Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json)
Hash identifier: swp3uwR6gjCda5SYvItOYmfLCyXOfTEIlz2ImRFlyF8=
Subject key identifier: A2:3A:7D:2E:5F:A6:CB:0C:98:C4:B9:94:65:53:DA:99:D8:D5:DA:95
Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6
Certificate serial: 019FAC3F104C08658D46257968CFA6FCDFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
Manifest number: 036F
Signing time: Wed 29 Jul 2026 05:00:41 +0000
Manifest this update: Wed 29 Jul 2026 05:00:41 +0000
Manifest next update: Thu 30 Jul 2026 05:00:41 +0000
Files and hashes: 1: jYQejTs_VCB1cpCr7qrPeVI5_VI.roa (hash: RuEfXGQ8FdYs+It13SdSHwiFRFM5ZGec+HI06Kuq/Ik=)
2: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: oPuc2MxzZYfp78ogYKWuueRrPx18hnCf3NZxmlJaqwU=)
3: sIQZHyrMKrx0aGLhGaxyLwG43WI.roa (hash: 1DHs9q3U0NDHbbr1v8UvKlsFj4sQc1jDRLQRmJtbDIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:10:4c:08:65:8d:46:25:79:68:cf:a6:fc:df:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6
Validity
Not Before: Jul 29 05:00:41 2026 GMT
Not After : Jul 30 05:00:41 2026 GMT
Subject: CN=a23a7d2e5fa6cb0c98c4b9946553da99d8d5da95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:71:68:ac:9d:c6:47:2b:a8:f4:21:c4:ba:19:
51:0b:af:44:29:42:b3:69:05:b9:c4:86:a8:4f:54:
83:ad:b3:a4:ae:b1:95:7c:43:0f:51:09:24:83:08:
7e:b5:ca:00:05:c4:6b:86:e8:ca:ee:db:99:06:c8:
f5:50:27:33:53:43:6a:4f:b8:74:1a:dd:01:2d:2c:
a5:03:f8:e1:a4:2e:b1:13:c8:41:99:30:6f:c7:c8:
5f:e5:41:48:c8:02:f7:f7:5a:78:81:5a:a6:09:47:
c6:e9:d9:58:5f:ba:cb:d1:91:ef:1e:4c:7c:da:40:
d1:5d:b5:e8:f6:a6:e1:24:03:fb:6d:90:8a:23:dc:
8b:ab:e0:67:af:2f:87:06:80:50:f5:8d:f6:17:71:
c6:5f:b9:34:84:9b:03:7c:b0:4b:7c:2e:02:35:1e:
1c:57:3a:fe:62:a7:6e:21:57:19:13:15:0f:2e:a2:
6f:a8:ff:5a:07:77:1d:fe:1d:b4:a0:37:2e:9d:e0:
9c:f1:fb:d5:3b:21:3a:1a:49:2c:27:38:c1:ac:16:
5e:76:a3:0c:d1:82:52:1c:e1:66:d2:a5:2e:16:ce:
e4:f5:93:79:b9:24:25:0f:3a:9d:7f:27:3b:e9:f8:
e6:6d:3f:84:a6:00:be:d6:86:a3:43:3e:c9:fd:0d:
b0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3A:7D:2E:5F:A6:CB:0C:98:C4:B9:94:65:53:DA:99:D8:D5:DA:95
X509v3 Authority Key Identifier:
keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bb:98:5c:ce:39:fe:b4:3e:f0:20:7c:04:02:ac:8d:26:dc:
98:7b:d5:da:47:77:8d:32:b3:bd:36:92:c9:c4:e9:ce:d4:2a:
d1:62:0c:73:36:83:de:45:f8:da:cc:83:37:40:eb:be:17:11:
65:c1:b4:11:f0:69:52:a0:9f:91:b8:6e:08:50:23:6b:e8:f9:
0f:c1:d4:ac:a6:60:84:22:04:89:75:94:cd:9b:22:81:97:0d:
c9:53:41:c1:12:c9:1b:9c:96:30:83:96:82:23:f3:3c:86:ac:
47:d0:b5:94:49:81:c1:0c:22:e7:d4:ac:4b:32:27:bf:5f:85:
aa:96:1b:28:7a:84:a9:61:2b:5c:c6:ac:13:c5:4a:de:83:72:
77:a7:31:37:11:df:ab:3c:d9:56:31:4a:1b:98:e3:a3:c2:78:
5c:2f:3e:3f:4b:54:52:f5:36:7f:20:95:48:9e:b1:e6:39:94:
a4:cd:61:80:fc:f7:c5:1e:91:ec:99:29:33:7d:d0:ca:ea:db:
ec:a3:d0:14:31:3f:f4:5b:05:d4:11:06:18:71:b5:9b:7a:15:
87:0e:21:03:03:c5:1e:52:9b:52:f3:6f:d6:35:e4:3d:2a:4f:
c9:4b:0f:c6:22:69:0b:04:80:7f:a2:7e:1f:b0:6a:17:45:64:
14:29:83:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:53:18 2026 by rpki-client