Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File: ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier: vVUkmA0vvv7esTAiS3H+01LfcmIFDbRHkquJ7knWaL0=
Subject key identifier: 05:02:89:6B:5A:5B:D3:FD:70:9B:8C:18:18:8D:CD:9A:DF:88:D1:45
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial: 019D2696397BC6D4EE35E905A680DEC2A8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 20:01:12 +0000
Manifest this update: Wed 25 Mar 2026 20:01:12 +0000
Manifest next update: Thu 26 Mar 2026 20:01:12 +0000
Files and hashes: 1: KImIqYFb29b3KU70kYQGUgTjwXY.roa (hash: OkLquITh6UHZc59jyD3mteFTooB7+Z7+DnhjU4+WM/A=)
2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: qC1aq8GDgXDn9Mpoyx1pHjeXcEpXgcl7jS1tf5wk0qk=)
3: wJhrCbB9HaKVaJIOdovc6nXak8I.roa (hash: DNB7tfiEdhadZKuh5CRqn/FIXhNGqeMKaW1BhhcXm8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:39:7b:c6:d4:ee:35:e9:05:a6:80:de:c2:a8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Validity
Not Before: Mar 25 20:01:12 2026 GMT
Not After : Mar 26 20:01:12 2026 GMT
Subject: CN=0502896b5a5bd3fd709b8c18188dcd9adf88d145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e2:8e:6f:17:c0:20:83:60:0c:c5:22:94:9b:
dc:0f:ac:e4:a8:d9:69:0d:96:18:79:80:c7:53:ad:
eb:d5:2f:53:9e:e7:3f:3b:15:6e:90:e6:39:d8:74:
36:f0:81:45:d7:17:3a:3a:cc:c8:a7:33:e2:9f:12:
2d:2c:c8:82:b4:a0:c5:11:4a:73:89:60:19:85:3b:
cb:7a:32:16:da:c9:0b:f9:2f:05:4d:7e:45:c6:00:
28:80:e5:1c:0d:20:13:78:8a:b7:df:28:8b:20:25:
8d:11:5b:56:a7:7a:d1:80:c7:9f:dd:1e:96:be:d2:
c5:65:b9:44:d5:b1:e0:a5:35:17:20:9e:51:0b:fc:
04:21:75:f5:75:35:50:41:14:20:e3:2e:6f:ad:f6:
00:31:cd:b5:6a:6f:c9:0a:eb:29:74:6a:f2:aa:f5:
bb:08:a2:c4:47:b6:92:82:7d:2b:7d:94:ea:42:bd:
77:b8:61:b4:ba:f9:72:33:ea:15:92:d5:c4:05:a9:
aa:05:9e:4a:ce:59:59:a0:c8:ef:4f:cc:d1:04:13:
7a:99:1b:4e:94:b5:e6:0c:1f:41:4e:cb:38:88:ab:
04:bc:ae:03:1e:a7:33:82:03:77:20:3f:ec:25:6b:
70:6b:91:9f:93:3c:54:6c:5c:c3:22:30:d2:7e:af:
6d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:02:89:6B:5A:5B:D3:FD:70:9B:8C:18:18:8D:CD:9A:DF:88:D1:45
X509v3 Authority Key Identifier:
keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:be:e0:e9:db:6c:d7:fc:34:be:92:62:09:ef:35:3e:45:52:
84:4c:43:96:dc:ef:15:7d:f9:dc:9d:66:0a:8d:b6:d6:c1:b4:
ee:a5:00:47:e1:66:72:98:4c:59:bf:66:ef:ce:41:13:f5:91:
fa:1e:4f:b3:5a:8f:c2:aa:2b:95:fb:28:ac:41:6d:67:e5:9a:
67:19:62:49:10:34:29:d5:b9:32:c1:a2:41:ab:86:6d:55:91:
0b:55:4e:9c:f2:87:cf:70:cd:e5:bb:d2:5d:0d:24:5f:a9:94:
8f:9a:47:48:73:02:b3:41:a4:7f:1b:71:97:09:82:e8:18:a6:
e1:6d:fa:1e:6b:5b:52:66:07:eb:83:e5:85:c4:c4:46:10:fe:
14:27:b6:58:c3:e8:07:35:92:35:c5:d3:b0:30:a5:25:3f:ab:
e0:cf:4a:b2:cf:6f:ee:aa:06:16:92:4f:e2:8e:9d:4a:d4:75:
b7:c6:a6:b5:43:ed:23:84:2b:0b:fd:40:29:67:ee:a0:4b:53:
80:3f:03:29:eb:16:62:50:14:d5:ef:16:ec:a5:a0:4d:5a:c0:
c6:df:a3:15:7f:b5:e5:13:e0:17:bc:4f:71:e1:bf:3a:bb:72:
26:df:ce:19:1d:25:51:84:93:70:2a:73:1a:ca:79:e7:79:3c:
4c:ad:9d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:04 2026 by rpki-client