Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: Ujy+C0VDb0ntlQyIqMWFRAFlSgBhrFbtHY9tRaP1EZI=
Subject key identifier: BA:14:0C:0C:51:ED:7B:75:4A:FE:D0:B3:E7:2F:79:0D:BE:8C:44:DB
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 019EC180008A310D9E6976F216CA71F679DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 10A1
Signing time: Sat 13 Jun 2026 15:00:51 +0000
Manifest this update: Sat 13 Jun 2026 15:00:51 +0000
Manifest next update: Sun 14 Jun 2026 15:00:51 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: T82zqzirmOTNqQUtTLu3cNVKXYFvpN+B13wSaVVFYQ4=)
2: SdOMrTA1LJZTbylGBdmnZADVV2c.roa (hash: 2oF71VsuS57X0mplIwyTPLvBv9+R4wlk3shw+VNP3cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:00:8a:31:0d:9e:69:76:f2:16:ca:71:f6:79:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Jun 13 15:00:51 2026 GMT
Not After : Jun 14 15:00:51 2026 GMT
Subject: CN=ba140c0c51ed7b754afed0b3e72f790dbe8c44db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:8e:8a:40:a7:e5:c4:e6:29:ba:71:7a:44:
be:6e:3f:39:4a:28:55:dd:86:8f:58:ae:bd:0a:5d:
f0:34:4c:0e:c1:b2:c9:81:24:1c:09:46:e5:2f:dc:
17:d4:9d:06:74:f5:c5:ad:24:d9:85:7f:b2:5b:31:
9b:c8:43:7a:b0:b5:f4:a1:7a:8a:88:98:52:c3:14:
b6:1f:5b:62:0f:2d:24:2a:13:70:40:3c:dc:c3:de:
ef:36:16:7c:1a:54:ff:39:8f:c7:d5:16:7b:63:e9:
55:c4:9b:89:95:5b:5b:96:8a:c0:af:bb:dc:c0:52:
d1:65:eb:d6:98:ac:fb:e2:c0:8b:21:10:5e:14:61:
6b:e9:f3:a8:46:bb:62:b2:84:47:41:8b:a1:60:4d:
11:29:50:e3:e5:f9:3c:b1:1c:81:a1:c2:6d:83:54:
01:38:e1:77:17:ec:7b:2b:c9:30:25:0d:86:58:03:
65:6c:e4:fd:21:a1:43:c6:58:c8:48:cb:17:d0:a4:
0f:30:51:af:57:ff:86:7e:86:ba:e4:1e:77:ae:3b:
d4:0b:ad:ba:8b:29:43:2a:1e:ce:27:be:3a:c7:34:
2f:3f:85:81:cd:d5:11:f4:7f:23:2c:a7:f9:3f:0d:
6b:1e:73:e4:ca:0a:22:16:7b:5d:b4:f7:9d:05:97:
9a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:14:0C:0C:51:ED:7B:75:4A:FE:D0:B3:E7:2F:79:0D:BE:8C:44:DB
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cf:0b:b6:de:11:31:10:54:4a:4e:8e:76:7a:da:8a:ba:1c:
74:db:4f:3d:fb:4c:dd:2a:8c:8b:d2:9a:36:be:3b:55:42:c1:
13:f2:e9:a5:4c:bd:88:c0:63:18:b8:b1:59:0e:bf:4c:19:1c:
5d:35:85:01:68:f4:4f:ce:cb:25:73:11:ce:e4:ee:8f:da:5a:
a7:da:57:ef:3b:c0:78:05:33:a5:69:4a:88:86:fc:20:31:0d:
69:1e:20:91:b1:da:ef:79:dc:01:d3:05:a0:b8:b0:8f:68:b7:
61:c4:45:dc:3c:26:ae:64:38:bf:7d:f4:87:fa:07:06:b1:e2:
af:be:f4:58:ae:bd:f0:83:34:41:fc:c1:91:8d:9e:49:38:c6:
51:ff:8f:e6:7b:bb:da:64:85:27:de:1c:2c:81:53:f3:de:19:
2b:03:6d:49:8a:2f:6f:13:d9:01:82:c1:13:36:2b:1c:95:88:
8c:da:01:e3:f9:0f:3f:be:02:49:1e:5d:1e:4e:c7:07:ae:84:
0e:57:ba:4b:60:ad:68:4c:40:14:6a:cc:58:5e:36:06:5f:20:
0d:52:99:3c:e0:bb:fa:77:3a:fc:f1:55:42:94:57:a0:25:e7:
0a:38:2a:f8:64:a6:03:e1:1f:ee:da:01:d3:6a:3b:e6:79:d9:
04:12:f2:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BgACKMQ2eaXbyFspx9nnfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZmFhNDBmNjI2M2UwMGQxMjkxNjk4NTc2YTYxN2E1YjVk
NjhhOWMwHhcNMjYwNjEzMTUwMDUxWhcNMjYwNjE0MTUwMDUxWjAzMTEwLwYDVQQD
EyhiYTE0MGMwYzUxZWQ3Yjc1NGFmZWQwYjNlNzJmNzkwZGJlOGM0NGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr06OikCn5cTmKbpxekS+bj85SihV
3YaPWK69Cl3wNEwOwbLJgSQcCUblL9wX1J0GdPXFrSTZhX+yWzGbyEN6sLX0oXqK
iJhSwxS2H1tiDy0kKhNwQDzcw97vNhZ8GlT/OY/H1RZ7Y+lVxJuJlVtblorAr7vc
wFLRZevWmKz74sCLIRBeFGFr6fOoRrtisoRHQYuhYE0RKVDj5fk8sRyBocJtg1QB
OOF3F+x7K8kwJQ2GWANlbOT9IaFDxljISMsX0KQPMFGvV/+Gfoa65B53rjvUC626
iylDKh7OJ746xzQvP4WBzdUR9H8jLKf5Pw1rHnPkygoiFntdtPedBZeaywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoUDAxR7Xt1Sv7Qs+cveQ2+jETbMB8GA1UdIwQY
MBaAFDz6pA9iY+ANEpFphXamF6W11oqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84NDVhZWUtZGFhYy00NjQxLTlmMzEt
OWU3ZjBmOTQxMDQ5LzEvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC84NDVhZWUtZGFhYy00NjQxLTlmMzEtOWU3ZjBmOTQxMDQ5
LzEvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATM8Ltt4R
MRBUSk6OdnrairocdNtPPftM3SqMi9KaNr47VULBE/LppUy9iMBjGLixWQ6/TBkc
XTWFAWj0T87LJXMRzuTuj9pap9pX7zvAeAUzpWlKiIb8IDENaR4gkbHa73ncAdMF
oLiwj2i3YcRF3DwmrmQ4v330h/oHBrHir770WK698IM0QfzBkY2eSTjGUf+P5nu7
2mSFJ94cLIFT894ZKwNtSYovbxPZAYLBEzYrHJWIjNoB4/kPP74CSR5dHk7HB66E
Dle6S2CtaExAFGrMWF42Bl8gDVKZPOC7+nc6/PFVQpRXoCXnCjgq+GSmA+Ef7toB
02o75nnZBBLycg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:44:12 2026 by rpki-client