84:54:4f:2d:95:7e:8b:cd:8f:4d:44:
0d:b8:cc:67:c2:0a:66:77:2d:4a:ef:1e:9f:50:6b:96:f7:cd:
34:95:ee:11:76:44:64:2c:4a:01:07:b6:05:01:59:74:42:e9:
21:bd:c8:52:17:fc:f0:fe:b2:d4:89:4b:d1:29:18:3e:2c:4a:
b3:1c:6f:93:cd:03:7e:40:10:73:25:c1:50:19:c2:4d:50:4d:
34:ba:92:33:f0:26:a9:b1:27:6d:f6:12:04:3b:0a:b5:26:e5:
41:11:b5:04:3a:d1:ba:f2:7f:b9:05:8e:67:82:a5:12:84:74:
15:01:c6:37:5a:ae:b2:5b:57:e2:4c:58:f7:b5:ff:50:54:31:
11:b2:8d:0d:04:87:31:e1:f9:5e:1a:49:db:49:17:18:9d:6e:
b3:c5:16:d4:76:e7:be:a4:c3:73:77:be:a8:db:94:6e:8e:f7:
b2:b6:78:5e:01:5a:93:b0:1c:70:e7:20:6a:a5:be:34:c2:7b:
29:61:dc:a8:a2:c9:91:ca:e5:c4:02:1d:94:e8:d8:3e:e3:b1:
0c:82:e3:b1:ea:01:cf:f8:57:ef:36:15:16:b6:d3:9e:5b:be:
e2:aa:f9:35:38:04:41:58:f8:6a:96:fd:cf:22:22:2c:75:a3:
47:76:ae:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:42 2026 by rpki-client