Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json)
Hash identifier: mcW/yZcEwzrD72xBkN9oNiUCVz4GiLOaNjast/FI+yg=
Subject key identifier: 78:74:93:B3:EB:F7:32:4E:C4:24:C3:76:2B:B5:48:C7:A3:1C:7B:F7
Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6
Certificate serial: 019CAFB64E7BD8D249E61FE8BD3E56FC7A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
Manifest number: 01E3
Signing time: Mon 02 Mar 2026 18:01:26 +0000
Manifest this update: Mon 02 Mar 2026 18:01:26 +0000
Manifest next update: Tue 03 Mar 2026 18:01:26 +0000
Files and hashes: 1: 1I_-5VjCM2_OFHsmfVkBJKpEPdw.roa (hash: 7CWmUvdasbnykf0DjiU7gRJL7RLpAGl2V8qgnv1X5p8=)
2: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: 8oNwTMHFpEcjs0FrZc/hWxsiP4/KhCH7lOlvL822ByY=)
3: sIQZHyrMKrx0aGLhGaxyLwG43WI.roa (hash: 1DHs9q3U0NDHbbr1v8UvKlsFj4sQc1jDRLQRmJtbDIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b6:4e:7b:d8:d2:49:e6:1f:e8:bd:3e:56:fc:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6
Validity
Not Before: Mar 2 18:01:26 2026 GMT
Not After : Mar 3 18:01:26 2026 GMT
Subject: CN=787493b3ebf7324ec424c3762bb548c7a31c7bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:31:1f:fd:5b:09:69:11:74:6a:d2:09:68:
59:83:b8:22:ef:7a:5e:c8:2a:42:76:2f:9e:8a:70:
0e:34:0f:76:37:79:33:a9:10:43:f3:1f:a6:80:a9:
3d:2c:d7:66:38:f3:4a:3b:60:0b:65:b4:03:aa:00:
b8:02:57:55:1a:ed:be:b3:7f:b8:de:07:89:b3:f3:
cc:9f:a2:25:7f:4d:1f:a8:9f:32:1f:2b:b5:a4:c0:
c2:f8:61:f9:bf:b7:83:5b:0d:02:f9:67:48:1c:95:
68:41:76:00:c5:e4:38:e7:fe:c9:24:f3:cf:3c:d8:
b6:68:23:6e:2b:a2:83:3f:70:de:11:af:c4:a4:06:
16:db:64:71:f9:74:3c:54:8f:a9:ab:19:15:b9:ca:
65:5a:3d:89:eb:a7:82:1f:4a:aa:b9:44:0e:53:56:
3f:37:cb:5f:72:a8:05:0e:ae:52:39:ca:32:bb:b4:
77:b8:19:fa:24:ea:65:aa:58:a4:70:22:ff:99:98:
07:fa:41:b4:5b:16:20:bc:e8:fa:2d:21:08:dd:75:
30:bd:e7:dc:38:05:38:77:a6:fe:59:33:44:17:eb:
04:f7:da:91:5b:ab:0e:97:d7:ae:67:f0:f2:94:d0:
01:d8:77:6a:fd:cd:d8:db:4a:77:73:bd:65:fe:6e:
35:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:74:93:B3:EB:F7:32:4E:C4:24:C3:76:2B:B5:48:C7:A3:1C:7B:F7
X509v3 Authority Key Identifier:
keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e9:45:ab:d5:d5:47:e5:ab:06:53:b8:fe:fb:02:98:3f:9c:
45:b0:ce:0c:86:0b:99:07:96:da:54:71:76:79:ff:70:b1:bd:
d2:46:80:3d:c6:58:ff:13:c1:03:e1:3c:ff:01:6c:d9:bd:3d:
bc:dd:b2:61:ce:18:e4:f5:6c:6e:7c:21:6c:c8:7e:33:ed:3b:
6b:78:36:10:d6:d8:1a:2a:85:de:98:02:dc:7a:1c:5b:ab:40:
0d:29:da:f3:ad:17:f7:7f:64:76:f9:50:31:be:c3:9d:e2:cb:
b4:cd:bf:12:34:4f:f6:4c:86:d0:7d:ba:bc:05:97:26:86:1e:
06:cf:89:ce:ef:26:f6:aa:5e:66:9c:ac:81:42:a9:7a:78:fd:
35:16:e7:11:33:9d:2f:88:9d:91:8a:85:2c:60:58:2f:32:6f:
ca:f9:f3:7d:d6:e9:15:03:5d:00:44:f4:68:be:e2:91:ed:7b:
7a:fb:f4:e8:ad:2f:ac:20:e7:83:36:11:2f:62:de:8f:9d:3a:
9b:15:ad:40:9b:e5:77:c4:4d:e2:3e:af:cc:7b:07:e9:b0:ac:
f4:7d:39:a8:7a:4b:40:e2:bd:b3:7b:4e:1e:fb:6c:10:1b:ee:
93:9f:c7:28:e2:f8:50:7c:09:b0:17:73:e4:f4:60:df:36:7d:
04:df:0d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:30 2026 by rpki-client