Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
File: PpvRijUxNTVm7RgUDK10GQW-r64.mft (raw, json)
Hash identifier: YZbGNpKIsOwpQ8mNW4F1dud+uWlFon4cm1F/4Puz+Xw=
Subject key identifier: ED:4B:EC:3C:19:BE:E7:05:77:62:C3:0C:8C:CA:0B:21:6D:1C:A8:74
Authority key identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE
Certificate issuer: /CN=3e9bd18a3531353566ed18140cad741905beafae
Certificate serial: 019F93C8E2921BE780ACF5808C666A34F46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
Manifest number: 0270
Signing time: Fri 24 Jul 2026 11:00:43 +0000
Manifest this update: Fri 24 Jul 2026 11:00:43 +0000
Manifest next update: Sat 25 Jul 2026 11:00:43 +0000
Files and hashes: 1: A2ExeyQHGNk51S6yOHeJr6XOVf4.roa (hash: GO30lk5aBIlBJaHx15f4eDa39AuOipkWS6SvYKidn14=)
2: PpvRijUxNTVm7RgUDK10GQW-r64.crl (hash: 7p3tPKIZQ5ufMh2gEzAtGil33gYuVqSoHPmp36K9v3g=)
3: _Wx9ZdmaJOp3eTANlK2NIeFmYuk.roa (hash: bRwEhLFQbPYT/IaKYTgc19M1MjVlqvi4YYR+NLvZd8U=)
4: c9WYdkuX9vqM1-rZ5wrXob8ras4.roa (hash: ejB+bZrxr1eJ74m85KOaG7NFYs4ZFTEAPocrQGNRHSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:e2:92:1b:e7:80:ac:f5:80:8c:66:6a:34:f4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e9bd18a3531353566ed18140cad741905beafae
Validity
Not Before: Jul 24 11:00:43 2026 GMT
Not After : Jul 25 11:00:43 2026 GMT
Subject: CN=ed4bec3c19bee7057762c30c8cca0b216d1ca874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:ea:40:33:c4:c5:2f:6e:ae:5d:44:f6:f1:
7d:78:6e:be:09:d4:92:38:5d:e2:d1:0f:1a:e7:b6:
95:3d:b5:cc:03:95:a5:e1:ff:ff:7c:5c:79:0f:f7:
ad:5f:77:8b:ad:3f:72:60:6b:c1:cb:8e:41:df:11:
46:0a:d0:9b:9a:66:8c:b3:de:4d:88:8b:cb:f9:69:
77:d3:20:06:05:35:c0:d6:72:d8:d7:25:68:65:62:
b1:4a:0f:85:ed:fd:c0:4c:67:f7:ad:a2:f3:62:f4:
73:3a:2a:81:86:00:9d:7f:a1:61:41:eb:51:90:d0:
2a:9f:d6:dc:c0:cd:df:7e:6e:1f:f4:3c:1d:31:6b:
19:71:81:f2:13:15:36:71:60:0a:4f:bb:14:47:c2:
36:14:06:61:78:24:ea:60:f3:9a:0e:bf:68:a2:8f:
52:f8:52:57:be:ae:c2:86:8f:ec:b8:5d:90:bc:31:
f1:8d:d5:b1:82:14:20:fb:b1:f6:2f:77:d5:98:7c:
d2:a2:f5:4b:fc:7f:64:af:4f:65:b6:f4:a3:75:90:
d1:c8:98:63:ca:b8:d3:f7:2b:7b:4d:61:83:0d:10:
bf:25:6e:9d:1f:aa:02:06:45:b1:8e:74:a3:66:a1:
79:a1:46:f4:5c:29:c0:c0:c9:74:f3:58:97:29:27:
01:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4B:EC:3C:19:BE:E7:05:77:62:C3:0C:8C:CA:0B:21:6D:1C:A8:74
X509v3 Authority Key Identifier:
keyid:3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:62:c1:d8:e7:32:5a:80:52:3d:6f:ac:f0:7c:50:41:44:74:
68:5b:6c:eb:28:35:11:e6:e4:8c:b1:ae:2e:43:44:92:e5:2a:
c6:fe:75:b3:5c:32:90:72:ab:ae:58:bf:f5:51:25:17:c7:d1:
76:37:22:e4:f3:ed:7b:40:62:ed:c0:de:b6:6c:b6:d7:32:5f:
51:6e:f9:68:5e:09:7a:fb:97:f8:0a:18:55:0f:56:03:1c:91:
1e:3d:34:38:ca:fe:e3:bb:34:df:45:b9:64:78:19:9a:e7:57:
a5:5e:52:9d:d0:af:78:89:90:b0:0c:97:d3:6e:89:72:d2:60:
80:d0:d5:4b:61:c3:2b:77:49:63:3a:26:c7:c3:ee:ba:55:2b:
64:ab:15:f1:b1:2d:60:ea:b3:c3:1c:eb:50:b0:f7:56:50:10:
13:6a:68:9f:ed:f4:a4:11:10:2c:79:e5:21:36:62:2e:4d:b8:
3e:1a:e1:f7:ae:86:01:63:c2:5a:41:c7:78:80:a7:59:a0:c8:
4e:b8:31:8b:0a:f7:2f:34:ec:47:ae:2e:fd:cd:05:19:33:2e:
b9:fc:83:85:11:ba:2f:89:1d:db:05:af:a8:82:e8:98:77:ce:
48:a6:2c:5d:4a:9b:3b:89:75:33:d2:ef:fe:7f:1c:aa:88:17:
22:b3:b8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:48:59 2026 by rpki-client