Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File: ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier: yJirIReSlwXAW3tAokxzGrWIEi+uU7QqaApxD1bbBgk=
Subject key identifier: 11:49:DD:BB:CC:F9:FF:59:84:A8:C8:F2:D0:41:C3:DB:59:F7:C2:08
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial: 019F9091290083B643994EE59D48E55BEAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 20:00:59 +0000
Manifest this update: Thu 23 Jul 2026 20:00:59 +0000
Manifest next update: Fri 24 Jul 2026 20:00:59 +0000
Files and hashes: 1: KImIqYFb29b3KU70kYQGUgTjwXY.roa (hash: OkLquITh6UHZc59jyD3mteFTooB7+Z7+DnhjU4+WM/A=)
2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: ax2O+fOeOSky7o8163Y9tjd6K8u0/dHo/ShKCebSumA=)
3: wJhrCbB9HaKVaJIOdovc6nXak8I.roa (hash: DNB7tfiEdhadZKuh5CRqn/FIXhNGqeMKaW1BhhcXm8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:29:00:83:b6:43:99:4e:e5:9d:48:e5:5b:ea:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Validity
Not Before: Jul 23 20:00:59 2026 GMT
Not After : Jul 24 20:00:59 2026 GMT
Subject: CN=1149ddbbccf9ff5984a8c8f2d041c3db59f7c208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:79:8b:26:1a:27:67:ef:1f:2c:3c:a0:cb:
be:17:91:46:cc:4a:57:8c:d7:83:7b:7a:f6:94:26:
82:c7:60:6a:b7:86:83:77:80:e2:d2:23:dc:8c:6f:
97:59:7e:c9:bf:96:77:8b:4c:a5:be:f9:5c:8b:d3:
cc:56:b9:0c:03:67:0a:1c:4f:53:fd:ea:eb:2d:e6:
ed:84:87:a6:ce:19:17:ec:6f:86:4c:48:5a:0d:0e:
f1:ff:ef:f9:d0:3f:04:ed:9e:29:34:fb:65:7f:41:
19:a9:2d:fe:a8:47:ac:da:05:ea:75:3c:48:57:af:
fc:ba:84:78:b9:d4:59:e3:10:eb:24:a8:80:bb:33:
72:db:0b:00:e3:80:c4:4a:8c:9f:b6:b7:e4:5c:c4:
64:dd:37:af:2e:9e:95:de:a3:8f:68:85:07:cc:9c:
dc:32:f4:7c:bb:c4:1a:f3:0c:44:de:7b:30:59:e4:
1e:16:2d:46:fe:28:82:1b:07:43:e6:3a:01:df:79:
b6:9b:b1:fe:46:e5:ee:ff:f8:4d:c2:b7:c3:0d:7b:
4c:15:de:ef:42:09:98:c6:31:69:63:7f:2c:15:a9:
39:99:88:30:3f:ba:e6:6e:c4:0e:56:f6:1a:08:2d:
49:ad:93:24:29:5c:31:7b:9a:d0:56:9e:5c:ac:d2:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:49:DD:BB:CC:F9:FF:59:84:A8:C8:F2:D0:41:C3:DB:59:F7:C2:08
X509v3 Authority Key Identifier:
keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:69:1d:ad:3d:1e:a6:39:a2:39:c5:db:93:6f:1c:15:12:5d:
50:1b:05:9d:07:a4:0c:53:a4:0a:90:97:f4:80:2a:d1:e6:d1:
9e:f1:e5:24:fe:eb:03:20:ef:ef:b7:7d:28:e3:6a:41:b8:33:
c5:18:8f:bc:03:16:15:3a:2a:16:ca:a6:c0:4c:8f:c8:46:5b:
08:e3:45:12:f5:7d:d0:fc:f8:ec:a1:96:38:01:b7:af:15:87:
2b:d2:24:71:a9:65:69:79:e6:0f:d9:51:5d:01:2d:1b:e5:13:
b0:ed:49:d6:f5:3e:e2:30:1e:c6:0c:cb:fa:45:f8:65:e6:bf:
e9:0f:43:ec:ae:44:8e:69:67:91:33:87:43:44:d4:b0:37:3c:
b5:81:36:a7:9b:6f:b5:11:f8:91:cf:0a:97:73:27:fd:f5:c2:
7e:1a:a4:2e:29:6e:44:ae:3a:c6:00:d2:5d:de:88:93:d4:46:
7b:4c:84:04:f6:fe:4d:c5:d9:76:12:b3:3f:e7:f3:16:c6:a9:
fa:e3:57:f1:a5:c0:26:0c:52:6a:6a:16:fa:ca:fe:52:e9:62:
63:96:bb:07:9f:98:bd:17:64:7f:26:48:dd:90:16:3a:4b:04:
fc:d1:5b:b2:ac:7b:96:40:d9:6c:4e:1f:e8:6d:d0:e7:07:e2:
f5:38:6b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:39:25 2026 by rpki-client