Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
File: pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json)
Hash identifier: vRX8ECJQMZquO/N2QWLvYjrflry31al6GfmA3FQGCRE=
Subject key identifier: 74:EF:C6:02:D2:32:9F:06:C9:B4:6A:F6:59:90:8B:C6:55:58:25:46
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Certificate issuer: /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial: 019D262839E542B5EB28B10A2D1B79925A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
Manifest number: 0B10
Signing time: Wed 25 Mar 2026 18:01:03 +0000
Manifest this update: Wed 25 Mar 2026 18:01:03 +0000
Manifest next update: Thu 26 Mar 2026 18:01:03 +0000
Files and hashes: 1: 1-Ea5LT1K8F6WUZhY_U_lKnZaXcY.roa (hash: x7c/Qt2ZfBYPaYf0LxG+u+LvENTrFJB+iJAEDKpvDxM=)
2: LC9OsZPmFyHE-17gPISnP-rIekM.roa (hash: aLAimHcWzq8XoGgwDQKHrZcmH3h9ns5QyipqRfZdJDQ=)
3: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: ZPy3Gy5ICh5LL0/51OYUa7XwdRP1DCePQOUcalf6PvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:39:e5:42:b5:eb:28:b1:0a:2d:1b:79:92:5a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Validity
Not Before: Mar 25 18:01:03 2026 GMT
Not After : Mar 26 18:01:03 2026 GMT
Subject: CN=74efc602d2329f06c9b46af659908bc655582546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:80:82:41:b7:77:a8:b0:af:fd:a3:ce:ee:
dc:eb:ce:d7:ab:13:31:c1:a4:21:0d:f8:25:e6:69:
f6:0d:a7:bc:95:fc:d6:60:4f:dd:72:89:c1:4f:c4:
50:56:79:ea:5f:1b:b0:3b:79:3e:af:87:0b:3c:b4:
38:60:e4:43:30:da:4b:07:87:f1:5b:43:15:a3:31:
62:45:59:7c:bd:32:bf:07:46:87:af:ea:d2:92:9f:
e8:43:1e:66:38:63:bd:18:68:a5:c6:1c:fc:32:00:
1e:ed:f0:bf:f6:53:8b:18:63:d0:de:5c:e4:14:28:
cd:6d:54:b6:f1:8f:45:d9:81:d8:48:dd:35:f8:f4:
fe:b6:71:76:90:98:c8:30:5c:8e:7a:42:c2:08:fe:
37:de:ec:6a:7d:61:9a:f7:6d:cb:32:cd:8c:29:93:
e8:dc:32:1c:11:d2:5f:67:a5:04:c0:15:75:cd:64:
5a:c9:d0:86:22:f5:c6:60:f9:0d:88:ba:4e:bb:5c:
c2:0a:3e:5a:dc:0e:8c:f7:2f:9e:ca:2c:f6:99:7f:
cc:d4:3e:78:c0:b4:49:ca:1e:fa:6d:7c:68:af:9e:
b3:cc:72:20:a3:ef:f1:41:11:b2:61:9c:c7:2e:31:
c6:cc:7b:ae:0e:0e:03:c0:fc:3e:62:13:c9:1f:81:
68:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EF:C6:02:D2:32:9F:06:C9:B4:6A:F6:59:90:8B:C6:55:58:25:46
X509v3 Authority Key Identifier:
keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b0:d9:0d:14:45:fc:d6:d7:5f:62:91:71:d3:4a:bc:6d:be:
2a:6f:6f:41:1c:49:4f:ec:f0:3a:65:0a:9d:e9:39:95:3b:58:
bf:f5:42:f1:65:eb:2d:14:3d:17:24:d4:85:58:fe:47:fc:5e:
21:62:ef:e2:a1:0e:41:0f:bc:81:c5:bd:28:87:4a:59:d9:c3:
3b:64:50:eb:d2:19:c6:d2:5e:9b:26:2f:6f:f5:8d:77:57:cd:
a0:10:13:13:a7:33:6a:8e:fc:c4:d8:4d:ea:86:54:5c:8f:f2:
e3:c1:da:49:29:d5:cb:2f:89:a9:2f:a7:f4:c1:3a:c5:84:57:
09:15:f2:af:29:b7:72:77:dc:af:db:05:54:87:c1:0b:d7:66:
08:50:1d:d7:af:6c:69:a6:cb:7d:19:bf:ed:2e:66:8a:58:2d:
cc:b8:f0:af:1d:5f:b2:ac:4a:08:59:af:d5:81:db:b8:1b:a2:
5f:80:61:04:ee:ae:58:d7:5d:15:11:af:c1:1f:86:71:3f:66:
fc:4d:37:62:61:ff:26:53:cd:aa:af:31:27:6a:f0:f6:41:ec:
c4:84:b5:d2:af:42:31:5d:02:20:ab:be:f2:51:b2:d6:be:0d:
27:1e:19:7e:a6:0b:0c:54:f1:e3:2b:b0:27:33:a7:9d:ec:c1:
21:83:27:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:07:10 2026 by rpki-client