Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
File: PpvRijUxNTVm7RgUDK10GQW-r64.mft (raw, json)
Hash identifier: hqoCH5Y2c1lfLcIGBbZa+Se5SEXpnN28JI078ckBuzA=
Subject key identifier: 0F:F0:4E:F9:C7:40:90:AB:3F:21:FF:06:AF:3C:7D:C2:9B:3B:4D:CF
Authority key identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE
Certificate issuer: /CN=3e9bd18a3531353566ed18140cad741905beafae
Certificate serial: 019D25F21339445EB05AFE9A0209F7BD400E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
Manifest number: 012E
Signing time: Wed 25 Mar 2026 17:01:54 +0000
Manifest this update: Wed 25 Mar 2026 17:01:54 +0000
Manifest next update: Thu 26 Mar 2026 17:01:54 +0000
Files and hashes: 1: A2ExeyQHGNk51S6yOHeJr6XOVf4.roa (hash: GO30lk5aBIlBJaHx15f4eDa39AuOipkWS6SvYKidn14=)
2: PpvRijUxNTVm7RgUDK10GQW-r64.crl (hash: nNcaZcdPz/kMoqNlyQ5doiwKMhC3aVgABsJitYc2niI=)
3: _Wx9ZdmaJOp3eTANlK2NIeFmYuk.roa (hash: bRwEhLFQbPYT/IaKYTgc19M1MjVlqvi4YYR+NLvZd8U=)
4: c9WYdkuX9vqM1-rZ5wrXob8ras4.roa (hash: ejB+bZrxr1eJ74m85KOaG7NFYs4ZFTEAPocrQGNRHSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:13:39:44:5e:b0:5a:fe:9a:02:09:f7:bd:40:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e9bd18a3531353566ed18140cad741905beafae
Validity
Not Before: Mar 25 17:01:54 2026 GMT
Not After : Mar 26 17:01:54 2026 GMT
Subject: CN=0ff04ef9c74090ab3f21ff06af3c7dc29b3b4dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:a1:19:b9:3e:22:dd:68:88:4c:89:d2:e2:
35:8a:4a:aa:57:49:fd:b5:62:19:3e:8a:d7:90:a6:
d2:97:72:b6:db:52:7e:e9:c3:dd:b4:d8:af:d3:b5:
22:95:95:bf:d9:6c:27:58:56:47:02:96:5b:24:30:
ba:6c:4b:55:07:c6:45:e7:bf:ba:67:ac:56:ee:33:
6f:89:76:f5:e2:1f:58:eb:c2:10:f7:b6:56:f6:56:
5b:e4:59:0e:3c:e4:b9:88:78:68:85:ad:63:07:1b:
3d:62:98:91:dd:83:d7:af:ee:df:9e:24:2e:f3:a8:
67:b4:dc:a6:86:23:ca:b8:7c:d1:32:0d:0b:93:a6:
70:35:ba:30:69:a5:ec:cb:c0:8d:1a:ec:33:9f:2c:
17:96:f4:2d:f4:5a:54:30:18:44:89:0b:b6:0e:76:
04:ca:d2:aa:ba:ff:87:3b:a2:a9:07:4c:c5:80:9c:
af:19:ee:19:10:ec:fe:62:0c:38:b2:86:3f:59:c6:
e5:5e:87:94:f0:d3:b0:e7:a2:21:fd:10:74:b5:a9:
5b:de:78:a5:fa:47:e2:a8:18:ea:f4:7a:0b:f4:6a:
25:c7:45:63:a5:b9:7e:d1:de:6c:92:58:84:bc:1e:
bd:30:b7:63:b0:68:39:43:91:4c:c4:4f:bd:1c:42:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F0:4E:F9:C7:40:90:AB:3F:21:FF:06:AF:3C:7D:C2:9B:3B:4D:CF
X509v3 Authority Key Identifier:
keyid:3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1f:5e:31:6b:26:b0:d6:f5:2f:b9:e5:14:da:7b:93:02:7b:
5c:20:81:b2:03:f4:59:b1:42:7f:49:2a:0d:9c:e4:a6:78:a9:
34:10:7f:7a:87:87:2b:55:7a:74:97:1f:e3:7e:39:ad:27:27:
d3:94:8b:3f:b1:f0:49:f4:3b:6a:21:07:01:2a:67:b3:b6:16:
88:a6:05:d8:d5:16:99:8f:72:4f:7e:d0:01:8e:67:86:9c:6c:
dd:0c:76:03:81:d3:3b:65:ea:d7:63:a3:11:18:85:13:5c:9f:
7a:13:da:66:d6:ec:16:d5:7a:d3:60:0e:d5:b5:f0:d4:84:fe:
a4:0d:06:a0:ed:85:75:b2:02:03:0c:2c:99:3b:52:43:31:44:
be:d2:9d:23:1e:89:54:6e:ee:bf:b9:c3:1e:87:0c:0d:47:1b:
4f:2b:ce:8c:94:00:70:a9:54:0d:e4:a6:7c:32:57:69:4b:6f:
a6:3b:2c:5e:d0:00:eb:b8:a8:39:dd:d4:84:7e:fd:16:63:80:
46:36:11:46:8d:b3:3e:ff:ae:10:c0:a9:e0:f0:8f:d4:c5:5a:
a7:32:6f:a3:05:53:26:3b:0d:e2:9b:76:95:99:4c:fb:50:4f:
45:28:95:f7:88:94:81:6a:c6:ba:a6:6a:d7:20:6a:65:d7:aa:
2f:29:c7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:36 2026 by rpki-client