Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
File: ppv5fceDSX88N716huWZSs7ngbA.mft (raw, json)
Hash identifier: JJ4G8pkQLvY6yTkNuRi38WvgZof4jiIHZvg3BuoJit8=
Subject key identifier: AC:53:FB:D2:9E:5C:DC:6C:0E:87:B7:40:49:A8:B4:B5:24:36:B0:6E
Authority key identifier: A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
Certificate issuer: /CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Certificate serial: 019D98F400E75D8238167050C5EF0D31EEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
Manifest number: 12B9
Signing time: Fri 17 Apr 2026 01:00:20 +0000
Manifest this update: Fri 17 Apr 2026 01:00:20 +0000
Manifest next update: Sat 18 Apr 2026 01:00:20 +0000
Files and hashes: 1: ppv5fceDSX88N716huWZSs7ngbA.crl (hash: Ajar5a/X5Xcbr+AHLL496j0k2KRP9/gwIjEeUA9RTtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:00:e7:5d:82:38:16:70:50:c5:ef:0d:31:ee:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Validity
Not Before: Apr 17 01:00:20 2026 GMT
Not After : Apr 18 01:00:20 2026 GMT
Subject: CN=ac53fbd29e5cdc6c0e87b74049a8b4b52436b06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:fd:ab:19:f0:b8:57:ec:7c:b4:24:db:aa:
78:17:bf:92:9e:bb:70:19:5f:30:9a:6a:b0:dc:9c:
76:4a:6e:9a:b9:f0:75:94:6d:2f:b1:89:03:13:59:
96:8c:87:0d:c3:a9:e8:e3:5b:26:a6:02:60:93:a0:
ce:20:c7:94:13:84:78:ae:c5:bd:ae:92:c4:c6:f4:
7d:41:c5:d0:e9:5e:90:5c:1d:03:2f:3b:68:1c:c7:
c6:c8:39:ee:75:c5:07:e4:07:5a:7e:cf:4f:9b:75:
c3:7a:ec:3d:81:7d:e0:3b:da:29:4d:26:3a:15:db:
4b:76:05:b1:9f:56:78:a9:13:88:6b:f3:17:f9:4c:
c3:d0:bf:9a:67:4c:f1:67:3d:b2:b4:39:8b:7c:4a:
db:9a:01:92:01:66:76:b3:a7:6d:9b:3b:ab:b3:8c:
7b:ac:29:a4:ef:af:0e:b2:1f:a4:0c:8c:35:31:5e:
99:f9:3a:5a:9e:41:00:2b:cf:7a:1c:3b:c9:54:03:
cb:11:e8:fa:96:ed:98:e8:12:00:68:06:15:20:59:
0a:3a:5d:38:83:ee:75:6a:58:ee:dc:f5:a9:f6:1f:
c9:66:50:7d:0d:ac:e9:27:bb:9f:ee:16:93:09:20:
7f:bf:7c:e9:be:04:55:4a:8e:19:26:05:34:02:29:
03:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:53:FB:D2:9E:5C:DC:6C:0E:87:B7:40:49:A8:B4:B5:24:36:B0:6E
X509v3 Authority Key Identifier:
keyid:A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:23:f9:5b:04:a1:bd:93:b4:44:d4:83:99:93:2e:59:b2:41:
03:b0:e8:fb:ec:3d:55:2c:ec:a7:a7:32:38:7c:9b:f8:3b:b3:
ec:c8:58:e6:53:22:12:ca:dc:9d:bc:6b:93:55:d3:c5:35:4b:
d2:57:10:9d:c2:cd:ac:ed:93:f8:ad:eb:e6:5b:9b:f6:f8:f9:
dc:b0:38:2c:a7:9b:37:5e:ed:a2:f2:92:d0:51:6a:2d:a6:7c:
3b:15:45:74:d3:36:51:a2:79:6b:10:6c:38:ef:a2:70:dc:4a:
2b:c4:82:41:34:af:d2:25:cb:6f:4a:70:b8:9b:c6:9a:e9:19:
83:ab:be:20:39:a7:68:5d:7f:97:5b:98:a1:b4:5a:71:4f:7e:
6e:62:8a:a0:84:e3:d0:f9:ec:60:b0:5e:f0:4b:d7:fd:34:b9:
16:d4:be:79:95:1a:22:48:8b:7e:79:73:46:6d:6e:bf:8e:de:
52:77:3d:7c:d6:ac:82:76:6c:1c:54:5d:a9:4d:aa:55:56:2b:
22:88:61:79:61:77:52:07:e2:ca:8d:e2:a4:69:af:1c:d0:ca:
1c:0b:21:e2:e8:f0:a2:5b:7c:c4:f8:e7:50:b3:95:3a:4d:5b:
68:94:0c:0d:9b:20:1c:7a:29:43:74:3d:a3:c9:a9:c9:e4:09:
cf:dc:21:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9ADnXYI4FnBQxe8NMe76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OWJmOTdkYzc4MzQ5N2YzYzM3YmQ3YTg2ZTU5OTRhY2Vl
NzgxYjAwHhcNMjYwNDE3MDEwMDIwWhcNMjYwNDE4MDEwMDIwWjAzMTEwLwYDVQQD
EyhhYzUzZmJkMjllNWNkYzZjMGU4N2I3NDA0OWE4YjRiNTI0MzZiMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK79qxnwuFfsfLQk26p4F7+Snrtw
GV8wmmqw3Jx2Sm6aufB1lG0vsYkDE1mWjIcNw6no41smpgJgk6DOIMeUE4R4rsW9
rpLExvR9QcXQ6V6QXB0DLztoHMfGyDnudcUH5Adafs9Pm3XDeuw9gX3gO9opTSY6
FdtLdgWxn1Z4qROIa/MX+UzD0L+aZ0zxZz2ytDmLfErbmgGSAWZ2s6dtmzurs4x7
rCmk768Osh+kDIw1MV6Z+TpankEAK896HDvJVAPLEej6lu2Y6BIAaAYVIFkKOl04
g+51alju3PWp9h/JZlB9DazpJ7uf7haTCSB/v3zpvgRVSo4ZJgU0AikDtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxT+9KeXNxsDoe3QEmotLUkNrBuMB8GA1UdIwQY
MBaAFKab+X3Hg0l/PDe9eoblmUrO54GwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHB2NWZjZURTWDg4TjcxNmh1V1pTczduZ2JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85ZTIyYjgtNGViMS00ZDJmLWE4MDct
N2I5NGZiNDNiNjBhLzEvcHB2NWZjZURTWDg4TjcxNmh1V1pTczduZ2JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85ZTIyYjgtNGViMS00ZDJmLWE4MDctN2I5NGZiNDNiNjBh
LzEvcHB2NWZjZURTWDg4TjcxNmh1V1pTczduZ2JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiP5WwSh
vZO0RNSDmZMuWbJBA7Do++w9VSzsp6cyOHyb+Duz7MhY5lMiEsrcnbxrk1XTxTVL
0lcQncLNrO2T+K3r5lub9vj53LA4LKebN17tovKS0FFqLaZ8OxVFdNM2UaJ5axBs
OO+icNxKK8SCQTSv0iXLb0pwuJvGmukZg6u+IDmnaF1/l1uYobRacU9+bmKKoITj
0PnsYLBe8EvX/TS5FtS+eZUaIkiLfnlzRm1uv47eUnc9fNasgnZsHFRdqU2qVVYr
IohheWF3Ugfiyo3ipGmvHNDKHAsh4ujwolt8xPjnULOVOk1baJQMDZsgHHopQ3Q9
o8mpyeQJz9whug==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:04 2026 by rpki-client