Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File: ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier: /Bzdy+iUOzxgFzYREghPLkCCGXJliOL2VNhDhXpS8Tw=
Subject key identifier: 35:6D:DF:E3:4D:12:59:75:80:FE:37:8A:34:33:56:B7:CB:CD:52:3F
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial: 019D9A7530AAAB472B561B0DBC81576F9D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 08:01:04 +0000
Manifest this update: Fri 17 Apr 2026 08:01:04 +0000
Manifest next update: Sat 18 Apr 2026 08:01:04 +0000
Files and hashes: 1: KImIqYFb29b3KU70kYQGUgTjwXY.roa (hash: OkLquITh6UHZc59jyD3mteFTooB7+Z7+DnhjU4+WM/A=)
2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: 1p//VZpkXYCxX0CmRvQ6dfeK5edjBgsNt/JP3Kg8bKc=)
3: wJhrCbB9HaKVaJIOdovc6nXak8I.roa (hash: DNB7tfiEdhadZKuh5CRqn/FIXhNGqeMKaW1BhhcXm8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:30:aa:ab:47:2b:56:1b:0d:bc:81:57:6f:9d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Validity
Not Before: Apr 17 08:01:04 2026 GMT
Not After : Apr 18 08:01:04 2026 GMT
Subject: CN=356ddfe34d12597580fe378a343356b7cbcd523f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0e:04:54:6c:0e:e6:0d:cd:71:42:e7:86:3a:
37:1f:30:32:f2:7d:21:84:2b:a3:82:ae:bf:df:3f:
03:90:d1:99:24:31:3c:a7:d1:34:a7:de:2c:4b:fa:
53:dd:4f:52:03:f1:4e:fd:39:32:97:82:d6:61:7e:
9b:42:d7:c7:84:f0:9f:1b:51:19:1a:2e:96:69:0f:
37:5b:bf:8f:ca:74:08:ba:94:17:d2:99:ea:dc:cd:
5d:cf:98:f3:2d:48:01:f0:f5:4e:d8:cf:6d:07:9e:
28:e7:e5:c7:5e:5f:1b:6a:58:64:2a:66:28:85:cd:
79:ac:05:97:32:1a:59:09:10:f6:1c:d4:a8:3c:f2:
a4:51:56:e3:58:25:59:b4:2a:1b:e8:36:ba:fe:0d:
73:d7:08:25:13:5b:7c:22:12:dd:b5:8f:d7:48:75:
e4:a8:3f:32:7d:ad:c1:ed:02:89:11:4f:ac:9c:74:
8b:57:4d:20:4b:6f:e5:01:3a:2f:6f:08:35:75:ce:
c4:b1:5c:a8:84:56:6f:64:fa:5a:d3:ff:b0:56:97:
6a:c8:43:e5:22:28:9b:85:04:4f:74:1f:18:92:5a:
fb:6f:0b:4a:8b:9a:27:2a:30:17:f8:8c:04:11:a5:
9a:90:4a:8c:72:b3:13:e2:32:9f:59:54:7b:7e:2b:
01:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6D:DF:E3:4D:12:59:75:80:FE:37:8A:34:33:56:B7:CB:CD:52:3F
X509v3 Authority Key Identifier:
keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bd:10:0e:dd:d2:ec:15:b6:88:11:b5:30:b2:2b:ee:e4:ab:
03:da:6d:6c:ea:33:6a:2e:c4:7d:01:50:1c:ad:f4:a3:f4:4b:
75:55:98:db:53:c9:18:53:ad:ff:b2:5e:7b:31:53:db:2a:53:
f8:7a:60:e8:a2:64:99:a9:db:96:f0:95:d0:42:5b:4b:6b:2f:
6b:60:9d:7e:7c:67:23:db:bb:11:16:12:91:86:34:1e:05:ec:
69:e1:c5:9f:c5:26:30:1f:a9:09:fc:a4:9f:95:34:47:05:54:
cb:0d:c3:3a:57:31:5e:b3:e4:b8:7f:10:c2:8c:fe:4e:93:74:
64:a9:41:64:f4:76:13:f2:52:b0:19:52:e9:c4:94:32:6e:8d:
ae:62:ea:d0:b1:e2:b7:76:ae:80:d6:72:eb:15:43:0c:b1:c5:
2d:99:08:6c:4f:04:f3:44:43:8f:39:ba:72:80:38:f4:e7:34:
f8:42:22:5f:ca:2d:de:9d:46:98:60:9c:de:6a:a7:3d:8b:da:
40:5a:a5:b6:f0:9c:6d:fd:1f:d4:6c:de:0c:e5:09:c6:53:a7:
7e:e0:87:b3:e5:cd:c5:76:e5:e5:26:5d:a8:4a:62:80:a8:ce:
3e:46:3e:83:f6:65:ad:37:6e:8f:47:e2:05:1f:10:f7:d1:c4:
28:74:a6:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adTCqq0crVhsNvIFXb51/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OTQ3NjgxZGEwZGI3ZmU3OTMxNWVjNmRiZGEyOGJmOGQ2
NjBmYzAwHhcNMjYwNDE3MDgwMTA0WhcNMjYwNDE4MDgwMTA0WjAzMTEwLwYDVQQD
EygzNTZkZGZlMzRkMTI1OTc1ODBmZTM3OGEzNDMzNTZiN2NiY2Q1MjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw4EVGwO5g3NcULnhjo3HzAy8n0h
hCujgq6/3z8DkNGZJDE8p9E0p94sS/pT3U9SA/FO/Tkyl4LWYX6bQtfHhPCfG1EZ
Gi6WaQ83W7+PynQIupQX0pnq3M1dz5jzLUgB8PVO2M9tB54o5+XHXl8balhkKmYo
hc15rAWXMhpZCRD2HNSoPPKkUVbjWCVZtCob6Da6/g1z1wglE1t8IhLdtY/XSHXk
qD8yfa3B7QKJEU+snHSLV00gS2/lATovbwg1dc7EsVyohFZvZPpa0/+wVpdqyEPl
IiibhQRPdB8Yklr7bwtKi5onKjAX+IwEEaWakEqMcrMT4jKfWVR7fisBFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVt3+NNEll1gP43ijQzVrfLzVI/MB8GA1UdIwQY
MBaAFKaUdoHaDbf+eTFextvaKL+NZg/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mNjQ5YTItNTE4ZC00NDU2LTk4YTct
MjNjM2RmODJjMjMwLzEvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mNjQ5YTItNTE4ZC00NDU2LTk4YTctMjNjM2RmODJjMjMw
LzEvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKb0QDt3S
7BW2iBG1MLIr7uSrA9ptbOozai7EfQFQHK30o/RLdVWY21PJGFOt/7JeezFT2ypT
+Hpg6KJkmanblvCV0EJbS2sva2CdfnxnI9u7ERYSkYY0HgXsaeHFn8UmMB+pCfyk
n5U0RwVUyw3DOlcxXrPkuH8Qwoz+TpN0ZKlBZPR2E/JSsBlS6cSUMm6NrmLq0LHi
t3augNZy6xVDDLHFLZkIbE8E80RDjzm6coA49Oc0+EIiX8ot3p1GmGCc3mqnPYva
QFqltvCcbf0f1GzeDOUJxlOnfuCHs+XNxXbl5SZdqEpigKjOPkY+g/ZlrTduj0fi
BR8Q99HEKHSmsA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:03 2026 by rpki-client