Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
File: pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json)
Hash identifier: 38/zyZWo7gz3qL6joNJCJEcyFmyux9mud7PHYvLY3S4=
Subject key identifier: FF:1C:20:BE:72:0B:AF:F9:44:E4:A3:5E:17:81:71:F5:43:E2:0A:0F
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Certificate issuer: /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial: 019CAC7E47385ED8B5437B2F95B54F43AD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
Manifest number: 0AD1
Signing time: Mon 02 Mar 2026 03:01:22 +0000
Manifest this update: Mon 02 Mar 2026 03:01:22 +0000
Manifest next update: Tue 03 Mar 2026 03:01:22 +0000
Files and hashes: 1: 1-Ea5LT1K8F6WUZhY_U_lKnZaXcY.roa (hash: x7c/Qt2ZfBYPaYf0LxG+u+LvENTrFJB+iJAEDKpvDxM=)
2: LC9OsZPmFyHE-17gPISnP-rIekM.roa (hash: aLAimHcWzq8XoGgwDQKHrZcmH3h9ns5QyipqRfZdJDQ=)
3: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: 4WSSK+5zaGnIWh+ebMclwB3Beq4BnJwcVsnJB5O0dF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:47:38:5e:d8:b5:43:7b:2f:95:b5:4f:43:ad:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Validity
Not Before: Mar 2 03:01:22 2026 GMT
Not After : Mar 3 03:01:22 2026 GMT
Subject: CN=ff1c20be720baff944e4a35e178171f543e20a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:bb:ab:68:aa:f2:af:46:50:53:84:c1:25:
d0:a6:7e:9f:ce:18:e7:6b:27:48:b2:a4:a9:fd:e8:
d1:39:4f:93:6a:57:7b:bf:c2:d1:87:21:4a:61:1f:
c8:1a:19:ea:0e:57:5e:91:6b:01:a9:2a:29:92:13:
7c:07:fa:0e:98:5e:d5:f0:aa:9e:f1:87:d3:30:59:
c6:6b:d4:c4:7e:8b:9c:f7:d6:6c:16:31:e4:92:97:
46:6d:43:cc:4e:aa:ab:b3:43:49:7a:f4:9c:03:0e:
61:71:54:d6:7a:8e:5a:fb:15:0e:e7:8d:97:ac:c8:
69:29:bb:20:6c:53:b9:dd:a9:f5:62:44:67:05:ac:
01:2f:2d:22:0a:bc:8e:f0:90:cb:4b:99:e0:e1:5c:
f6:7a:5f:85:20:22:c6:3f:23:b4:98:ed:54:d4:28:
2e:4d:c6:de:3a:87:54:5e:ae:b5:08:d0:ea:4c:c1:
c6:37:8f:75:4d:cb:a2:b0:2a:97:91:a8:b8:fe:f6:
64:66:10:08:d4:31:64:31:8d:3b:b1:d4:c5:dd:28:
06:9e:01:0b:d4:12:ea:d5:63:35:8d:67:ad:0a:88:
10:4f:0c:8b:26:71:f6:08:26:61:63:f5:48:9c:ab:
ac:04:50:3b:3b:a9:58:05:f5:2a:09:78:dd:52:0e:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1C:20:BE:72:0B:AF:F9:44:E4:A3:5E:17:81:71:F5:43:E2:0A:0F
X509v3 Authority Key Identifier:
keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:be:da:85:8b:82:63:a8:db:85:c9:dd:2b:18:82:c2:3b:81:
46:14:fb:4a:8a:68:17:bc:4e:9b:b8:c3:3c:e7:8c:ef:75:42:
50:3a:30:b0:63:09:5c:30:e2:79:93:6a:b1:a5:56:7e:9c:76:
c4:d7:da:f2:1f:5c:c6:3a:6c:95:e6:7b:fc:66:02:a4:c2:1a:
fb:70:84:3d:af:95:89:79:27:1a:67:e3:54:94:80:a9:d9:fd:
8f:75:81:84:a0:54:90:dd:10:09:02:71:8a:79:c3:69:e5:7d:
28:3d:52:f4:cb:ae:ed:18:84:78:f8:e8:0c:f5:bc:2e:c3:dc:
31:56:e2:9f:51:5d:b3:02:fd:75:29:25:a8:33:4b:09:b3:66:
b1:5e:2f:35:80:72:83:53:c5:26:0e:74:c8:5d:2e:23:29:23:
e5:fb:b5:0f:53:72:26:cb:df:9a:94:41:8f:9a:b9:02:5b:62:
f1:f3:66:36:47:d9:2a:34:45:67:e8:99:00:6f:90:81:48:36:
2b:d3:79:46:ce:72:ea:11:26:f1:cc:55:a8:a8:0b:21:12:ee:
2c:7f:04:5a:e9:09:5e:e5:a0:1d:e7:02:47:7b:29:c3:95:fe:
08:d9:93:11:4d:5c:69:45:53:4a:53:a3:1a:98:03:2c:27:bb:
75:31:07:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:51 2026 by rpki-client