Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File: ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier: M3zesKF1deJ55O9F6FTD9vJZzrWTdugrwhUAjOd5RjA=
Subject key identifier: 57:87:86:02:8B:7B:D6:2A:82:42:6F:AE:D8:F8:2D:F8:EC:0B:97:E6
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial: 01A0D3153425ACE46BE3EDF685FABD42E34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 11:02:57 +0000
Manifest this update: Thu 24 Sep 2026 11:02:57 +0000
Manifest next update: Fri 25 Sep 2026 11:02:57 +0000
Files and hashes: 1: KImIqYFb29b3KU70kYQGUgTjwXY.roa (hash: OkLquITh6UHZc59jyD3mteFTooB7+Z7+DnhjU4+WM/A=)
2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: h3aI8kXjfVk+mGf4nra3Q08DPgpY7jOmlwkk31V7YNo=)
3: wJhrCbB9HaKVaJIOdovc6nXak8I.roa (hash: DNB7tfiEdhadZKuh5CRqn/FIXhNGqeMKaW1BhhcXm8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:34:25:ac:e4:6b:e3:ed:f6:85:fa:bd:42:e3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Validity
Not Before: Sep 24 11:02:57 2026 GMT
Not After : Sep 25 11:02:57 2026 GMT
Subject: CN=578786028b7bd62a82426faed8f82df8ec0b97e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:e0:95:45:02:60:fc:59:34:8e:99:22:e0:
71:96:80:75:3c:86:36:59:1c:d0:d2:b1:77:78:07:
62:e8:b5:f3:b7:2d:29:53:00:12:3a:09:98:33:ec:
6b:36:78:83:f0:eb:76:52:e4:35:68:da:85:9c:8d:
d2:00:d3:d6:19:fb:aa:5c:54:37:ce:e8:b9:96:cf:
0c:0c:30:d7:a5:e8:e0:4f:57:38:39:d6:0b:4c:4e:
41:8e:ca:4f:20:fa:c7:42:68:42:c9:ea:c5:a1:60:
20:07:85:41:56:bd:cd:3b:f8:5f:19:01:6d:60:4e:
4b:13:24:86:6d:05:e2:b5:de:ea:fc:b3:02:59:73:
b9:e6:28:d1:63:71:e8:95:29:d4:cf:47:d5:ab:46:
bb:aa:b2:df:5d:62:c8:c2:ca:13:57:6a:87:66:8a:
2e:17:5e:42:7c:80:70:aa:12:18:92:a8:7c:ee:22:
a1:b0:3e:6f:ff:96:a4:65:48:88:13:16:79:3a:07:
d3:e5:49:41:b2:2d:73:cb:02:6b:cb:a6:f3:d4:c2:
a6:4b:a8:68:6b:d0:12:3a:61:30:af:8c:12:c4:32:
29:d2:c3:3f:6b:a1:b6:4c:d7:53:80:06:d9:0a:14:
fa:c0:1b:c7:c5:63:e5:d3:a1:6b:06:25:6b:8b:5c:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:87:86:02:8B:7B:D6:2A:82:42:6F:AE:D8:F8:2D:F8:EC:0B:97:E6
X509v3 Authority Key Identifier:
keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:35:4f:b4:79:fc:c0:9a:b2:5f:da:3d:22:2a:c9:10:38:63:
8b:41:b7:da:96:e0:46:b2:a1:bd:d2:0c:18:7f:eb:cb:f3:ba:
52:1b:77:c3:e2:2d:f5:a3:12:35:a4:e4:a1:53:77:1b:8b:42:
34:1c:64:da:48:ee:ab:82:27:84:d3:65:f3:3d:49:27:f2:ee:
25:13:fd:40:d5:86:4a:7c:68:56:03:25:58:d0:1f:d4:bf:89:
06:6e:88:73:b6:b8:4d:64:bc:e9:25:eb:d1:6b:e6:95:80:cd:
c0:20:e0:c9:1a:cd:a4:ec:53:20:eb:df:48:f6:33:2d:2f:df:
3a:27:91:91:5f:61:dc:98:f6:2d:9a:3a:52:5d:3f:ed:d2:64:
e9:b2:b4:f1:1d:4c:58:bb:b0:1a:5a:ca:29:ed:33:60:01:ab:
ba:35:a4:c8:9c:13:10:b8:a8:de:12:fe:d5:e2:4c:55:c4:19:
8c:8b:1c:b8:15:3e:c8:bf:25:8c:93:10:96:55:60:86:de:91:
05:91:17:8e:6b:a8:b8:16:14:c8:18:14:a8:95:83:d9:b5:2f:
21:c4:66:9c:51:84:37:00:07:79:0f:52:0d:0b:3f:44:bf:2a:
a1:87:57:f1:44:c7:df:30:70:97:52:8a:f5:2b:5f:65:cc:e6:
92:d8:36:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:57:25 2026 by rpki-client