Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
File: PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json)
Hash identifier: rlx/QfvP9d08hM+pXCuvwUgYHbEj7ie8caVY/c+FwYw=
Subject key identifier: 58:D9:FB:FC:9A:CA:F3:DB:D4:E4:3D:73:F0:99:EE:04:E2:FB:78:BA
Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
Certificate issuer: /CN=3d43cf40f691f14b35ca657032934802005cfa88
Certificate serial: 01A0FFB5DD8F09C39D575F5D5390B298DD0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
Manifest number: 0B0C
Signing time: Sat 03 Oct 2026 03:01:43 +0000
Manifest this update: Sat 03 Oct 2026 03:01:43 +0000
Manifest next update: Sun 04 Oct 2026 03:01:43 +0000
Files and hashes: 1: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: n5Sw5ofasCiXJbCdcIWkUtCxEejeRBPYi0rjsdV7qas=)
2: SRouw1ACmOxsP7DYIDJnot7Wy0M.roa (hash: Axkim79AjMG7Hlgx6O/xdzgLE7UsB+oDhwA5WGJg0Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:b5:dd:8f:09:c3:9d:57:5f:5d:53:90:b2:98:dd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88
Validity
Not Before: Oct 3 03:01:43 2026 GMT
Not After : Oct 4 03:01:43 2026 GMT
Subject: CN=58d9fbfc9acaf3dbd4e43d73f099ee04e2fb78ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:18:8e:a1:62:72:ca:c8:c4:2e:c1:cb:a1:4f:
e0:44:70:73:0f:c1:1d:0f:e8:8c:78:88:59:bc:d9:
11:6a:2e:3a:0b:0c:ee:cb:4e:37:a2:18:a3:48:ea:
eb:b2:db:82:83:74:b7:37:63:d1:36:aa:84:24:27:
7c:4b:a6:45:e7:47:d8:32:f8:ef:a8:1e:3d:e5:0d:
93:14:4f:0c:70:de:46:b1:57:6a:ef:83:e1:b9:99:
6a:ec:26:7a:60:18:e7:bd:02:a5:f6:d2:16:f4:72:
f4:af:35:87:90:ea:ef:2b:70:18:8d:5c:47:f3:a9:
51:57:56:37:60:1b:64:f7:33:42:38:2e:4a:2e:93:
1b:28:e0:45:7e:d7:4a:05:0b:57:f3:7d:8e:d4:4e:
6d:19:54:80:81:e6:5b:ea:5e:76:3d:e3:c6:45:22:
e0:08:60:0b:8f:ac:7a:67:44:37:f0:3d:00:dc:0d:
c3:38:01:6c:02:e2:06:0c:82:f2:bf:34:d3:d6:fb:
46:1a:86:4f:cf:82:ad:5f:0b:cd:49:f2:c6:1a:90:
67:b2:22:fe:b0:d9:5d:24:32:b2:77:47:51:35:b9:
72:a6:25:f7:ce:a4:41:3a:ae:3e:2c:8e:73:a0:0f:
83:d1:dd:e2:0b:20:a5:51:04:fd:f0:d8:4b:92:d2:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D9:FB:FC:9A:CA:F3:DB:D4:E4:3D:73:F0:99:EE:04:E2:FB:78:BA
X509v3 Authority Key Identifier:
keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:45:ba:2c:0f:7f:11:f8:21:62:f9:25:c0:78:e4:4e:cb:80:
21:10:0e:6f:05:7c:de:06:1e:7b:bb:2b:10:0c:57:c3:7b:90:
1c:7f:64:99:05:83:37:1e:43:ce:04:ae:01:86:77:cc:71:8b:
50:f1:bd:7a:f7:a7:da:e5:05:6b:25:ae:3f:dd:ce:d8:1f:81:
c5:be:7b:92:13:7c:b9:8b:61:30:3c:f3:ad:f3:be:6e:df:1d:
f0:d2:3c:51:a0:bb:6b:3d:2d:e0:d1:52:e6:48:65:b0:4a:14:
7d:88:14:bb:79:dd:0d:5a:96:9b:8e:ed:dc:56:70:b9:a5:1a:
c4:9b:58:f4:5f:87:20:7a:e4:21:cc:da:4e:00:6a:2e:84:db:
d5:84:8c:92:a3:51:df:f2:f7:13:b8:2b:9f:2f:89:e7:bc:ab:
22:db:4e:1f:82:94:cd:5a:b6:ec:0f:46:99:fd:0f:32:a4:18:
49:be:63:fe:41:22:48:99:4f:3d:37:13:a4:e3:5b:1e:0c:7b:
87:4a:c3:c9:6d:1d:ee:9b:14:d5:69:db:38:7d:99:91:ca:a3:
0e:fd:7e:b1:41:94:24:1d:8f:80:26:c1:81:74:b6:30:e2:73:
fd:2e:8f:d7:b4:fa:05:20:8c:f4:3e:98:27:aa:68:40:95:e6:
56:19:a0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:58:02 2026 by rpki-client