Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
File: PpvRijUxNTVm7RgUDK10GQW-r64.mft (raw, json)
Hash identifier: 2h+2Vomkc2YcxufABsiiXhccmTVPf28Tm8Gve+eC5ow=
Subject key identifier: B4:E1:01:CD:73:34:09:62:6A:F6:3D:8B:DB:09:D3:07:D3:69:C3:5D
Authority key identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE
Certificate issuer: /CN=3e9bd18a3531353566ed18140cad741905beafae
Certificate serial: 01A0E778078D1711D3E850D395BEF73B75C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
Manifest number: 0320
Signing time: Mon 28 Sep 2026 10:03:18 +0000
Manifest this update: Mon 28 Sep 2026 10:03:18 +0000
Manifest next update: Tue 29 Sep 2026 10:03:18 +0000
Files and hashes: 1: 6VgSkjUaICvmuI1Gk4zKrfL4AVY.roa (hash: sX4zjT8oCtM2GFBwVVIqW8+GqKBD3S5WipdH+ecnrt8=)
2: A2ExeyQHGNk51S6yOHeJr6XOVf4.roa (hash: GO30lk5aBIlBJaHx15f4eDa39AuOipkWS6SvYKidn14=)
3: PpvRijUxNTVm7RgUDK10GQW-r64.crl (hash: SdeBFTyIC04HeYjQ8uyr8G2HQ22VsyZi987YHtgpIaU=)
4: _Wx9ZdmaJOp3eTANlK2NIeFmYuk.roa (hash: bRwEhLFQbPYT/IaKYTgc19M1MjVlqvi4YYR+NLvZd8U=)
5: c9WYdkuX9vqM1-rZ5wrXob8ras4.roa (hash: ejB+bZrxr1eJ74m85KOaG7NFYs4ZFTEAPocrQGNRHSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 10:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:78:07:8d:17:11:d3:e8:50:d3:95:be:f7:3b:75:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e9bd18a3531353566ed18140cad741905beafae
Validity
Not Before: Sep 28 10:03:18 2026 GMT
Not After : Sep 29 10:03:18 2026 GMT
Subject: CN=b4e101cd733409626af63d8bdb09d307d369c35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b7:2e:1f:2e:4c:08:da:01:a2:ef:f3:42:f7:
b0:20:92:91:87:11:26:e9:28:7e:46:02:74:78:46:
59:8f:df:6e:32:1e:c8:b4:00:ad:a4:32:81:75:ea:
13:9d:29:98:9c:83:20:76:29:2e:43:63:0d:d4:1c:
38:2a:10:d5:ec:79:bd:bf:ec:9b:4e:29:03:c8:7d:
95:02:b8:4b:dc:1b:db:a5:7e:90:61:d7:1a:72:c6:
fd:2a:64:7f:77:a8:5c:09:ad:09:1f:d4:76:14:06:
4b:96:e7:6e:52:ad:a4:28:6c:2e:24:96:fd:77:2e:
8b:b7:a1:01:17:9b:1f:48:c3:33:15:59:b5:ff:37:
00:af:82:a5:74:77:25:82:b1:50:c1:c2:bf:24:0d:
aa:86:d5:69:15:54:87:44:d3:7c:a1:25:98:14:92:
75:80:20:16:d1:80:f7:bf:74:8b:5a:e9:7c:65:cf:
40:35:d9:5c:c8:fe:cd:b7:18:c6:73:78:27:4b:d0:
c1:85:6d:ed:07:8a:92:a7:ac:2e:3c:28:d5:73:0c:
2c:6a:cc:1b:c3:95:57:02:90:06:07:7b:d7:6b:2f:
a8:5d:50:b3:64:9f:bc:5c:ef:f0:cc:0a:1d:a2:a5:
6b:02:94:62:46:07:53:1e:04:57:31:4f:0d:2b:f5:
86:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E1:01:CD:73:34:09:62:6A:F6:3D:8B:DB:09:D3:07:D3:69:C3:5D
X509v3 Authority Key Identifier:
keyid:3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:80:89:8f:6b:02:eb:47:03:96:33:88:7d:3d:a1:67:e4:ab:
47:1c:f3:8a:8d:8a:96:3c:e3:fd:b5:ad:03:8c:eb:90:6d:69:
d5:04:d5:e0:b7:eb:50:fa:ba:e3:f4:5e:c2:36:74:0d:22:ff:
3a:f3:19:9d:31:53:2d:f9:c0:f6:05:fd:65:d3:27:70:83:2a:
bd:fe:88:ab:72:e1:73:97:13:b6:ce:e7:1b:cd:0d:cd:3f:a1:
8f:da:a0:b9:aa:f2:0b:9b:30:2c:51:ac:57:33:6b:8c:58:58:
b1:06:87:51:1f:5e:6e:ce:e6:45:32:41:9d:d9:12:13:06:1a:
d5:54:a8:f9:46:df:27:7e:ed:9a:8d:25:4d:9a:68:82:2c:92:
45:3f:56:70:8c:5b:5f:f4:e1:5c:39:a2:7e:99:50:dc:67:3e:
b4:de:21:0d:47:a0:00:f8:3e:3c:1d:c8:7c:0a:fb:c0:f0:2b:
c5:bb:7d:90:49:3b:6e:cc:28:29:f3:a4:a9:a2:dc:88:9c:5f:
70:d5:0d:d0:69:20:63:6c:2f:22:e6:f0:64:6a:04:93:c0:cd:
64:e1:28:00:d7:8e:9a:c7:04:52:6b:88:78:7f:c9:f1:f6:29:
d5:83:c0:17:71:5d:45:69:57:14:6c:c7:13:2f:1f:33:c9:94:
b5:38:1d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:10:29 2026 by rpki-client