Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json)
Hash identifier: Mmj9g4ndQUropv8S0rHBcbR95WWJ60iDZ64Ypo3hZUM=
Subject key identifier: 74:C7:4E:9E:7B:52:15:9A:9A:DD:DC:63:F3:7B:AA:92:71:69:E6:05
Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6
Certificate serial: 019D2961269FCC63F94B6381EE1DFD27FEA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
Manifest number: 0222
Signing time: Thu 26 Mar 2026 09:02:05 +0000
Manifest this update: Thu 26 Mar 2026 09:02:05 +0000
Manifest next update: Fri 27 Mar 2026 09:02:05 +0000
Files and hashes: 1: 1I_-5VjCM2_OFHsmfVkBJKpEPdw.roa (hash: 7CWmUvdasbnykf0DjiU7gRJL7RLpAGl2V8qgnv1X5p8=)
2: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: omqU0rr8lGXWdkTYHFPDleceMGRjlDncLl8sMr2I1ww=)
3: sIQZHyrMKrx0aGLhGaxyLwG43WI.roa (hash: 1DHs9q3U0NDHbbr1v8UvKlsFj4sQc1jDRLQRmJtbDIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:26:9f:cc:63:f9:4b:63:81:ee:1d:fd:27:fe:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6
Validity
Not Before: Mar 26 09:02:05 2026 GMT
Not After : Mar 27 09:02:05 2026 GMT
Subject: CN=74c74e9e7b52159a9adddc63f37baa927169e605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4c:40:1b:5c:c1:c2:fe:be:2e:c6:06:f9:a8:
55:3a:79:95:20:22:d7:46:f0:6f:e3:a7:b9:71:83:
e2:57:76:b5:c6:c6:11:d1:9e:d5:71:16:13:d6:79:
d3:70:4a:dc:70:3b:65:e2:9a:43:7d:9b:e4:aa:67:
a3:f0:b5:39:6c:26:66:5f:46:86:b0:df:d6:0d:60:
db:a9:3e:7c:3a:8f:54:f7:3a:46:b1:0d:43:3c:8f:
27:3f:2a:7f:26:49:f6:61:ef:a7:89:70:23:eb:5c:
26:f9:26:61:ef:ab:7e:6f:37:06:80:bb:dc:b9:09:
40:30:6d:4c:4f:fd:39:c6:8a:c5:2e:3a:1e:ad:b6:
e6:45:ed:85:d8:11:d5:c2:84:5a:4c:4a:e8:e6:7b:
90:38:23:7d:32:7b:08:01:28:c9:2f:aa:c7:b7:4d:
63:dc:1f:c7:1f:bd:5e:1f:14:29:9b:58:63:46:63:
09:93:f1:3b:a9:bc:61:15:63:e0:0b:06:f4:aa:c9:
23:a4:62:4d:31:55:4a:52:ad:d2:b1:a0:07:01:fc:
f8:11:a0:eb:81:8e:06:0e:e6:c9:97:0a:dd:a7:de:
3c:aa:7d:38:e6:4c:e9:41:05:28:db:12:19:d5:5b:
46:d2:0e:21:38:6c:4f:60:d1:55:1b:07:b3:52:08:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C7:4E:9E:7B:52:15:9A:9A:DD:DC:63:F3:7B:AA:92:71:69:E6:05
X509v3 Authority Key Identifier:
keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:b2:ce:fb:08:f7:51:0d:39:03:1e:85:bf:0a:33:66:5e:c8:
1b:94:e1:20:0c:f3:f1:b8:fd:a4:f7:e8:7c:50:33:00:a7:bb:
df:7b:60:a7:bc:3f:21:5f:05:be:9e:79:68:de:d4:9a:8c:1a:
5d:59:dc:2b:5d:31:e7:e1:29:4f:14:d7:e6:27:37:70:5e:80:
a4:b1:54:12:60:30:0c:2d:dd:de:e5:5f:08:98:66:a3:ea:8e:
9d:1c:f9:81:d1:7d:53:fd:10:e9:cd:70:43:90:2c:a8:8c:ee:
70:a0:a7:4f:08:74:e1:3b:d8:a4:fa:01:b5:dc:02:53:ee:54:
ff:81:6a:fe:30:4d:62:92:2f:9e:3f:f5:5d:03:92:30:89:3f:
8b:80:7d:c8:72:9e:a3:48:a5:7c:50:6e:20:13:15:62:40:52:
20:7c:15:7a:cd:8d:dc:af:a5:f0:bc:f0:70:cc:0c:88:3d:fd:
12:ff:85:33:0e:dd:ef:89:95:9c:e3:bc:f8:48:38:e3:00:9a:
d1:d5:8d:a7:75:9e:6b:2c:03:d0:e8:c0:34:6c:92:bd:15:5d:
40:ba:14:76:5d:11:d7:88:87:aa:9c:24:c1:c5:73:5c:62:31:
5b:b0:5d:78:c8:28:77:d5:21:63:b9:ef:c4:73:4e:8b:d6:7e:
71:e4:2c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:39:16 2026 by rpki-client