Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
File: pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft (raw, json)
Hash identifier: GvA+y7rp/DuEiIx6HBi8Lj7+zNR2H9Q+t5DOQLCCMWU=
Subject key identifier: 63:0B:62:FD:FF:75:1C:81:D0:59:6E:82:79:AE:A0:19:9F:80:55:FF
Authority key identifier: A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
Certificate issuer: /CN=a4f6d657c0fa21828d313507354dec1481580ed6
Certificate serial: 019E1EA333911F658C50B1F76768468C33D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
Manifest number: 02A1
Signing time: Wed 13 May 2026 00:01:12 +0000
Manifest this update: Wed 13 May 2026 00:01:12 +0000
Manifest next update: Thu 14 May 2026 00:01:12 +0000
Files and hashes: 1: 1I_-5VjCM2_OFHsmfVkBJKpEPdw.roa (hash: 7CWmUvdasbnykf0DjiU7gRJL7RLpAGl2V8qgnv1X5p8=)
2: pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl (hash: FuRQE4s2QxyRAzTPBOWWtVCC9Plrxlt31xbpGAmd/i4=)
3: sIQZHyrMKrx0aGLhGaxyLwG43WI.roa (hash: 1DHs9q3U0NDHbbr1v8UvKlsFj4sQc1jDRLQRmJtbDIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:33:91:1f:65:8c:50:b1:f7:67:68:46:8c:33:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f6d657c0fa21828d313507354dec1481580ed6
Validity
Not Before: May 13 00:01:12 2026 GMT
Not After : May 14 00:01:12 2026 GMT
Subject: CN=630b62fdff751c81d0596e8279aea0199f8055ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:f2:af:08:34:e3:cd:8b:82:b3:e7:1e:ca:
66:3f:a6:7d:f3:bc:b5:b7:26:fd:2f:c8:54:84:42:
1f:4a:c3:e2:1c:70:76:c2:59:e8:92:72:1c:2c:3b:
af:29:60:8b:8a:1f:ae:52:12:67:4f:f5:46:ac:b0:
af:9e:8a:08:bc:bb:f5:b4:c4:0a:e9:9d:4a:df:d1:
60:04:56:09:04:a1:78:e0:8e:1b:9b:bc:54:20:0b:
e2:a8:ae:bd:03:4f:9a:f7:8d:74:70:bc:8d:b3:de:
18:b1:50:ba:37:d7:80:d3:25:3e:79:d2:a5:1c:cb:
e6:d6:6e:ae:9c:87:66:3c:28:93:98:ad:65:bb:f1:
11:d1:a5:98:59:36:72:99:0a:cd:4d:37:bc:08:a8:
b2:7c:94:2d:85:7d:59:cd:9f:0b:bc:44:34:25:92:
3e:4c:8c:97:44:82:82:76:15:93:5a:ea:6a:cd:f4:
6f:e1:ce:76:ae:69:ed:ed:e8:78:5b:a9:1a:3b:09:
98:f5:64:2e:e8:bb:5d:9d:04:da:b7:c2:db:40:65:
04:ba:a6:47:8f:0d:dc:cb:fb:76:f2:34:80:a3:d3:
e4:42:32:dd:f8:d7:09:22:28:93:ed:fe:aa:32:43:
f6:4a:94:0d:89:85:69:b6:ad:54:9a:ed:85:9b:28:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0B:62:FD:FF:75:1C:81:D0:59:6E:82:79:AE:A0:19:9F:80:55:FF
X509v3 Authority Key Identifier:
keyid:A4:F6:D6:57:C0:FA:21:82:8D:31:35:07:35:4D:EC:14:81:58:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPbWV8D6IYKNMTUHNU3sFIFYDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/239397-3477-4379-ac46-5c2763648f1c/1/pPbWV8D6IYKNMTUHNU3sFIFYDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c5:46:8e:9b:8f:cc:49:22:16:a6:1f:a4:8d:9a:4c:f4:1b:
96:16:e6:2b:28:d1:09:9e:5e:b2:57:32:70:63:a1:e5:07:e8:
52:2f:c3:22:30:cf:2c:d0:39:1f:08:9a:c7:22:70:c5:62:af:
f5:27:4d:c0:c0:d1:1a:d7:3f:30:b8:83:84:66:68:4b:78:5a:
b8:9a:ee:d8:f0:e2:f6:17:c9:16:19:1f:08:e2:fb:c4:3a:63:
04:c9:36:ff:0b:d5:5a:e8:1d:3c:18:00:5f:bf:14:35:07:2a:
31:7b:c4:7e:46:90:9f:de:66:38:61:2f:67:79:c7:9d:86:72:
ca:d2:ec:8c:2a:07:0f:7f:78:55:b5:36:4f:25:62:72:fa:a7:
ca:71:8f:26:94:17:7b:89:ed:1c:f0:85:25:bd:c1:b7:85:87:
fe:11:bb:ab:6e:51:8c:15:74:c8:ca:4c:35:f5:d7:ed:d3:c9:
92:dd:e2:de:44:cf:d6:64:1b:94:3a:9c:72:7e:c7:c7:6e:e1:
9b:e1:e8:2b:1f:d5:e4:d0:0b:3e:6c:97:1a:6c:f6:e9:87:a0:
20:b6:fa:a5:ea:32:f2:ee:2e:29:ec:9b:c3:e9:aa:0f:31:c2:
b0:2d:de:61:23:b3:18:13:5d:c5:5b:43:3d:04:48:db:13:ab:
9d:04:55:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:25:13 2026 by rpki-client