Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: jR5c3vZwG8n+GZGSeVoZyjtZO0/k/JXEwImICM4Nl4c=
Subject key identifier: 41:D3:E4:BD:E0:95:56:40:1B:9F:A2:73:1B:4C:7F:23:92:FD:62:9E
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 019E1DFE45B44963D545D37668DA9F75E041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 0879
Signing time: Tue 12 May 2026 21:01:03 +0000
Manifest this update: Tue 12 May 2026 21:01:03 +0000
Manifest next update: Wed 13 May 2026 21:01:03 +0000
Files and hashes: 1: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: ZlObRV/aeYttyAVcNQivrZQmqwdiw1SBRffhElT1xnA=)
2: rTC0QfBbtuMqPMUcNggAjT6mTZU.roa (hash: Kx4VZB+r4ecCnqS7wfmvRwNhUpPx2hLpmBb8CQQGRSA=)
3: xEEobC6a9g-ieILcoz7D0nJiJUk.roa (hash: oW3AWDFA5hp4F3w3Pl6J/jMvd/iESOLPY+Y+Yt3dnpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:45:b4:49:63:d5:45:d3:76:68:da:9f:75:e0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: May 12 21:01:03 2026 GMT
Not After : May 13 21:01:03 2026 GMT
Subject: CN=41d3e4bde09556401b9fa2731b4c7f2392fd629e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:90:db:3e:40:44:62:2f:73:d1:d9:0e:63:
bb:1b:d8:a5:41:a6:36:0a:c3:84:36:73:88:21:52:
98:f5:d5:9e:1a:61:6d:56:d8:fb:49:da:fb:86:60:
3a:c9:bb:c0:2f:a4:c9:ff:3f:d4:06:ec:8a:f4:37:
b4:44:20:9b:89:30:73:45:12:0c:f1:82:c8:79:d0:
9d:2f:cd:66:5f:d8:f1:c8:da:23:43:78:0d:41:2b:
bc:3c:c6:74:f2:f5:d8:01:b9:34:2b:ce:15:16:94:
08:e8:b2:4e:11:c9:0c:52:83:9b:f2:97:74:3c:cb:
8a:35:3c:8e:38:ba:69:5a:67:d8:92:a6:06:aa:4e:
65:ca:83:91:d7:83:0f:50:f9:ac:89:06:f6:ea:18:
f6:b4:de:a2:09:c0:84:d3:19:b6:6f:1e:ee:f7:b0:
3e:a4:3f:9d:e2:70:b7:7f:18:c9:56:1c:9f:75:25:
57:57:c4:97:e7:d8:4e:26:ba:b6:b2:f4:7b:95:36:
5e:2f:2c:a4:6d:bc:2a:0d:35:90:ee:c4:3a:09:35:
fd:fc:12:6c:b9:ff:ed:28:a6:a7:6e:c8:49:2d:1f:
75:52:69:3b:9a:da:d2:d4:95:25:c5:72:9f:fa:cb:
8d:e2:7b:81:e9:b5:2c:42:67:04:34:24:e6:d0:06:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D3:E4:BD:E0:95:56:40:1B:9F:A2:73:1B:4C:7F:23:92:FD:62:9E
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:47:e3:c7:09:3f:ed:ef:42:66:60:97:3a:ad:f2:3f:01:15:
97:92:8e:68:3e:67:13:85:31:b9:4d:a8:53:7b:5c:16:b9:80:
a9:5e:e9:a5:5e:94:a4:14:e7:2b:68:22:cd:9f:57:75:a5:0d:
4a:27:b0:f0:d5:48:58:5b:37:22:52:2a:4c:fb:f6:70:59:d5:
14:bd:c5:72:84:63:cf:2b:8e:6f:fd:57:b9:69:13:13:8d:67:
63:0d:9a:ed:31:5f:87:e3:91:0d:55:21:b8:61:f3:01:9d:ac:
5e:ab:0c:41:94:d0:38:7e:cf:33:d7:1c:d8:8b:0b:f8:e4:40:
1b:c4:7a:63:aa:e0:99:65:fe:9e:8c:4f:ef:75:23:16:64:70:
bf:6e:2e:18:65:d0:9a:35:15:e9:46:d0:23:bc:82:06:d3:73:
be:d4:29:13:48:1a:88:65:4e:b2:9b:d1:b6:76:6d:b7:85:17:
28:96:b6:08:08:90:39:cb:57:28:18:83:64:af:06:53:89:57:
70:a5:6b:2d:c8:aa:5e:31:80:f6:ff:27:58:10:e9:56:e7:b7:
50:87:71:53:25:69:ad:97:7f:5e:ac:fa:c8:7b:d2:b7:13:2c:
ec:7e:37:e6:4d:0a:dc:e7:b8:28:a8:a5:51:05:c5:33:30:ca:
a1:cd:2c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:22 2026 by rpki-client