Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json)
Hash identifier: RHFN6wXN52pA6wyfuGVeB7hVpSZ9INmTZ1DSW+72QTE=
Subject key identifier: 78:48:9C:39:77:B2:79:C5:12:A4:30:D3:C5:EE:B3:13:E2:7F:A9:2F
Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6
Certificate serial: 019D9D3EFE598D032845201C26976DC86855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
Manifest number: 025E
Signing time: Fri 17 Apr 2026 21:00:44 +0000
Manifest this update: Fri 17 Apr 2026 21:00:44 +0000
Manifest next update: Sat 18 Apr 2026 21:00:44 +0000
Files and hashes: 1: 1I_-5VjCM2_OFHsmfVkBJKpEPdw.roa (hash: 7CWmUvdasbnykf0DjiU7gRJL7RLpAGl2V8qgnv1X5p8=)
2: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: nnHaIC4qRLo9ELV2Vr2usLmIM5sKb4K08mdPMWVq+JE=)
3: sIQZHyrMKrx0aGLhGaxyLwG43WI.roa (hash: 1DHs9q3U0NDHbbr1v8UvKlsFj4sQc1jDRLQRmJtbDIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:fe:59:8d:03:28:45:20:1c:26:97:6d:c8:68:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6
Validity
Not Before: Apr 17 21:00:44 2026 GMT
Not After : Apr 18 21:00:44 2026 GMT
Subject: CN=78489c3977b279c512a430d3c5eeb313e27fa92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:88:70:7a:b7:17:5e:10:2e:ac:c6:df:9f:
f5:bb:9f:7b:79:13:ec:6b:6d:20:c5:2e:45:8d:71:
48:b8:d9:fd:5b:0b:1e:76:7c:a8:b2:2b:f1:12:67:
f0:0b:e3:5b:02:1a:5f:6c:86:18:76:db:c6:6b:ee:
7c:58:3e:fe:13:ca:74:83:80:ee:42:76:e2:d3:77:
27:68:71:52:02:7b:e4:fc:62:87:0a:68:70:24:fd:
8b:43:dc:1a:1b:de:03:a3:75:77:13:30:f1:fd:81:
f3:7f:31:21:18:45:b0:d4:17:c8:65:81:24:f6:25:
38:25:07:63:b6:47:42:00:54:36:e1:ab:62:25:3d:
f8:8a:02:5f:75:ec:07:25:c4:fb:fc:37:c6:1b:55:
70:fb:0d:78:96:4b:b5:20:a5:c7:0a:e2:5c:94:4c:
40:3b:23:46:2f:72:ca:5a:b9:3b:d8:ff:cf:87:d3:
21:75:c1:e4:63:04:5f:c1:9c:f9:06:f1:26:b5:f7:
b2:4c:be:49:88:3f:8d:33:13:a5:77:db:fc:d9:97:
f3:27:db:c9:c7:04:69:6e:87:fe:b6:0b:88:f2:01:
ee:38:43:31:80:7a:f1:63:ec:45:42:af:ab:96:04:
6b:a1:c6:58:4c:36:23:e9:4f:c4:b4:51:61:01:a9:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:48:9C:39:77:B2:79:C5:12:A4:30:D3:C5:EE:B3:13:E2:7F:A9:2F
X509v3 Authority Key Identifier:
keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b7:db:7d:37:1c:93:40:5e:6e:d3:f6:1e:f4:5f:b3:76:23:
18:a4:a3:a2:5d:5d:c3:ab:d7:1d:df:1a:3f:ad:be:a0:73:c0:
f7:d4:12:57:07:2e:14:3a:db:04:bd:aa:19:e0:25:77:9e:f7:
f7:17:a3:07:bb:f8:f1:bd:5c:f6:38:46:0b:bd:bc:be:d0:23:
fa:0b:11:98:32:11:5a:75:74:5b:bc:09:44:96:67:75:e4:cf:
dd:5e:30:66:5b:cd:37:d9:e2:cd:cc:13:84:a5:81:17:72:ce:
12:c4:f7:01:c6:a1:c2:b4:c0:c8:8a:a0:9b:df:53:34:f0:64:
39:ca:04:eb:e0:f9:8b:6f:db:29:ff:4b:12:d1:79:08:e1:4c:
b6:48:76:40:a4:b3:e2:18:f2:75:cc:55:d6:c6:20:bb:58:b7:
a7:17:07:52:15:39:d1:56:0e:eb:83:f4:59:ae:ba:4f:d2:5e:
73:e0:dc:72:41:4d:86:10:20:e1:e3:2c:19:14:c7:4c:06:89:
c5:a9:ab:8c:e4:8d:4b:4f:d5:26:aa:cf:ad:51:31:1d:03:c7:
bd:4d:ca:41:e4:13:ae:97:c5:43:a3:67:b0:a7:84:d9:0d:09:
9a:0e:d5:15:09:d7:b5:31:59:8b:b9:4f:82:a4:f4:54:56:7e:
cb:75:32:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:41:27 2026 by rpki-client