Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: muTSTrCGUMXeMqZZipN3PGxfnAzYncSnx4jrH5T6vD4=
Subject key identifier: 7E:96:B6:43:77:2D:F8:73:00:6A:27:C7:27:BB:5A:AB:16:63:16:D3
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 01A123C1CBED0CBC8C37CC16781FEF6378BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 11DD
Signing time: Sat 10 Oct 2026 03:01:05 +0000
Manifest this update: Sat 10 Oct 2026 03:01:05 +0000
Manifest next update: Sun 11 Oct 2026 03:01:05 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: HiwnMQHzdWRqrrzov2uQFBH6JffMFGdVXktTESDpyC8=)
2: SdOMrTA1LJZTbylGBdmnZADVV2c.roa (hash: 2oF71VsuS57X0mplIwyTPLvBv9+R4wlk3shw+VNP3cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:c1:cb:ed:0c:bc:8c:37:cc:16:78:1f:ef:63:78:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Oct 10 03:01:05 2026 GMT
Not After : Oct 11 03:01:05 2026 GMT
Subject: CN=7e96b643772df873006a27c727bb5aab166316d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:97:70:64:76:ef:dc:dc:ef:2e:33:7d:58:
b6:e1:15:ab:0f:89:40:cd:25:64:08:96:b3:19:63:
1a:df:9c:03:6d:9c:d1:21:c2:35:ed:fa:20:ab:49:
a8:b8:df:b5:40:2c:ee:9e:08:87:6b:1b:28:1d:bb:
7c:be:6f:80:c5:2d:bf:26:d8:7c:51:21:48:3e:82:
4c:ca:2a:fb:32:9b:cf:00:f4:c5:1c:49:c0:cc:3c:
ce:44:e5:4d:ec:a7:24:63:2d:93:24:17:a7:d0:6d:
ba:c4:fb:75:0b:c9:97:61:b7:58:66:14:77:5f:07:
ac:60:46:44:87:35:35:b0:61:db:0b:e7:b5:68:17:
02:d1:f4:2b:07:41:04:f1:19:0a:37:48:7d:10:3a:
5f:4d:6f:3a:cc:68:84:86:5b:7d:b3:6d:7f:42:4e:
0d:6e:29:2d:a1:3c:73:23:37:26:45:4d:16:30:9e:
25:53:cd:27:e1:7d:65:98:54:7e:a9:4d:2e:d9:b2:
40:a5:9f:f6:7b:7a:35:26:dd:cd:cf:a0:cd:79:30:
89:2f:e8:da:bc:2f:1a:25:b0:52:c8:4a:76:73:22:
de:ca:55:30:3f:55:0d:a1:6a:57:3d:ef:2f:f2:22:
af:59:43:e7:f6:0a:16:44:d5:10:d3:37:20:60:22:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:96:B6:43:77:2D:F8:73:00:6A:27:C7:27:BB:5A:AB:16:63:16:D3
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:26:ea:b5:9a:63:66:8a:80:0b:12:b9:28:5c:2d:1f:b0:03:
8b:3d:a3:55:b6:e3:f4:c8:33:11:8e:06:6e:b9:ce:21:b5:fd:
93:4a:d8:ef:04:1b:54:6e:e8:a8:79:d1:36:7e:61:fb:73:d9:
58:21:b9:d7:22:75:b0:b5:30:5f:bc:9d:fe:d1:fc:49:03:82:
01:46:90:95:a3:9c:fc:9b:26:f3:8e:ea:b5:de:17:73:11:17:
fe:f0:f0:b7:12:50:b6:e5:c8:2b:f5:99:1a:54:41:c1:57:10:
b7:95:da:f4:9c:5c:65:ae:5a:e6:3f:41:ff:de:55:1c:00:35:
aa:d7:b2:06:79:ce:05:f8:a9:35:e7:b7:9f:1e:93:91:d8:37:
40:02:97:b6:f6:07:af:f1:c1:e6:b4:c9:9a:2a:57:8d:6e:e0:
f0:2c:f5:67:d2:de:ed:9e:22:78:71:f7:0f:00:8f:85:c0:23:
bb:9e:e1:6f:55:8d:d2:d5:14:3b:bc:ba:30:51:b5:71:cb:81:
90:a7:b5:15:72:f1:ce:8d:f0:51:37:c5:69:fd:79:76:f2:6d:
1f:47:66:0a:60:82:c1:17:d6:10:e2:a0:9a:42:ac:61:ec:90:
d0:b1:b5:66:49:0b:d7:30:48:95:a6:93:90:ac:39:13:e9:f7:
0d:e9:70:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEjwcvtDLyMN8wWeB/vY3i6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZmFhNDBmNjI2M2UwMGQxMjkxNjk4NTc2YTYxN2E1YjVk
NjhhOWMwHhcNMjYxMDEwMDMwMTA1WhcNMjYxMDExMDMwMTA1WjAzMTEwLwYDVQQD
Eyg3ZTk2YjY0Mzc3MmRmODczMDA2YTI3YzcyN2JiNWFhYjE2NjMxNmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJaXcGR279zc7y4zfVi24RWrD4lA
zSVkCJazGWMa35wDbZzRIcI17fogq0mouN+1QCzungiHaxsoHbt8vm+AxS2/Jth8
USFIPoJMyir7MpvPAPTFHEnAzDzOROVN7KckYy2TJBen0G26xPt1C8mXYbdYZhR3
XwesYEZEhzU1sGHbC+e1aBcC0fQrB0EE8RkKN0h9EDpfTW86zGiEhlt9s21/Qk4N
biktoTxzIzcmRU0WMJ4lU80n4X1lmFR+qU0u2bJApZ/2e3o1Jt3Nz6DNeTCJL+ja
vC8aJbBSyEp2cyLeylUwP1UNoWpXPe8v8iKvWUPn9goWRNUQ0zcgYCJ57wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6WtkN3LfhzAGonxye7WqsWYxbTMB8GA1UdIwQY
MBaAFDz6pA9iY+ANEpFphXamF6W11oqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84NDVhZWUtZGFhYy00NjQxLTlmMzEt
OWU3ZjBmOTQxMDQ5LzEvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC84NDVhZWUtZGFhYy00NjQxLTlmMzEtOWU3ZjBmOTQxMDQ5
LzEvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbybqtZpj
ZoqACxK5KFwtH7ADiz2jVbbj9MgzEY4GbrnOIbX9k0rY7wQbVG7oqHnRNn5h+3PZ
WCG51yJ1sLUwX7yd/tH8SQOCAUaQlaOc/Jsm847qtd4XcxEX/vDwtxJQtuXIK/WZ
GlRBwVcQt5Xa9JxcZa5a5j9B/95VHAA1qteyBnnOBfipNee3nx6Tkdg3QAKXtvYH
r/HB5rTJmipXjW7g8Cz1Z9Le7Z4ieHH3DwCPhcAju57hb1WN0tUUO7y6MFG1ccuB
kKe1FXLxzo3wUTfFaf15dvJtH0dmCmCCwRfWEOKgmkKsYeyQ0LG1ZkkL1zBIlaaT
kKw5E+n3DelwLA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 07:50:01 2026 by rpki-client