Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File: ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier: qiUrZL3F3rVx7DTXW7sJuniJedBKq40oqu6i66EiHCk=
Subject key identifier: D3:74:65:B2:98:DA:A1:3D:15:C8:99:B5:D7:A9:D1:D1:FF:AA:A5:C3
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial: 01A0DCBBE28B8466E3BC96343F72BA166B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 08:01:35 +0000
Manifest this update: Sat 26 Sep 2026 08:01:35 +0000
Manifest next update: Sun 27 Sep 2026 08:01:35 +0000
Files and hashes: 1: KImIqYFb29b3KU70kYQGUgTjwXY.roa (hash: OkLquITh6UHZc59jyD3mteFTooB7+Z7+DnhjU4+WM/A=)
2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: eqZFTyhAxwOUMFi3zEU7daWpotqToGokMldPd2DCB9U=)
3: wJhrCbB9HaKVaJIOdovc6nXak8I.roa (hash: DNB7tfiEdhadZKuh5CRqn/FIXhNGqeMKaW1BhhcXm8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:e2:8b:84:66:e3:bc:96:34:3f:72:ba:16:6b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Validity
Not Before: Sep 26 08:01:35 2026 GMT
Not After : Sep 27 08:01:35 2026 GMT
Subject: CN=d37465b298daa13d15c899b5d7a9d1d1ffaaa5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:17:88:6d:c3:31:02:c3:4c:80:33:85:41:
65:49:8a:ce:b4:86:71:e9:d6:9a:40:e1:15:43:1b:
94:5f:dc:7a:f9:95:48:cc:00:71:ee:a9:06:9e:6d:
18:a0:e3:84:fd:2d:ba:8e:3a:20:68:ca:b7:25:32:
c4:08:ee:15:8e:1f:d6:6a:11:a3:22:85:ff:55:38:
81:d1:a3:0a:ef:4b:a1:ef:5b:45:d7:6d:36:7c:fe:
5c:6b:58:5e:09:f2:73:25:17:9d:2c:4f:be:a1:73:
9a:52:c1:72:e5:e0:4c:59:ee:48:bd:a9:98:1e:e9:
af:7d:a3:c6:c2:fc:2c:08:a0:cb:be:36:43:1d:ce:
46:b1:2b:03:15:2f:13:58:61:f7:8d:69:0b:09:55:
82:6f:83:7c:9b:2a:81:e9:7c:21:b4:bc:55:19:ce:
af:21:9e:06:d7:33:f9:84:fe:80:e6:89:13:c1:88:
b6:e6:5d:13:ed:8f:4e:b3:87:da:cf:86:12:ae:20:
ce:68:22:84:57:f9:32:e3:6d:90:46:d4:39:1b:07:
e9:51:2e:f1:37:5a:db:c3:90:52:e0:e2:bc:63:4e:
00:27:75:07:89:48:0a:40:4c:cf:93:1d:59:8b:cc:
30:c2:08:28:7c:02:b9:ea:cb:97:2f:4d:ce:c9:96:
b4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:74:65:B2:98:DA:A1:3D:15:C8:99:B5:D7:A9:D1:D1:FF:AA:A5:C3
X509v3 Authority Key Identifier:
keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c4:88:5c:83:06:b0:e8:a7:50:eb:f9:7c:7a:68:c4:10:f2:
14:b2:41:2b:dd:3e:6a:25:e6:c6:6a:03:17:0d:e1:cd:e9:d3:
9c:55:a0:a1:ef:13:b1:4e:7c:76:44:c7:b6:f3:a3:ff:6a:90:
4c:fb:20:4a:4d:91:29:82:f2:72:3f:b6:cb:85:3a:d5:a3:65:
e8:b8:3a:90:59:48:ba:59:68:06:06:31:0e:62:96:05:34:15:
fd:8d:a6:69:03:c5:a8:8c:f7:e2:1f:7a:3f:0e:88:95:cc:ba:
a9:24:7a:2c:1c:e8:f6:83:0a:c6:96:c8:c9:7d:84:55:20:6c:
39:b0:36:ac:18:e7:34:9a:56:71:f3:3c:41:aa:9e:97:af:04:
ff:b4:0e:71:c8:9c:5e:6f:9f:5b:ce:e2:b5:2d:e3:f2:87:a8:
ef:d8:58:e5:06:56:ce:88:2f:48:6f:fb:fe:c4:93:95:30:81:
4c:ab:8c:6b:ca:a3:97:f0:b4:4c:76:db:6a:9c:67:38:01:89:
2d:40:83:08:66:1d:35:3b:fa:43:90:68:86:2e:03:60:29:c2:
f7:65:c1:c0:c8:c8:09:b8:4b:54:5b:4a:36:fa:73:32:cd:23:
85:ff:c8:d0:57:17:06:89:33:45:7c:c2:dc:dc:6f:d7:dc:93:
35:38:96:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:57:41 2026 by rpki-client