Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File: ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier: 5RwBb5UpzRKU+1fu4s4NDDcgQ84ZYvtuT18o63I0tuM=
Subject key identifier: 5F:2C:42:6E:54:05:B6:3C:60:58:60:C7:7F:74:8F:63:CC:B2:AA:D8
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial: 01A12DD738953716C3523FB27FBA4A2D6E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number: 1A9E
Signing time: Mon 12 Oct 2026 02:00:41 +0000
Manifest this update: Mon 12 Oct 2026 02:00:41 +0000
Manifest next update: Tue 13 Oct 2026 02:00:41 +0000
Files and hashes: 1: KImIqYFb29b3KU70kYQGUgTjwXY.roa (hash: OkLquITh6UHZc59jyD3mteFTooB7+Z7+DnhjU4+WM/A=)
2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: 0HSuh01bi5u00GgsK2FCLDCxSByiBrO1eFLXv7W4G2I=)
3: wJhrCbB9HaKVaJIOdovc6nXak8I.roa (hash: DNB7tfiEdhadZKuh5CRqn/FIXhNGqeMKaW1BhhcXm8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:d7:38:95:37:16:c3:52:3f:b2:7f:ba:4a:2d:6e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Validity
Not Before: Oct 12 02:00:41 2026 GMT
Not After : Oct 13 02:00:41 2026 GMT
Subject: CN=5f2c426e5405b63c605860c77f748f63ccb2aad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:58:07:aa:18:c7:bc:01:0e:fd:89:27:f9:
c2:cf:3f:4a:75:dc:8b:c7:bf:da:96:89:b9:6c:a7:
71:51:0a:75:67:9c:69:6e:74:41:be:06:fe:4c:08:
15:63:17:ce:27:f7:d7:77:51:6b:77:b2:08:3a:cb:
9a:f2:7b:da:80:d5:3b:df:eb:a3:22:17:e8:eb:25:
33:50:0a:ac:07:61:f3:15:39:59:c6:64:79:71:88:
65:cd:cd:7c:c2:e4:33:96:73:36:93:7e:37:0a:80:
2b:18:6b:9a:85:b3:42:e4:31:cb:5b:f4:ab:cc:34:
6f:bf:d3:8e:d3:a7:42:1a:a8:4e:7d:4f:68:5d:8c:
95:6f:f8:99:06:22:d3:1b:8e:e1:cd:41:2a:c8:ee:
fd:ea:dc:32:72:25:bf:41:ac:2d:13:09:7e:4e:c7:
f8:29:77:3d:a4:ef:a4:4e:a4:0a:92:ba:98:69:1b:
22:ab:25:48:ed:6a:6d:7f:d5:70:e3:3c:3e:67:b4:
f0:64:50:dc:23:cc:e1:d7:75:d6:11:15:3a:92:65:
38:9b:e3:d4:03:88:86:42:7a:c4:68:7d:b3:bb:f5:
e0:f9:cc:25:13:f7:2c:25:c6:26:fe:bf:79:77:aa:
41:e4:cb:2d:7f:30:f7:eb:45:a9:b2:83:69:1e:54:
2b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2C:42:6E:54:05:B6:3C:60:58:60:C7:7F:74:8F:63:CC:B2:AA:D8
X509v3 Authority Key Identifier:
keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:63:42:bc:25:8b:79:eb:bf:3f:f8:76:39:9c:28:fe:50:8f:
81:39:ae:91:0d:f2:d0:0a:53:15:f9:3f:2b:95:03:1c:1f:e3:
58:a5:03:10:48:21:fc:62:a3:81:b1:30:8e:57:2b:7e:f4:39:
a8:fe:5f:f5:1b:e3:67:fe:d4:80:8a:b7:09:63:b9:21:6a:83:
6e:57:5e:c0:6e:2e:10:aa:32:e0:29:55:b8:63:84:37:35:dc:
be:c5:42:14:7f:73:04:bc:1f:dc:1b:63:a7:74:20:01:18:55:
cd:82:2b:94:f0:44:4f:df:2e:e4:f4:ea:38:7e:e6:ea:2f:c0:
2a:ae:f3:ca:a6:aa:30:b3:36:4f:4d:1d:3f:f0:ed:76:87:8f:
be:8e:55:79:5d:f4:37:82:2a:87:bc:ba:9e:90:c1:2b:5f:e1:
d1:db:53:ed:c3:d1:c8:ca:35:84:02:96:9b:43:3d:ec:c9:df:
a6:85:fd:04:b7:4f:2a:ee:ba:ca:59:ed:7e:9b:93:77:ba:42:
a9:9c:66:8b:3f:8a:da:4d:4f:e7:ec:ac:88:42:dd:7c:34:6a:
30:59:ef:0b:bf:ed:75:8a:ca:d8:fa:42:cb:10:5f:c6:10:4c:
d6:9f:e5:f0:c6:03:51:d2:12:08:82:b7:bd:d5:c8:60:1e:10:
76:8d:3f:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEt1ziVNxbDUj+yf7pKLW6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OTQ3NjgxZGEwZGI3ZmU3OTMxNWVjNmRiZGEyOGJmOGQ2
NjBmYzAwHhcNMjYxMDEyMDIwMDQxWhcNMjYxMDEzMDIwMDQxWjAzMTEwLwYDVQQD
Eyg1ZjJjNDI2ZTU0MDViNjNjNjA1ODYwYzc3Zjc0OGY2M2NjYjJhYWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/NYB6oYx7wBDv2JJ/nCzz9KddyL
x7/alom5bKdxUQp1Z5xpbnRBvgb+TAgVYxfOJ/fXd1Frd7IIOsua8nvagNU73+uj
Ihfo6yUzUAqsB2HzFTlZxmR5cYhlzc18wuQzlnM2k343CoArGGuahbNC5DHLW/Sr
zDRvv9OO06dCGqhOfU9oXYyVb/iZBiLTG47hzUEqyO796twyciW/QawtEwl+Tsf4
KXc9pO+kTqQKkrqYaRsiqyVI7Wptf9Vw4zw+Z7TwZFDcI8zh13XWERU6kmU4m+PU
A4iGQnrEaH2zu/Xg+cwlE/csJcYm/r95d6pB5MstfzD360WpsoNpHlQrQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8sQm5UBbY8YFhgx390j2PMsqrYMB8GA1UdIwQY
MBaAFKaUdoHaDbf+eTFextvaKL+NZg/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mNjQ5YTItNTE4ZC00NDU2LTk4YTct
MjNjM2RmODJjMjMwLzEvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mNjQ5YTItNTE4ZC00NDU2LTk4YTctMjNjM2RmODJjMjMw
LzEvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGNCvCWL
eeu/P/h2OZwo/lCPgTmukQ3y0ApTFfk/K5UDHB/jWKUDEEgh/GKjgbEwjlcrfvQ5
qP5f9RvjZ/7UgIq3CWO5IWqDbldewG4uEKoy4ClVuGOENzXcvsVCFH9zBLwf3Btj
p3QgARhVzYIrlPBET98u5PTqOH7m6i/AKq7zyqaqMLM2T00dP/DtdoePvo5VeV30
N4Iqh7y6npDBK1/h0dtT7cPRyMo1hAKWm0M97MnfpoX9BLdPKu66ylntfpuTd7pC
qZxmiz+K2k1P5+ysiELdfDRqMFnvC7/tdYrK2PpCyxBfxhBM1p/l8MYDUdISCIK3
vdXIYB4Qdo0/XQ==
-----END CERTIFICATE-----
Generated at Mon Oct 12 04:24:25 2026 by rpki-client