Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: ZKqBqDJHL0IbJQBhVGeskwaKK9mKpQlXOQwK57RR9UU=
Subject key identifier: A7:34:B0:6C:82:96:D9:8D:A7:D8:92:BC:15:D2:14:05:0F:D8:1F:27
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 019D26CCCDC71FA7A87D507E07CA89FC5FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 07F9
Signing time: Wed 25 Mar 2026 21:00:49 +0000
Manifest this update: Wed 25 Mar 2026 21:00:49 +0000
Manifest next update: Thu 26 Mar 2026 21:00:49 +0000
Files and hashes: 1: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: nISHe0xDZmjhEveAv+Uj2/XbYZGIKuy31aKjRM4wX0c=)
2: rTC0QfBbtuMqPMUcNggAjT6mTZU.roa (hash: Kx4VZB+r4ecCnqS7wfmvRwNhUpPx2hLpmBb8CQQGRSA=)
3: xEEobC6a9g-ieILcoz7D0nJiJUk.roa (hash: oW3AWDFA5hp4F3w3Pl6J/jMvd/iESOLPY+Y+Yt3dnpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:cd:c7:1f:a7:a8:7d:50:7e:07:ca:89:fc:5f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: Mar 25 21:00:49 2026 GMT
Not After : Mar 26 21:00:49 2026 GMT
Subject: CN=a734b06c8296d98da7d892bc15d214050fd81f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:f5:6e:3c:75:84:0a:5d:bb:63:9e:92:f7:
7b:50:ee:ce:b7:70:3f:8e:c3:f7:63:b7:ce:71:51:
c4:e8:fb:f5:7c:cb:34:40:24:a0:1d:86:55:48:c1:
ca:22:52:f1:f5:b3:be:cf:e5:7f:22:67:3d:7f:09:
ed:68:8a:28:2a:a9:5c:2d:aa:9d:8c:47:a9:45:75:
38:e6:83:3e:40:60:78:25:77:d8:43:8d:89:34:79:
9c:2f:c0:85:e9:fd:fa:ef:f1:c1:35:cd:f6:f9:73:
e5:49:f6:e3:55:71:02:08:6c:f1:cf:71:79:29:df:
91:33:13:e8:86:5c:20:7f:4a:c0:2d:c8:94:7f:d7:
61:19:a1:5c:3f:47:26:b3:72:95:25:03:fb:9c:32:
52:93:73:12:ed:c8:ce:28:2b:2d:c7:d1:b3:90:a2:
9c:3d:b2:19:05:1a:44:f0:99:1c:06:a5:d2:7b:9f:
bf:fe:fc:6f:a1:17:34:4b:2c:3d:1f:a5:16:94:a8:
31:ca:e1:44:44:f3:dd:fe:f6:81:3f:29:82:53:12:
29:97:6f:fa:13:8f:54:bb:aa:dc:1c:aa:ae:4e:15:
82:7a:e3:88:18:de:03:a5:ac:c0:04:23:70:c0:2b:
a3:e6:c5:1a:fa:23:12:c8:2e:21:d2:a0:14:d9:a7:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:34:B0:6C:82:96:D9:8D:A7:D8:92:BC:15:D2:14:05:0F:D8:1F:27
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:48:ed:bc:0e:04:3a:78:23:15:3c:b9:36:67:08:c1:1a:db:
43:71:a0:32:8a:3b:a5:9b:9c:48:ee:28:7e:e1:fc:e2:8c:6a:
fd:74:02:0e:01:b7:c4:1c:ee:e8:32:3f:e9:74:c6:00:18:eb:
a7:c2:26:37:ad:3d:eb:7a:ab:54:e7:54:9c:2b:01:45:85:c7:
f2:11:77:40:58:d5:55:c1:dd:33:bc:0f:62:f9:05:35:3a:74:
83:73:65:86:4c:c5:f8:6c:34:8e:38:ab:91:39:f8:87:33:02:
0a:f4:9f:69:16:62:2b:b1:64:96:36:6a:d4:b1:25:00:d0:d8:
a7:cf:ef:c8:4d:af:45:84:cb:6e:6d:0e:ec:6b:f0:68:f2:61:
9b:e5:e6:dd:40:bb:2b:15:7a:9c:4a:56:4a:5d:43:f0:b5:ce:
9b:4d:df:35:67:f3:48:d7:c7:47:cb:c1:11:db:37:7d:d5:f4:
01:fc:ed:7c:cd:c8:54:d2:cf:16:3c:4b:fa:59:d8:70:50:21:
ed:6c:a6:8a:88:af:1a:7e:98:ba:c3:1a:a3:19:4c:1c:e1:12:
ea:fe:a3:da:cf:56:fe:62:ec:95:cd:e3:36:13:3a:71:26:ce:
3b:47:ae:0e:57:77:c0:77:87:78:e2:5a:66:d0:9c:c4:a5:a8:
17:19:29:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:21 2026 by rpki-client