Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: PAIQSgb2/UB9lsvU3Dt8bM1UZPyhdmi5vtMKyX4m46U=
Subject key identifier: FC:8D:A4:15:1D:7F:7D:83:CE:2C:01:BF:C0:26:BF:9D:DC:63:AF:EC
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 019FAB2C88058BA0A9D1303CE6880B7B10B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 111A
Signing time: Wed 29 Jul 2026 00:00:50 +0000
Manifest this update: Wed 29 Jul 2026 00:00:50 +0000
Manifest next update: Thu 30 Jul 2026 00:00:50 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: L21icruOZy7zhGCVZZq9MfgyYKqwmEqhOTFoGS1u8Xs=)
2: SdOMrTA1LJZTbylGBdmnZADVV2c.roa (hash: 2oF71VsuS57X0mplIwyTPLvBv9+R4wlk3shw+VNP3cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:88:05:8b:a0:a9:d1:30:3c:e6:88:0b:7b:10:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Jul 29 00:00:50 2026 GMT
Not After : Jul 30 00:00:50 2026 GMT
Subject: CN=fc8da4151d7f7d83ce2c01bfc026bf9ddc63afec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:d9:6f:06:d3:78:84:01:30:1e:45:44:40:
64:e3:66:8b:8a:e2:8e:38:c0:00:11:87:29:4f:db:
dd:5a:7c:32:5a:ef:10:73:72:66:67:92:7d:28:41:
28:45:3a:80:35:bb:24:3a:86:e4:ad:fe:08:0f:80:
28:15:64:34:97:a3:37:ea:e2:2c:04:81:b7:22:69:
f1:e5:da:ce:bd:36:26:41:af:9a:f9:31:8e:42:7a:
48:4f:aa:d6:aa:6a:db:14:ed:f5:95:eb:d5:1c:2d:
4e:28:91:78:20:56:14:39:4e:1e:1a:c7:1d:1e:28:
1c:32:cc:50:0d:59:ca:75:81:b5:56:f7:f1:04:a2:
0d:59:e5:2b:09:a7:9e:d5:6b:ab:99:47:77:48:28:
a0:7c:0e:6a:73:ce:10:e5:47:0f:a8:48:fd:49:f2:
b6:90:56:d9:91:a8:d0:58:64:1e:d9:82:ad:ea:e5:
80:c0:0a:4b:ca:ee:89:da:3c:bf:50:58:e5:0a:f2:
c6:85:67:73:d9:de:36:56:e2:96:b2:1a:de:55:15:
c6:66:0d:ba:dd:90:20:84:ea:2c:79:61:9d:54:23:
12:4b:b9:0c:22:a2:67:bd:e1:55:03:29:53:90:74:
19:ce:85:d1:02:3a:8f:cc:2b:c3:28:e1:7c:7a:bd:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8D:A4:15:1D:7F:7D:83:CE:2C:01:BF:C0:26:BF:9D:DC:63:AF:EC
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:87:8a:b2:82:3e:7a:ca:b8:40:6b:77:6f:21:b6:10:c3:bf:
b0:96:e8:78:9e:8d:46:3c:97:0e:61:0a:ca:7a:d4:fb:21:92:
97:05:99:29:64:01:39:e9:4d:21:4b:6e:64:2b:3b:5c:bb:23:
8f:e7:0c:5c:0e:e9:06:69:b4:e2:54:c9:88:db:9c:28:c5:b0:
c3:27:16:b4:05:e6:c5:c0:7b:fa:36:aa:60:a2:86:48:5d:69:
66:1b:f0:6f:73:f2:82:91:a0:68:20:fb:bf:f7:5a:b5:24:92:
da:03:42:64:cb:86:7f:55:1b:d0:e9:5d:56:ec:9b:51:4d:36:
14:83:c5:ae:aa:6c:a5:1e:23:cb:16:15:b1:92:63:ae:b2:30:
fd:0a:a5:7b:5a:38:6f:b0:48:ff:eb:45:90:39:eb:e0:a1:cf:
ee:df:4f:78:3c:43:08:70:af:2f:62:ad:05:ed:a4:63:91:e2:
88:62:6b:44:24:35:49:de:1f:d4:cb:72:9f:0e:7e:7f:4b:bf:
be:ff:80:a6:b3:52:0f:da:bc:ad:b0:7f:5d:09:2f:d9:a0:1b:
cf:9e:1b:c4:6c:f6:db:8a:fd:be:df:6c:c5:4d:5b:d4:63:a6:
7c:8d:39:5f:fc:5a:c0:6c:49:1a:7a:c4:81:bb:8e:7e:c7:26:
06:1a:5a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:49:19 2026 by rpki-client