Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File: ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier: UsJwORV4nnP37LjQUnNZWoQPbNKUJbLnwwguz5OaDn8=
Subject key identifier: FA:14:A2:24:B1:0F:4C:8B:46:E3:3A:FE:A6:EE:41:0C:54:0A:52:43
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial: 019CAAFD802D9EF7889B195021FF550FAAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:01:05 +0000
Manifest this update: Sun 01 Mar 2026 20:01:05 +0000
Manifest next update: Mon 02 Mar 2026 20:01:05 +0000
Files and hashes: 1: KImIqYFb29b3KU70kYQGUgTjwXY.roa (hash: OkLquITh6UHZc59jyD3mteFTooB7+Z7+DnhjU4+WM/A=)
2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: s8CslxVQMlitrK1adgwWpRwohnwsl92yIS00eWLXd6w=)
3: wJhrCbB9HaKVaJIOdovc6nXak8I.roa (hash: DNB7tfiEdhadZKuh5CRqn/FIXhNGqeMKaW1BhhcXm8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:80:2d:9e:f7:88:9b:19:50:21:ff:55:0f:aa:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Validity
Not Before: Mar 1 20:01:05 2026 GMT
Not After : Mar 2 20:01:05 2026 GMT
Subject: CN=fa14a224b10f4c8b46e33afea6ee410c540a5243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:5b:73:1d:ab:26:6e:f3:74:dd:00:69:da:
c5:08:97:2d:3a:be:b5:41:1d:9e:c9:22:0b:17:0f:
6a:4e:fc:9b:0e:0e:1e:8e:9b:c7:f4:59:31:89:34:
67:97:d6:18:5e:c7:17:e3:01:9c:f7:0e:49:53:c4:
c7:75:19:ea:66:a2:e2:1d:66:8a:b6:2b:91:00:fe:
30:5b:00:83:e2:1c:ba:38:06:26:de:16:03:93:57:
10:b5:63:69:4a:dd:1b:d2:86:a4:01:2a:91:e2:32:
ba:c1:58:ca:d8:92:e2:14:55:19:53:cd:f2:7c:49:
1e:dd:8d:7f:75:e1:9a:de:51:1c:33:9c:f1:e4:20:
47:dc:9d:cb:70:d2:9b:c0:31:16:65:b8:31:8f:01:
1e:b8:7f:a8:4c:ad:9b:4f:23:34:fc:88:4f:d9:df:
b1:a7:d3:82:4d:81:b3:63:1f:26:f5:7f:4a:19:33:
48:5c:31:cf:6f:16:30:bf:d7:d9:7e:e4:f0:1f:c5:
a3:57:20:33:80:f2:0a:14:58:59:51:4f:95:31:e9:
01:1c:a1:ff:ad:9d:10:84:17:fb:1d:54:0c:d4:b9:
89:a4:b4:8b:07:c4:c5:ed:94:f7:a6:4b:14:64:1a:
a9:5d:93:64:57:52:94:16:27:82:f1:81:63:c1:f9:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:14:A2:24:B1:0F:4C:8B:46:E3:3A:FE:A6:EE:41:0C:54:0A:52:43
X509v3 Authority Key Identifier:
keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a5:b2:ec:be:ff:98:3f:5b:84:03:62:85:6e:13:f1:fa:f1:
a9:cb:b9:f7:47:18:b0:a7:e5:22:2c:73:b0:fa:4f:5c:0a:ba:
79:a7:8c:0c:68:72:f0:65:a2:4a:dc:b4:a8:2a:cb:34:98:34:
5b:56:d2:d5:39:5a:b8:e8:16:e0:98:a1:1b:db:fd:51:51:31:
97:85:f4:15:1e:f7:41:93:08:42:ed:24:e6:2d:79:1d:ee:fa:
be:e2:7d:ae:4d:97:f9:70:54:06:19:b7:09:38:e1:a3:bd:22:
b6:ad:71:c2:ae:76:2a:b0:18:67:78:58:4d:8c:c9:06:37:a2:
aa:c1:05:08:2d:7d:2a:e7:83:ab:28:97:25:59:a9:d0:f5:ff:
d9:4e:7b:50:8a:7b:d9:58:aa:66:8a:a6:60:59:04:f1:a5:f7:
3e:85:d6:33:3c:13:6b:08:92:51:f9:71:33:01:ec:45:61:85:
d5:e9:dd:05:4b:e8:33:7e:f2:94:3a:b6:0b:7e:d1:35:94:1b:
34:84:4c:a0:c7:6d:a7:4d:6a:af:b5:ab:81:91:7d:6f:7f:fd:
af:a1:fd:92:b7:3f:af:72:1a:da:d2:70:b2:8f:76:2f:5f:0c:
70:76:39:af:8d:72:78:6b:09:67:09:02:f5:1c:99:18:4c:12:
ac:d5:b3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:19 2026 by rpki-client