Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
File: PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json)
Hash identifier: v26YFXPMPXmXb9azkR+lNoYKMiLNbuZEBOj+11glnN8=
Subject key identifier: B1:0B:0F:05:2A:BA:84:D2:5A:DD:B4:B5:57:04:9F:58:A1:C7:35:8E
Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
Certificate issuer: /CN=3d43cf40f691f14b35ca657032934802005cfa88
Certificate serial: 019D28BBC6B6865E67C112FD679A7C601EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
Manifest number: 090F
Signing time: Thu 26 Mar 2026 06:01:27 +0000
Manifest this update: Thu 26 Mar 2026 06:01:27 +0000
Manifest next update: Fri 27 Mar 2026 06:01:27 +0000
Files and hashes: 1: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: 4WzNZgsCgAVb2uqQRnC234vR8qy7gGrfANde48fiFio=)
2: SRouw1ACmOxsP7DYIDJnot7Wy0M.roa (hash: Axkim79AjMG7Hlgx6O/xdzgLE7UsB+oDhwA5WGJg0Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:c6:b6:86:5e:67:c1:12:fd:67:9a:7c:60:1e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88
Validity
Not Before: Mar 26 06:01:27 2026 GMT
Not After : Mar 27 06:01:27 2026 GMT
Subject: CN=b10b0f052aba84d25addb4b557049f58a1c7358e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a4:58:a4:e6:03:36:8d:54:27:df:04:a0:b7:
eb:4f:47:81:8b:11:aa:6f:2b:3f:ad:d1:18:39:79:
53:25:18:65:70:2b:9d:74:b9:f4:82:fc:36:e1:37:
c7:3d:d6:2c:31:67:fc:fa:9b:27:20:92:ac:90:78:
ec:dd:28:57:ce:26:11:a9:37:d2:17:e9:2f:12:1b:
8f:dc:62:12:2e:de:4e:86:b1:75:ba:8a:df:b3:7f:
86:ab:32:e3:69:1f:6d:d8:ff:5b:09:16:42:5e:34:
29:6d:54:07:32:fa:cf:66:c9:07:34:2f:8c:76:01:
8f:33:b6:95:4b:79:d8:84:59:b1:f1:5b:5c:dd:b4:
1a:9a:fe:4c:8d:45:cf:b3:d7:a3:15:b5:a6:4a:9a:
7f:c8:b4:d4:82:98:5f:c3:5c:5f:cb:7d:12:21:ab:
26:4a:86:07:57:9e:c5:de:ca:61:c8:2a:28:0d:83:
7a:b6:06:87:ce:43:24:0d:e2:50:dc:52:a3:b0:65:
eb:b3:dd:41:07:59:52:ab:b4:55:ed:f2:2a:8b:5f:
ca:a8:62:86:6a:6a:65:a1:c9:41:14:79:38:85:cb:
b4:cd:9f:6d:64:57:ad:c8:a2:30:20:61:77:92:b4:
c1:4a:21:3f:ee:f7:66:79:fe:24:f9:17:d2:88:6b:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0B:0F:05:2A:BA:84:D2:5A:DD:B4:B5:57:04:9F:58:A1:C7:35:8E
X509v3 Authority Key Identifier:
keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:57:af:59:4a:d4:10:de:36:8a:e7:70:0a:29:79:12:ef:7e:
b7:ce:b9:65:c3:d9:74:a2:4f:91:6c:7a:28:b0:0a:06:33:47:
f3:4b:53:33:9c:4f:ba:61:1b:fa:0b:75:d6:6d:e0:d4:3c:63:
e2:80:dc:32:89:ce:0e:20:cb:7d:7c:b1:da:8d:09:72:a2:a6:
50:35:01:08:45:19:de:54:07:1d:fc:59:ed:a0:dc:13:0e:3a:
e6:58:1d:ed:b6:8e:d1:79:dd:ee:7e:25:85:fd:29:96:4c:c5:
e6:6a:34:49:bb:1e:4c:4c:a0:f5:e7:54:c9:80:10:f2:d4:e1:
24:a1:3f:cb:a7:b0:71:80:ff:b0:13:c9:25:80:63:4c:1b:4a:
e3:73:83:57:78:e5:f5:81:86:61:23:f4:52:e7:f9:f4:53:c5:
3d:a6:5b:53:e7:f6:f5:11:7c:93:81:23:9c:86:35:9d:9b:e3:
0e:42:f9:03:37:9b:09:73:92:f3:87:2d:93:09:25:7c:47:e7:
59:c4:cc:10:a6:2f:30:3f:d8:f5:84:27:f1:7a:2e:82:c0:8b:
98:9d:83:fc:d0:3a:b8:8f:f5:dc:c2:54:45:4f:ec:11:37:23:
27:d0:8a:1f:87:65:51:f9:2a:8d:ac:32:ac:4d:86:9b:30:ee:
dd:92:79:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:22:47 2026 by rpki-client