Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File: ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier: pHNwwahCcqlIoPX7q9cUJLbuiCVm9Eln2IwXG8h3R7Y=
Subject key identifier: 08:04:37:45:B9:75:B2:F4:F4:AD:57:86:A0:DC:BD:37:78:72:42:40
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial: 01A02733663D115872307889F82793A2B559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number: 1A16
Signing time: Sat 22 Aug 2026 02:01:14 +0000
Manifest this update: Sat 22 Aug 2026 02:01:14 +0000
Manifest next update: Sun 23 Aug 2026 02:01:14 +0000
Files and hashes: 1: KImIqYFb29b3KU70kYQGUgTjwXY.roa (hash: OkLquITh6UHZc59jyD3mteFTooB7+Z7+DnhjU4+WM/A=)
2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: ueQlDRVeI6z2+CFop+ufXhwHtpfTVKK0v8kP5cYGyfk=)
3: wJhrCbB9HaKVaJIOdovc6nXak8I.roa (hash: DNB7tfiEdhadZKuh5CRqn/FIXhNGqeMKaW1BhhcXm8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:27:33:66:3d:11:58:72:30:78:89:f8:27:93:a2:b5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Validity
Not Before: Aug 22 02:01:14 2026 GMT
Not After : Aug 23 02:01:14 2026 GMT
Subject: CN=08043745b975b2f4f4ad5786a0dcbd3778724240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:cb:6b:92:5f:bd:9a:b5:2d:b0:38:39:ad:
1c:ba:55:33:e2:b8:9c:26:77:cb:08:fd:93:ab:5a:
97:11:98:40:94:f9:26:c1:ff:77:02:65:51:85:53:
48:49:56:5b:16:c8:bf:72:13:0a:85:cb:45:61:f8:
00:b8:92:f9:fd:f3:b2:19:ac:a3:ce:51:46:e8:21:
e6:c0:2d:58:d8:64:18:5f:39:a3:ce:4f:f0:84:45:
48:21:c0:69:4b:74:8d:45:60:2b:e3:3b:11:c1:09:
17:ff:d8:55:ea:5e:77:81:23:1f:27:6d:29:ae:e0:
be:f8:a7:76:f2:cb:b8:b2:14:80:16:b4:0e:36:ff:
5a:56:3c:ca:3a:9d:99:73:0a:a7:7c:d6:e8:9e:77:
36:14:81:f2:bd:84:b8:48:e3:be:c0:0f:cc:a7:06:
c0:fe:f8:a1:fa:df:fb:cc:26:c4:61:77:1a:cd:89:
01:b9:d4:64:1a:27:ef:69:8f:40:f4:6f:2f:2d:20:
85:48:c8:00:f8:ea:f0:71:93:fd:bd:06:ca:98:34:
d9:cf:62:74:d1:5a:22:0a:47:37:d5:75:c7:14:4f:
78:71:6e:4f:df:18:71:67:24:53:71:db:af:7d:2d:
51:d9:9f:36:81:69:9a:c7:15:82:4c:8e:c8:1a:15:
03:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:04:37:45:B9:75:B2:F4:F4:AD:57:86:A0:DC:BD:37:78:72:42:40
X509v3 Authority Key Identifier:
keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:80:28:99:cf:0a:d4:ab:0b:59:4d:58:65:bf:3f:31:56:0d:
0b:f5:30:ef:60:f3:8c:76:1b:b3:69:cd:a4:4b:20:9c:9b:29:
3d:d1:73:59:8f:f4:53:c8:b5:f5:f3:4c:7a:16:e9:3c:de:1c:
b3:b9:e5:21:de:3c:82:48:7a:4a:44:7a:9e:d0:e3:d5:ec:bd:
ce:fa:20:5d:a6:e3:44:28:e3:84:05:9b:8f:14:c7:e0:de:a9:
7d:b4:b3:09:c3:7c:b6:02:3e:11:27:86:70:ff:72:7e:70:c5:
9d:04:9d:df:7e:27:9c:ac:32:cf:c8:f7:49:2c:84:75:23:95:
ff:71:05:2f:3f:d9:d6:0c:76:4b:12:fb:37:02:f2:4d:83:86:
20:11:10:df:c4:2a:78:f5:b7:ee:dd:bb:72:fa:ea:bb:19:6a:
c3:7e:6a:eb:5e:0d:a7:10:68:d6:c6:04:1a:f7:90:4f:f5:9c:
9b:1f:d6:91:ec:13:47:be:c0:86:3a:c2:37:26:bb:03:db:50:
c9:d9:a0:55:29:78:bd:78:ad:d9:38:29:9d:c7:3c:12:4d:91:
b7:74:df:99:5a:b1:fa:00:14:ad:d1:a2:c0:76:ed:ad:8b:f8:
d1:52:a7:a1:04:50:e3:dc:5a:94:db:2d:ce:98:2b:67:ac:c6:
82:f1:e5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:47 2026 by rpki-client