Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: AuEDfoM2qw1GZR7JTqPQM+jDEbbox6stsjaJ3IuIR5I=
Subject key identifier: 6F:2D:68:14:E3:3E:B6:B6:B7:C0:5E:89:CC:14:EA:9E:EF:4E:6D:BC
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 019F90C79AF83FBEB5A4167AD9F76FEE8673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 0939
Signing time: Thu 23 Jul 2026 21:00:28 +0000
Manifest this update: Thu 23 Jul 2026 21:00:28 +0000
Manifest next update: Fri 24 Jul 2026 21:00:28 +0000
Files and hashes: 1: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: 0UmJoiKElagENSGxgP2eZPQ2oh0a+KM4IqhcMk2CLrM=)
2: rTC0QfBbtuMqPMUcNggAjT6mTZU.roa (hash: Kx4VZB+r4ecCnqS7wfmvRwNhUpPx2hLpmBb8CQQGRSA=)
3: xEEobC6a9g-ieILcoz7D0nJiJUk.roa (hash: oW3AWDFA5hp4F3w3Pl6J/jMvd/iESOLPY+Y+Yt3dnpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:9a:f8:3f:be:b5:a4:16:7a:d9:f7:6f:ee:86:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: Jul 23 21:00:28 2026 GMT
Not After : Jul 24 21:00:28 2026 GMT
Subject: CN=6f2d6814e33eb6b6b7c05e89cc14ea9eef4e6dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:1b:f6:b1:0c:7a:3c:4b:a8:3d:ed:c0:38:
8c:92:71:56:4d:8e:a4:75:fc:c8:94:b4:7e:21:b0:
fd:d7:56:39:24:4a:24:94:6c:fc:65:27:9b:07:58:
fb:16:30:fe:c3:4f:f0:e1:f2:f9:59:8f:46:84:36:
5f:7b:0d:e6:4c:ec:62:f6:fc:ad:aa:e6:65:42:d8:
29:98:67:c0:a2:cd:02:8e:22:f6:e7:f0:72:9d:6d:
b5:64:e2:0e:d6:da:88:58:9f:00:a3:58:08:77:19:
57:93:0a:37:42:b2:5b:d5:88:94:e9:b5:23:68:b6:
df:22:f1:7b:ed:de:b9:23:0b:13:6d:f1:77:04:28:
74:a3:a2:a4:4d:0c:94:45:3d:42:9a:2c:6f:3a:c0:
9b:a7:b9:07:b0:eb:21:c4:a1:38:e5:1d:3a:11:12:
34:f6:ae:80:25:80:2c:f3:49:96:0c:70:1a:20:2d:
61:43:b2:84:09:f1:cb:72:4f:f0:3b:7e:37:45:3e:
f2:61:7f:ef:3b:0c:01:fd:d2:d8:7b:3e:19:2f:c6:
22:eb:10:4e:46:ec:84:d4:d0:4c:4e:90:10:9d:4e:
aa:5c:4b:a8:10:cb:3d:28:b8:21:27:cc:58:46:b8:
5a:a5:ea:f3:42:df:78:91:67:bc:16:4c:89:11:04:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2D:68:14:E3:3E:B6:B6:B7:C0:5E:89:CC:14:EA:9E:EF:4E:6D:BC
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d3:cf:2d:64:05:93:a2:e7:b9:2b:bb:09:56:5c:a5:82:81:
3e:73:2c:cf:f5:e6:a6:ce:dd:71:32:0e:bc:46:79:17:16:78:
1a:7d:6a:88:a0:84:f1:7d:f7:18:86:4c:bc:90:b2:0b:e0:60:
95:67:f6:f6:57:2a:1d:db:d3:b9:ec:39:17:dc:1b:7c:bd:b9:
12:c8:2c:c8:03:be:1d:aa:ba:24:ae:4f:d1:f1:a3:97:c6:30:
30:2d:f1:54:91:c5:0b:cc:27:7b:ab:e6:15:ba:a9:29:46:b4:
d0:b0:ba:85:19:f7:ea:8c:38:fb:3f:3a:fb:d2:e0:9c:d6:76:
8f:82:ae:07:96:b7:30:f9:35:9d:56:a7:78:73:73:e2:00:d0:
55:b1:e3:22:65:59:17:4f:8e:ff:92:9e:aa:dd:14:98:21:48:
03:27:ba:a9:4b:c4:cc:5d:d8:4b:f7:96:b6:69:37:02:bd:15:
5b:32:0d:71:b7:14:de:16:de:1d:b5:fd:95:58:73:dd:62:5e:
2b:17:f6:bc:f0:13:0c:d1:0f:08:46:ee:06:f0:7f:63:4c:2d:
9d:9b:d9:3e:f5:da:71:f5:2f:a6:cc:42:83:21:60:c8:e4:15:
e6:5f:17:17:d1:27:28:a4:dd:81:f7:66:51:f8:75:1d:1d:82:
75:78:6e:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx5r4P761pBZ62fdv7oZzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OTc0OWZhMjMzN2RiMzNhNzY0NzRlYjgxMmMwMzRlMzA1
MDlkMmEwHhcNMjYwNzIzMjEwMDI4WhcNMjYwNzI0MjEwMDI4WjAzMTEwLwYDVQQD
Eyg2ZjJkNjgxNGUzM2ViNmI2YjdjMDVlODljYzE0ZWE5ZWVmNGU2ZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxgb9rEMejxLqD3twDiMknFWTY6k
dfzIlLR+IbD911Y5JEoklGz8ZSebB1j7FjD+w0/w4fL5WY9GhDZfew3mTOxi9vyt
quZlQtgpmGfAos0CjiL25/BynW21ZOIO1tqIWJ8Ao1gIdxlXkwo3QrJb1YiU6bUj
aLbfIvF77d65IwsTbfF3BCh0o6KkTQyURT1CmixvOsCbp7kHsOshxKE45R06ERI0
9q6AJYAs80mWDHAaIC1hQ7KECfHLck/wO343RT7yYX/vOwwB/dLYez4ZL8Yi6xBO
RuyE1NBMTpAQnU6qXEuoEMs9KLghJ8xYRrhaperzQt94kWe8FkyJEQQx6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8taBTjPra2t8BeicwU6p7vTm28MB8GA1UdIwQY
MBaAFKaXSfojN9szp2R064EsA04wUJ0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iMWJmNTctNjc5Zi00NTY0LWI3MDEt
Y2IyOTY3MDhkZWM4LzEvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iMWJmNTctNjc5Zi00NTY0LWI3MDEtY2IyOTY3MDhkZWM4
LzEvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtPPLWQF
k6LnuSu7CVZcpYKBPnMsz/Xmps7dcTIOvEZ5FxZ4Gn1qiKCE8X33GIZMvJCyC+Bg
lWf29lcqHdvTuew5F9wbfL25EsgsyAO+Haq6JK5P0fGjl8YwMC3xVJHFC8wne6vm
FbqpKUa00LC6hRn36ow4+z86+9LgnNZ2j4KuB5a3MPk1nVaneHNz4gDQVbHjImVZ
F0+O/5Keqt0UmCFIAye6qUvEzF3YS/eWtmk3Ar0VWzINcbcU3hbeHbX9lVhz3WJe
Kxf2vPATDNEPCEbuBvB/Y0wtnZvZPvXacfUvpsxCgyFgyOQV5l8XF9EnKKTdgfdm
Ufh1HR2CdXhuNw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:07 2026 by rpki-client