Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/3d6590-c437-405d-a8d9-a882e43b318a/1/pp4xj_I3IGkxoQWbjZWG66iH8yg.mft
File: pp4xj_I3IGkxoQWbjZWG66iH8yg.mft (raw, json)
Hash identifier: REfq7GZB8scWbt/me0+6hLZNvZ4T7sDRuSatfGOgI2I=
Subject key identifier: 4B:62:8A:08:12:5A:A3:15:43:38:F3:19:CB:80:51:FE:4D:C4:DD:4C
Authority key identifier: A6:9E:31:8F:F2:37:20:69:31:A1:05:9B:8D:95:86:EB:A8:87:F3:28
Certificate issuer: /CN=a69e318ff237206931a1059b8d9586eba887f328
Certificate serial: 01A0E777523435CC014D84EAC970C432045E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pp4xj_I3IGkxoQWbjZWG66iH8yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/3d6590-c437-405d-a8d9-a882e43b318a/1/pp4xj_I3IGkxoQWbjZWG66iH8yg.mft
Manifest number: 0119
Signing time: Mon 28 Sep 2026 10:02:31 +0000
Manifest this update: Mon 28 Sep 2026 10:02:31 +0000
Manifest next update: Tue 29 Sep 2026 10:02:31 +0000
Files and hashes: 1: HBb1HdbTpkkZ4I4n2Q6fg9MiULg.roa (hash: pkve3g53jmybFKOaGXzmIhJtmGYscgIQMcLuncFXZzg=)
2: pp4xj_I3IGkxoQWbjZWG66iH8yg.crl (hash: DzwZi0wMrszwWkvahZJtFKMcXgFC7U4MFyjtjtQhCBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/3d6590-c437-405d-a8d9-a882e43b318a/1/pp4xj_I3IGkxoQWbjZWG66iH8yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/3d6590-c437-405d-a8d9-a882e43b318a/1/pp4xj_I3IGkxoQWbjZWG66iH8yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pp4xj_I3IGkxoQWbjZWG66iH8yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:77:52:34:35:cc:01:4d:84:ea:c9:70:c4:32:04:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69e318ff237206931a1059b8d9586eba887f328
Validity
Not Before: Sep 28 10:02:31 2026 GMT
Not After : Sep 29 10:02:31 2026 GMT
Subject: CN=4b628a08125aa3154338f319cb8051fe4dc4dd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:46:18:33:01:ec:5f:0e:3d:05:69:3e:cf:
bf:f0:e6:ba:c1:22:9e:19:ed:fe:e3:a0:a9:b2:36:
e0:b9:b5:a1:30:76:3f:1b:d1:b8:23:89:4b:bd:78:
47:9b:34:bb:d6:1b:40:d4:ec:d8:ae:86:4d:d5:62:
97:8c:38:42:1e:ef:aa:00:c1:00:2a:df:06:cc:3a:
7a:6e:9c:18:b8:c0:48:d7:4e:c1:83:df:39:29:4a:
1e:8b:1d:36:1f:32:f0:c6:f6:89:a6:c5:49:19:ea:
a1:91:51:d5:66:18:5f:68:f3:fc:a0:ae:8c:8b:de:
ed:79:54:2e:df:45:76:11:48:cd:e8:77:0a:81:2f:
03:30:f6:c0:9d:c8:eb:af:e0:e6:79:b5:8a:dc:9c:
fa:61:8f:6a:78:2c:6d:d4:99:5f:89:f5:c1:1a:7a:
24:e7:96:98:08:90:0e:6d:b9:73:90:8c:7b:89:49:
df:24:e1:05:d1:5f:4a:3e:8a:4f:2b:a1:a2:e7:64:
44:61:b5:a2:2d:93:22:14:73:da:40:d8:2d:79:81:
7f:ef:0c:5d:48:5e:62:1d:c8:b4:bf:e2:58:84:6d:
94:11:c7:62:2f:cd:dc:6b:f8:bb:ea:fe:b7:5a:85:
b4:9e:49:06:55:0a:0b:9c:cd:9a:61:91:65:0b:84:
6b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:62:8A:08:12:5A:A3:15:43:38:F3:19:CB:80:51:FE:4D:C4:DD:4C
X509v3 Authority Key Identifier:
keyid:A6:9E:31:8F:F2:37:20:69:31:A1:05:9B:8D:95:86:EB:A8:87:F3:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pp4xj_I3IGkxoQWbjZWG66iH8yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/3d6590-c437-405d-a8d9-a882e43b318a/1/pp4xj_I3IGkxoQWbjZWG66iH8yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/3d6590-c437-405d-a8d9-a882e43b318a/1/pp4xj_I3IGkxoQWbjZWG66iH8yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:13:95:80:ad:a6:1b:56:8b:7e:b8:44:f7:b4:d4:d8:7e:32:
49:ac:72:7f:f8:9d:b9:c3:d8:61:ad:cb:cd:06:46:8e:a6:4c:
62:37:8e:98:42:f7:1e:c4:ab:2a:11:7e:7c:d6:c1:cc:7d:76:
12:76:bb:bd:75:85:4e:27:a3:08:be:6e:a1:a1:a4:67:ff:e6:
db:d2:c7:29:87:53:df:d0:a6:4e:bf:b1:c6:ff:84:f5:8d:e0:
54:8c:0b:e1:bd:fe:e5:e2:cc:84:0e:1b:70:5d:a5:46:5f:df:
e0:ea:9c:36:69:0c:a6:26:f6:7c:6b:5d:37:5f:50:a0:b4:84:
8c:dd:9a:98:8b:f4:f7:54:17:65:15:d9:b3:2b:c5:de:d3:ab:
44:33:e3:a0:bc:c7:e5:70:c6:b9:e9:8c:05:f8:28:0e:06:18:
ea:79:5b:93:c3:d4:95:6a:43:84:8b:70:a5:c2:a8:ef:6e:d1:
40:25:93:b0:b4:86:5a:d7:85:41:a7:fc:1c:92:fd:ca:a5:ba:
69:ee:6f:96:8d:26:f7:0f:f0:45:2b:3f:f9:98:2d:e9:4f:d9:
73:b3:16:0a:57:4b:8e:0f:b5:bf:9d:6d:d0:70:0f:03:89:23:
0a:88:d3:2d:ec:b4:27:ca:54:db:56:52:8f:60:9e:0e:b0:2d:
96:2f:d3:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnd1I0NcwBTYTqyXDEMgReMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OWUzMThmZjIzNzIwNjkzMWExMDU5YjhkOTU4NmViYTg4
N2YzMjgwHhcNMjYwOTI4MTAwMjMxWhcNMjYwOTI5MTAwMjMxWjAzMTEwLwYDVQQD
Eyg0YjYyOGEwODEyNWFhMzE1NDMzOGYzMTljYjgwNTFmZTRkYzRkZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntdGGDMB7F8OPQVpPs+/8Oa6wSKe
Ge3+46CpsjbgubWhMHY/G9G4I4lLvXhHmzS71htA1OzYroZN1WKXjDhCHu+qAMEA
Kt8GzDp6bpwYuMBI107Bg985KUoeix02HzLwxvaJpsVJGeqhkVHVZhhfaPP8oK6M
i97teVQu30V2EUjN6HcKgS8DMPbAncjrr+DmebWK3Jz6YY9qeCxt1JlfifXBGnok
55aYCJAObblzkIx7iUnfJOEF0V9KPopPK6Gi52REYbWiLZMiFHPaQNgteYF/7wxd
SF5iHci0v+JYhG2UEcdiL83ca/i76v63WoW0nkkGVQoLnM2aYZFlC4RrGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtiiggSWqMVQzjzGcuAUf5NxN1MMB8GA1UdIwQY
MBaAFKaeMY/yNyBpMaEFm42Vhuuoh/MoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHA0eGpfSTNJR2t4b1FXYmpaV0c2NmlIOHlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8zZDY1OTAtYzQzNy00MDVkLWE4ZDkt
YTg4MmU0M2IzMThhLzEvcHA0eGpfSTNJR2t4b1FXYmpaV0c2NmlIOHlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8zZDY1OTAtYzQzNy00MDVkLWE4ZDktYTg4MmU0M2IzMThh
LzEvcHA0eGpfSTNJR2t4b1FXYmpaV0c2NmlIOHlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhOVgK2m
G1aLfrhE97TU2H4ySaxyf/iducPYYa3LzQZGjqZMYjeOmEL3HsSrKhF+fNbBzH12
Ena7vXWFTiejCL5uoaGkZ//m29LHKYdT39CmTr+xxv+E9Y3gVIwL4b3+5eLMhA4b
cF2lRl/f4OqcNmkMpib2fGtdN19QoLSEjN2amIv091QXZRXZsyvF3tOrRDPjoLzH
5XDGuemMBfgoDgYY6nlbk8PUlWpDhItwpcKo727RQCWTsLSGWteFQaf8HJL9yqW6
ae5vlo0m9w/wRSs/+Zgt6U/Zc7MWCldLjg+1v51t0HAPA4kjCojTLey0J8pU21ZS
j2CeDrAtli/Tfg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 14:44:32 2026 by rpki-client