Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
File: PpvRijUxNTVm7RgUDK10GQW-r64.mft (raw, json)
Hash identifier: ctev0PysbhX123Eq9/i/JerNQhy4HvIHijwwe4h5AUc=
Subject key identifier: 81:CB:A5:5F:48:5E:E3:C7:4E:56:EF:B8:94:1E:ED:CA:EA:14:31:F9
Authority key identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE
Certificate issuer: /CN=3e9bd18a3531353566ed18140cad741905beafae
Certificate serial: 019D9DACEA92326E8ED005802B9AFA000B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
Manifest number: 016C
Signing time: Fri 17 Apr 2026 23:00:48 +0000
Manifest this update: Fri 17 Apr 2026 23:00:48 +0000
Manifest next update: Sat 18 Apr 2026 23:00:48 +0000
Files and hashes: 1: A2ExeyQHGNk51S6yOHeJr6XOVf4.roa (hash: GO30lk5aBIlBJaHx15f4eDa39AuOipkWS6SvYKidn14=)
2: PpvRijUxNTVm7RgUDK10GQW-r64.crl (hash: sQCzxVStQ/8lebeZJIkK2nJ/lqRVBXD/vkpz6ff6a2A=)
3: _Wx9ZdmaJOp3eTANlK2NIeFmYuk.roa (hash: bRwEhLFQbPYT/IaKYTgc19M1MjVlqvi4YYR+NLvZd8U=)
4: c9WYdkuX9vqM1-rZ5wrXob8ras4.roa (hash: ejB+bZrxr1eJ74m85KOaG7NFYs4ZFTEAPocrQGNRHSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:ea:92:32:6e:8e:d0:05:80:2b:9a:fa:00:0b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e9bd18a3531353566ed18140cad741905beafae
Validity
Not Before: Apr 17 23:00:48 2026 GMT
Not After : Apr 18 23:00:48 2026 GMT
Subject: CN=81cba55f485ee3c74e56efb8941eedcaea1431f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:cf:52:98:26:15:37:8d:bb:12:92:bd:43:
0b:33:6d:19:7e:b6:4b:87:2c:f2:39:36:34:f5:ea:
9e:a8:f4:49:d8:ab:ce:2c:ff:a6:46:25:c9:94:8d:
0f:06:fe:8e:7d:f6:d6:5a:a1:77:1c:64:b7:45:8a:
cb:1e:05:5f:f5:74:2e:4b:e5:14:07:4d:a8:04:ca:
35:ae:8b:9b:b2:c7:27:49:29:ac:d2:55:b3:0c:17:
7e:5b:5f:4a:a9:4b:1e:42:cb:e9:27:7e:cb:0f:ec:
ec:e7:d0:83:a8:f1:2c:29:e7:37:9c:99:e0:4b:f1:
bf:05:93:18:04:81:4d:bc:39:64:e0:92:4e:ca:dd:
b7:77:d4:2b:05:2c:da:4f:01:7f:dc:b2:49:ed:be:
da:b3:e7:b2:4d:5a:15:03:08:b2:0b:60:43:b0:90:
90:0f:2b:e7:ef:1c:91:06:cf:8a:a9:72:86:f0:c8:
dc:1c:b9:b8:0e:65:c1:79:ec:a0:40:2b:63:ad:b7:
79:24:22:1e:75:c2:9f:76:15:29:45:6d:07:7e:7a:
77:51:be:a6:03:4f:e8:d0:43:36:21:2f:11:ab:97:
08:68:c8:11:dd:aa:ba:38:e1:75:1e:31:76:c1:d8:
eb:13:53:65:cb:50:ba:0b:ed:e5:22:25:c9:59:01:
64:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CB:A5:5F:48:5E:E3:C7:4E:56:EF:B8:94:1E:ED:CA:EA:14:31:F9
X509v3 Authority Key Identifier:
keyid:3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d3:b9:a7:34:ce:ea:76:6d:49:5c:f0:5d:a8:43:fb:bf:2a:
5f:01:f7:72:14:aa:f6:0c:2b:10:a6:1d:30:1a:46:27:ba:da:
fa:ea:34:e5:75:54:e8:b3:d0:2d:59:f2:10:17:63:fb:df:8b:
3e:5d:e8:1f:37:ff:5b:b0:e9:5b:1c:36:7f:a3:5b:04:6b:19:
d0:c8:14:f8:17:18:70:51:03:a2:80:16:78:ce:40:63:86:d9:
42:d8:20:5c:90:a2:b2:4a:0b:d2:e9:84:64:64:1c:a1:22:0c:
fd:12:28:c0:96:bd:5a:db:46:aa:29:69:44:28:08:27:15:22:
19:d4:7e:a6:30:6f:3e:95:37:31:ea:0d:8f:09:e5:dd:8a:29:
de:16:85:64:03:c9:6b:6f:db:de:1f:26:59:3e:06:61:10:b5:
0a:4d:48:8c:dd:7c:f8:a9:fa:49:05:b2:85:d6:9a:aa:f1:21:
cd:74:2f:68:84:ec:cc:8d:a5:77:cb:76:6c:bf:0c:ec:1d:02:
9d:ae:3b:04:40:7a:66:0d:98:9b:dd:ec:f2:29:67:ab:61:3f:
8d:9e:f6:37:53:bd:78:97:7a:91:b8:34:e5:bd:d2:77:ad:f5:
9d:3a:7b:4b:bf:f0:8c:12:d8:21:3f:93:ff:a8:7a:e1:1c:2c:
4d:92:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:12:04 2026 by rpki-client