Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
File: pPP3bj7O8kl-ET6ju664U_YvWP4.mft (raw, json)
Hash identifier: yWte/OO2CmJUFk7095FNLyeb6RUvzBAy5wqwPWz+HvM=
Subject key identifier: AB:29:8D:62:D8:8D:EB:16:69:FE:D9:B8:5C:5E:AA:48:5F:A6:E1:AA
Authority key identifier: A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
Certificate issuer: /CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Certificate serial: 019CAE6C2B6C67CBBF0A362DF9F16EE04482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
Manifest number: 0EDD
Signing time: Mon 02 Mar 2026 12:00:50 +0000
Manifest this update: Mon 02 Mar 2026 12:00:50 +0000
Manifest next update: Tue 03 Mar 2026 12:00:50 +0000
Files and hashes: 1: O4sAh3xkbKW8_1R4ygmeymIKXCo.roa (hash: 3590EWq8UBW+NRuB0qqAJxA1WOGNS1btb/g2MoAacyw=)
2: pPP3bj7O8kl-ET6ju664U_YvWP4.crl (hash: IWgpsDGKYaMmJ3Jdqesw5Nwsh2wzmoTZ77FtL1Su4v4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:2b:6c:67:cb:bf:0a:36:2d:f9:f1:6e:e0:44:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Validity
Not Before: Mar 2 12:00:50 2026 GMT
Not After : Mar 3 12:00:50 2026 GMT
Subject: CN=ab298d62d88deb1669fed9b85c5eaa485fa6e1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b9:f4:dc:59:ca:0b:29:6f:50:3c:1b:1a:03:
9d:ac:a4:1e:1f:d0:a9:6d:86:c9:6b:8f:1d:82:1f:
d3:82:a1:d0:dd:2d:88:62:b7:0d:85:57:0a:57:fa:
88:74:33:d2:94:28:39:bc:3a:52:65:97:5e:75:a0:
9c:99:02:c9:e6:37:42:b6:3c:c9:f2:b8:32:e6:fc:
eb:48:8f:aa:a3:44:68:18:ae:8a:43:71:32:44:fa:
dd:ea:fe:c1:5a:9c:11:3c:47:35:52:2e:d5:7b:5b:
1a:13:7e:2e:0d:da:5f:1b:7c:aa:9c:29:24:2c:e5:
9f:d4:ab:a2:37:4b:dc:5c:60:4f:0d:6c:80:33:89:
6c:89:6c:6a:83:51:bb:26:29:4e:3b:b6:2f:5d:2e:
21:cf:1d:e6:5a:f1:f4:6a:d5:50:ae:ea:31:99:9f:
20:1f:89:fa:72:6e:d1:8e:be:39:54:4e:36:d8:f4:
c8:90:a7:09:cc:76:da:8d:e3:d8:de:c4:a0:43:87:
df:ec:45:dc:d8:29:97:17:fb:90:d9:1b:cd:16:1a:
0b:4c:eb:d0:46:3b:3d:15:e7:74:63:5c:a2:ad:79:
5c:14:2f:8d:18:a0:69:60:21:d1:cf:05:57:02:a9:
56:a3:5b:0e:aa:c5:ac:bb:1e:cd:8a:44:0c:77:f2:
7a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:29:8D:62:D8:8D:EB:16:69:FE:D9:B8:5C:5E:AA:48:5F:A6:E1:AA
X509v3 Authority Key Identifier:
keyid:A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a5:27:9b:2e:f2:a7:9f:b2:43:37:91:21:f7:54:75:b3:e9:
03:b6:15:6e:cb:0c:69:bf:f3:fc:7c:36:8e:a3:f0:9e:89:e9:
aa:56:30:1b:18:7d:5c:36:4d:f9:13:17:50:50:ce:79:4e:61:
c3:c1:1e:25:7b:c9:c0:dd:9c:d3:1d:e7:4b:be:c5:53:4a:aa:
00:e6:52:d2:00:a4:d3:63:09:b4:eb:d8:90:27:6c:9c:8c:8e:
44:9d:1c:dc:a9:94:6b:ae:0f:4e:3d:5b:32:b4:0c:ac:27:e7:
9c:49:d2:0a:a2:30:1a:69:ce:5c:f2:76:bf:66:2d:49:f3:71:
7c:d1:49:23:1b:5d:6f:d6:41:57:50:50:06:48:e9:d7:39:c9:
70:6e:9b:4d:22:d5:c8:44:82:4c:4f:6e:2d:fb:25:51:7b:5e:
d3:85:30:ae:da:14:2b:96:05:c1:48:9a:99:17:b3:07:ee:21:
16:2f:6a:00:72:10:b1:87:9e:8a:77:e1:ee:36:66:95:55:82:
16:e6:53:5b:aa:fd:87:a6:cc:84:5c:21:23:e8:f9:63:a1:ed:
41:b0:74:40:12:f2:78:a5:dc:3f:59:82:f8:36:90:35:b9:2b:
1e:be:68:22:bf:f9:cb:db:d7:f5:d5:11:a2:87:a5:ff:16:ad:
45:9a:c5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:54 2026 by rpki-client