Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
File: ppv5fceDSX88N716huWZSs7ngbA.mft (raw, json)
Hash identifier: id7Dte8xyD3q5FmXE0ovwk8kmP83Ssy2f7LZn0KTqw8=
Subject key identifier: 21:9A:D5:EF:EA:32:19:62:CE:4F:6C:1B:D6:B1:46:A2:3C:35:D4:35
Authority key identifier: A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
Certificate issuer: /CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Certificate serial: 019D2AE0E5CB5A40C77B288B140E5974458E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
Manifest number: 1280
Signing time: Thu 26 Mar 2026 16:01:14 +0000
Manifest this update: Thu 26 Mar 2026 16:01:14 +0000
Manifest next update: Fri 27 Mar 2026 16:01:14 +0000
Files and hashes: 1: ppv5fceDSX88N716huWZSs7ngbA.crl (hash: flsImciKpX4crK4edkQOnshtkYP0uzvf2NOOAeZrYho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:e5:cb:5a:40:c7:7b:28:8b:14:0e:59:74:45:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Validity
Not Before: Mar 26 16:01:14 2026 GMT
Not After : Mar 27 16:01:14 2026 GMT
Subject: CN=219ad5efea321962ce4f6c1bd6b146a23c35d435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:44:83:b1:1a:98:52:86:67:3b:e9:fd:fa:
f4:51:36:dd:7b:e0:1e:e2:ae:b4:fa:73:d7:c2:88:
3f:a5:00:24:db:3b:bf:3a:8d:7a:dc:68:d1:74:08:
38:d8:47:85:66:bf:42:90:75:e7:be:02:a7:27:2a:
12:9f:aa:0c:fe:f5:71:08:8a:1e:93:a9:06:22:af:
e6:bd:16:ad:4f:bb:1a:f4:9e:4c:27:13:1a:1b:e6:
89:d3:c8:8a:49:aa:73:cd:a0:6c:3e:b7:58:d1:83:
f5:8b:e6:06:4b:46:7f:d5:09:2c:fd:04:b8:30:e3:
7c:40:50:b0:c9:24:a1:1d:75:cc:94:a6:9a:50:8c:
62:7a:5f:7c:34:fd:d0:08:2d:79:b3:2a:99:09:93:
71:e1:54:58:2f:3b:fa:36:23:6a:5b:ea:0b:b3:e8:
a1:5d:37:a3:83:58:25:47:58:4a:40:8f:13:a6:2a:
70:82:bf:ea:19:38:6d:1e:37:71:32:34:3b:2b:d1:
e0:ac:ff:38:91:e2:93:74:05:8e:f6:00:a3:82:3b:
87:9c:99:bd:70:d9:1c:6b:fb:c2:27:43:fa:b5:aa:
f9:72:31:e6:5c:c6:df:b5:c7:19:36:ff:6a:90:a5:
63:31:61:45:9a:d4:9e:8a:1e:77:fd:88:6b:eb:d4:
28:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9A:D5:EF:EA:32:19:62:CE:4F:6C:1B:D6:B1:46:A2:3C:35:D4:35
X509v3 Authority Key Identifier:
keyid:A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:52:88:8c:01:4f:91:37:15:8a:1b:d4:18:a3:7f:ac:10:02:
cb:38:e4:a1:67:16:de:b4:68:d3:f0:8c:f9:d4:dd:db:a0:b1:
44:6b:23:9a:52:0d:f6:32:39:b1:cb:0d:25:b4:b0:2d:43:72:
76:f4:eb:dd:f7:77:2f:ca:15:bb:49:d4:ae:3f:11:19:f9:66:
90:b6:fb:5b:e2:4f:c3:01:95:84:61:e4:b4:81:20:21:69:a5:
89:83:86:15:03:2c:b8:7f:3d:27:35:8f:ac:f0:8d:a2:9a:d4:
27:d2:e2:9e:9f:c3:45:24:e4:3c:6d:82:ad:1b:5f:f4:86:e3:
da:dc:f8:54:5e:f5:aa:d3:db:a4:84:6e:c6:81:ac:0a:f8:10:
a4:a9:b3:d0:a1:91:ad:6d:89:d7:86:9b:7e:7c:4f:85:b1:fc:
83:ee:dc:29:7f:b5:46:e6:1e:51:02:86:52:ec:4e:de:eb:ca:
03:c8:03:7a:30:31:34:ad:03:a6:2d:8b:7b:d3:34:1d:65:67:
fd:e1:c6:70:b0:01:ee:ee:a5:d8:d3:93:d4:a6:42:52:91:cc:
35:8a:07:b9:d8:bc:74:25:01:2f:02:e4:41:21:d3:75:64:91:
a8:8b:e8:b4:92:84:0d:7c:a3:cd:fe:db:6f:d3:3e:78:90:27:
ed:d6:05:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:50 2026 by rpki-client