Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File: ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier: Hk86zmD9TmtNtHcnUcFllSyc7fiAtvJg6dRgRoVYcZI=
Subject key identifier: C0:04:57:62:4E:16:9C:9E:FE:16:31:EC:5E:CD:BA:2E:9B:1D:C1:00
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial: 019D37F7A19420140B9A627659F459D89722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:01:08 +0000
Manifest this update: Sun 29 Mar 2026 05:01:08 +0000
Manifest next update: Mon 30 Mar 2026 05:01:08 +0000
Files and hashes: 1: KImIqYFb29b3KU70kYQGUgTjwXY.roa (hash: OkLquITh6UHZc59jyD3mteFTooB7+Z7+DnhjU4+WM/A=)
2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: hQtmvV4RkGPrzUKmNKGhWMXr6ZiATgncnBG+dXyopNU=)
3: wJhrCbB9HaKVaJIOdovc6nXak8I.roa (hash: DNB7tfiEdhadZKuh5CRqn/FIXhNGqeMKaW1BhhcXm8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:a1:94:20:14:0b:9a:62:76:59:f4:59:d8:97:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Validity
Not Before: Mar 29 05:01:08 2026 GMT
Not After : Mar 30 05:01:08 2026 GMT
Subject: CN=c00457624e169c9efe1631ec5ecdba2e9b1dc100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e7:8f:e1:8e:5c:54:74:66:58:cd:1f:86:59:
b5:09:48:9d:ef:8d:a8:b3:31:64:15:12:0e:ae:94:
00:cf:13:8e:fb:5f:4a:5d:5c:af:a4:9d:96:34:5e:
65:93:5e:03:94:ff:ad:73:fa:d0:e4:79:c9:35:c9:
f9:77:2b:51:1a:d7:fc:5b:dd:a8:2e:85:44:5f:42:
e4:43:f7:5c:93:bd:67:16:58:9c:b8:91:f3:9c:1d:
4e:46:a2:45:f9:7d:7e:31:2a:dc:f4:e2:2e:12:d8:
3e:10:3e:b5:88:34:20:6c:52:6e:42:48:86:2f:6d:
8e:f3:01:68:d7:33:fd:4a:47:2f:20:31:02:a3:12:
7b:e2:95:06:f2:ee:0d:d3:34:3f:49:2a:f4:93:e3:
c2:cc:57:87:8b:e6:b2:c6:a7:68:1f:26:44:55:e7:
6d:3f:20:90:6e:1a:4c:82:29:1e:6b:57:d7:80:ad:
93:9a:26:83:3b:ab:22:ac:d9:1a:da:28:2d:d3:06:
a4:7b:9b:da:ea:fd:72:ef:ab:4e:5d:93:ea:ea:f0:
95:8c:1f:b5:d6:4e:b7:86:02:0d:6e:d0:85:3b:05:
d7:ec:cd:5c:aa:7c:c7:f7:50:2c:d8:f5:8a:a5:11:
d4:8d:b6:7f:8a:2b:61:6e:dc:f0:2e:6a:2e:e3:a4:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:04:57:62:4E:16:9C:9E:FE:16:31:EC:5E:CD:BA:2E:9B:1D:C1:00
X509v3 Authority Key Identifier:
keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f8:f2:82:35:47:93:ff:1a:b0:5c:9d:c0:0f:83:39:b8:0f:
fd:54:d6:49:61:d5:f1:66:42:f7:87:76:da:4c:5b:40:3d:c3:
b8:2e:38:40:e9:a7:41:d7:96:89:99:67:6c:3d:1a:4b:c2:a9:
a3:83:e4:55:81:71:c2:8d:46:ec:c7:83:52:45:4c:c0:17:ce:
7e:37:01:04:ad:0a:47:a6:21:71:48:ca:ae:18:36:16:d5:28:
90:d5:8e:2d:3d:f2:62:c7:f2:cd:f6:60:d6:48:f2:1b:b6:e3:
82:8a:a5:10:57:88:14:62:ef:f9:ee:8b:ca:c7:92:34:1c:9b:
e9:21:3f:10:09:e1:50:a2:b2:8e:f8:26:42:d9:1d:88:1f:c0:
c4:dc:bf:39:cb:83:b7:b3:4b:be:65:7a:eb:68:ca:3d:98:c4:
65:e5:13:a6:07:3b:d3:56:06:21:63:c6:fb:d1:fd:cf:a6:84:
e1:51:3c:7a:11:c4:77:45:1d:36:ff:ad:4f:cc:ab:5d:9e:57:
9a:31:5c:32:70:db:3c:d6:43:35:37:54:b6:7d:39:1d:fb:2f:
6a:bf:71:b4:38:b3:a5:39:cd:1b:a2:6d:5a:52:fc:21:ad:81:
d4:86:8c:04:00:05:2f:40:80:6c:39:5e:d3:3d:c2:bb:e6:df:
e7:93:0f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:46 2026 by rpki-client