Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: i4PIoUlMDwaByaA43ivl7uWWid4GHBAFrp8WpqAIthU=
Subject key identifier: 32:0F:4A:F9:5B:29:9C:9D:F3:68:7A:70:B4:B1:4D:66:FC:70:18:64
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 019D2627F565E6431167B89115372A0DC810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 0FCC
Signing time: Wed 25 Mar 2026 18:00:46 +0000
Manifest this update: Wed 25 Mar 2026 18:00:46 +0000
Manifest next update: Thu 26 Mar 2026 18:00:46 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: 8OXyj9zlSOfUuC56E5FjOGeg0dOFO13+Dl+LoGFnrN8=)
2: SdOMrTA1LJZTbylGBdmnZADVV2c.roa (hash: 2oF71VsuS57X0mplIwyTPLvBv9+R4wlk3shw+VNP3cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:f5:65:e6:43:11:67:b8:91:15:37:2a:0d:c8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Mar 25 18:00:46 2026 GMT
Not After : Mar 26 18:00:46 2026 GMT
Subject: CN=320f4af95b299c9df3687a70b4b14d66fc701864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:81:4e:21:90:b1:8b:76:d2:24:78:61:b9:
6d:db:ee:ba:8a:e1:9d:4a:67:19:b9:cb:b7:56:50:
c7:b6:9d:27:7c:10:ef:cb:a1:91:a1:71:c1:1b:fa:
1f:a4:b5:5f:f8:fb:f5:08:cf:fd:b5:c6:c8:c3:9a:
df:c4:e2:6f:12:d5:05:bf:b7:e3:d8:0d:c0:f1:9c:
5d:a6:f1:aa:f4:1e:b8:ba:53:10:25:0f:3d:65:6d:
cc:7d:d7:9d:cc:aa:0e:cd:92:9b:5d:3f:fa:d0:d1:
66:39:90:34:2a:94:46:5d:48:a1:d3:ee:27:be:be:
e2:4e:cc:13:fb:45:d1:b7:2f:60:f7:c2:df:2c:95:
3e:1a:20:73:71:7a:2a:86:c2:07:4d:9d:d9:63:1e:
0e:83:f8:69:cd:a1:7b:81:f7:00:02:fb:44:d8:ed:
e7:94:ca:99:78:e8:1a:26:8a:f8:3a:4a:d9:2c:10:
d9:9c:12:4f:7f:88:99:0c:8c:1d:1d:ad:99:37:a5:
74:ed:c7:b3:40:c8:f4:86:7d:37:3b:a3:9c:ed:0e:
21:5f:d3:90:bf:ee:40:84:b4:07:3a:24:a7:c3:84:
43:cc:39:c6:11:17:fe:fa:bd:9f:ca:3c:b3:70:19:
b3:4f:95:ac:62:fc:c8:d8:5d:f9:27:3c:1d:63:39:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0F:4A:F9:5B:29:9C:9D:F3:68:7A:70:B4:B1:4D:66:FC:70:18:64
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:67:85:75:8b:7f:b9:0f:dc:4b:1d:65:30:20:6a:f1:d4:0f:
65:2f:55:e3:b9:e8:83:bd:3e:0d:30:a3:33:ce:d3:e7:4b:3e:
5d:2a:2d:e4:e6:8d:5d:63:f2:24:63:51:53:be:09:c6:c1:d6:
df:3b:3c:2e:a6:8c:03:55:2b:85:7f:c1:63:85:2d:52:2d:e6:
d3:22:55:f6:9f:15:a5:01:05:27:63:9a:a7:f6:7a:cc:39:16:
c2:b3:f6:0e:69:78:8a:d1:a9:36:ee:9d:b9:3b:a9:3b:13:e5:
4f:44:37:10:d2:a5:03:f6:b3:3b:fd:e4:b0:ee:ae:f7:84:47:
63:59:8b:e9:cd:e0:cd:76:66:74:73:af:94:fc:40:57:29:6e:
ea:63:12:a5:38:81:72:c1:08:46:50:56:1a:8d:df:04:18:47:
20:c1:ae:25:9e:6a:b9:6a:3c:60:ff:4f:b9:3f:a7:cb:ae:5e:
db:f0:79:bd:5f:5d:66:89:9e:e2:03:4a:c7:d3:f7:01:91:4e:
3e:0d:f4:03:79:a3:bb:8a:49:59:7e:4f:04:7e:26:99:60:1d:
16:c4:cc:61:95:a9:44:36:35:03:99:61:99:19:e3:55:dc:0c:
62:df:20:03:be:c2:aa:b8:29:a0:2f:30:c4:fd:a8:6c:53:3b:
2f:b7:2f:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mJ/Vl5kMRZ7iRFTcqDcgQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZmFhNDBmNjI2M2UwMGQxMjkxNjk4NTc2YTYxN2E1YjVk
NjhhOWMwHhcNMjYwMzI1MTgwMDQ2WhcNMjYwMzI2MTgwMDQ2WjAzMTEwLwYDVQQD
EygzMjBmNGFmOTViMjk5YzlkZjM2ODdhNzBiNGIxNGQ2NmZjNzAxODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltCBTiGQsYt20iR4Yblt2+66iuGd
SmcZucu3VlDHtp0nfBDvy6GRoXHBG/ofpLVf+Pv1CM/9tcbIw5rfxOJvEtUFv7fj
2A3A8ZxdpvGq9B64ulMQJQ89ZW3MfdedzKoOzZKbXT/60NFmOZA0KpRGXUih0+4n
vr7iTswT+0XRty9g98LfLJU+GiBzcXoqhsIHTZ3ZYx4Og/hpzaF7gfcAAvtE2O3n
lMqZeOgaJor4OkrZLBDZnBJPf4iZDIwdHa2ZN6V07cezQMj0hn03O6Oc7Q4hX9OQ
v+5AhLQHOiSnw4RDzDnGERf++r2fyjyzcBmzT5WsYvzI2F35JzwdYzm2SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIPSvlbKZyd82h6cLSxTWb8cBhkMB8GA1UdIwQY
MBaAFDz6pA9iY+ANEpFphXamF6W11oqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84NDVhZWUtZGFhYy00NjQxLTlmMzEt
OWU3ZjBmOTQxMDQ5LzEvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC84NDVhZWUtZGFhYy00NjQxLTlmMzEtOWU3ZjBmOTQxMDQ5
LzEvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGeFdYt/
uQ/cSx1lMCBq8dQPZS9V47nog70+DTCjM87T50s+XSot5OaNXWPyJGNRU74JxsHW
3zs8LqaMA1UrhX/BY4UtUi3m0yJV9p8VpQEFJ2Oap/Z6zDkWwrP2Dml4itGpNu6d
uTupOxPlT0Q3ENKlA/azO/3ksO6u94RHY1mL6c3gzXZmdHOvlPxAVylu6mMSpTiB
csEIRlBWGo3fBBhHIMGuJZ5quWo8YP9PuT+ny65e2/B5vV9dZome4gNKx9P3AZFO
Pg30A3mju4pJWX5PBH4mmWAdFsTMYZWpRDY1A5lhmRnjVdwMYt8gA77CqrgpoC8w
xP2obFM7L7cvHw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:56 2026 by rpki-client