Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File: ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier: z+2w1wrMQl1BsxGf3SdmLcx6Jmcio82D6D4Hv2mMsJU=
Subject key identifier: D3:A5:94:27:8D:41:3F:93:58:75:F9:BB:17:BA:B4:17:BC:ED:AA:67
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial: 019F284832D233B135F3178B1E6549C0B3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number: 1992
Signing time: Fri 03 Jul 2026 14:00:47 +0000
Manifest this update: Fri 03 Jul 2026 14:00:47 +0000
Manifest next update: Sat 04 Jul 2026 14:00:47 +0000
Files and hashes: 1: KImIqYFb29b3KU70kYQGUgTjwXY.roa (hash: OkLquITh6UHZc59jyD3mteFTooB7+Z7+DnhjU4+WM/A=)
2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: 1PTjYvapUSLcaedB8PcWnePTCKmyZl2WhZvdppcCLow=)
3: wJhrCbB9HaKVaJIOdovc6nXak8I.roa (hash: DNB7tfiEdhadZKuh5CRqn/FIXhNGqeMKaW1BhhcXm8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:48:32:d2:33:b1:35:f3:17:8b:1e:65:49:c0:b3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Validity
Not Before: Jul 3 14:00:47 2026 GMT
Not After : Jul 4 14:00:47 2026 GMT
Subject: CN=d3a594278d413f935875f9bb17bab417bcedaa67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:f6:cf:13:72:ad:b9:12:9d:30:e0:1c:05:
50:cd:d8:8b:de:9e:ab:53:7d:c9:e4:0c:96:d6:90:
f2:72:02:50:d6:42:f9:36:e4:90:80:91:c7:f2:0d:
ba:54:18:c7:7a:cf:5d:97:27:d8:80:62:3b:ac:86:
cf:91:c0:31:1c:62:0d:8d:f1:ca:7a:46:5c:65:99:
04:05:e7:bf:38:05:99:f7:fe:01:49:5b:78:6e:ae:
b9:e1:d8:75:0b:0f:55:0a:a0:59:e3:1d:1b:2b:9c:
27:af:91:f0:9a:19:f1:cf:8d:b5:df:8f:01:71:1b:
49:69:80:27:24:8a:47:17:8e:b6:3e:fd:cf:a0:8d:
32:ec:8d:0e:93:7c:01:41:cf:95:9f:8d:c5:50:9f:
11:60:17:86:3c:76:b1:4f:87:ab:01:4e:da:d3:c4:
a1:68:1f:67:a7:43:dc:b2:ac:5b:2e:49:47:b0:6a:
6a:db:75:0c:eb:17:a1:5f:8a:b4:47:b9:b5:4f:08:
db:9d:69:f3:28:48:b3:c2:9b:a7:79:fb:65:92:af:
02:75:e8:49:fd:34:f1:be:34:1e:c6:12:4a:b0:cd:
88:76:52:8c:cc:e6:96:7c:ce:ba:25:19:16:72:fe:
6f:bb:c3:a1:e4:ec:11:42:04:23:ec:e2:b0:f7:59:
8b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A5:94:27:8D:41:3F:93:58:75:F9:BB:17:BA:B4:17:BC:ED:AA:67
X509v3 Authority Key Identifier:
keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4c:72:a4:20:75:21:bb:1b:a8:d1:9e:90:61:81:ea:a6:5f:
cb:fa:87:99:ea:e7:d1:d4:1d:4d:3c:72:3e:f1:5e:95:be:35:
1f:4b:d4:00:7d:6a:a9:2f:b4:8f:da:cb:c6:ee:20:b9:86:56:
3b:21:dd:f4:7d:7a:ec:49:53:a7:1a:34:fc:93:7b:27:79:e9:
b5:5b:2f:cc:ca:41:99:d3:de:0e:a6:e2:50:86:53:63:b0:73:
fd:95:82:da:3d:dc:7a:92:76:69:60:de:5b:ed:98:1b:57:03:
af:cc:f6:79:63:75:21:60:51:25:6e:40:92:26:c2:81:44:fd:
14:90:e1:de:e4:2c:05:cf:bb:30:29:1e:37:28:8c:ca:be:3b:
d4:7e:f7:ab:fb:5b:7a:21:e7:4a:39:e9:74:eb:87:b3:37:87:
4d:81:d4:53:88:e3:19:ab:c1:2e:df:20:3d:9b:19:fa:59:63:
1c:55:5e:4d:a6:36:12:c2:f6:4e:5d:d2:6b:00:41:c4:91:c7:
4a:c6:9e:f2:c4:75:af:5c:42:11:62:3e:31:d1:45:49:61:aa:
ba:74:33:e4:a8:9d:8b:d4:68:a2:71:1f:2f:9d:68:21:c4:90:
00:c7:71:40:4a:88:a0:b6:3a:85:ff:9a:bd:78:dd:44:5b:a8:
49:9e:5d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:47:45 2026 by rpki-client