Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: pk9O7alO2O8bq2aDONFUYzLrTGUPIU9CIL9bvZKUPZw=
Subject key identifier: 3A:55:57:C4:A3:60:54:2F:F5:54:0B:20:5E:68:D6:59:A5:C7:5F:9B
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 019CAC7E69E4A089D1020FC2491ED6E7A033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 0F8D
Signing time: Mon 02 Mar 2026 03:01:31 +0000
Manifest this update: Mon 02 Mar 2026 03:01:31 +0000
Manifest next update: Tue 03 Mar 2026 03:01:31 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: xC191BKh5kelSVFESX3K93qrl6LuBffZSMf5swuAtHg=)
2: SdOMrTA1LJZTbylGBdmnZADVV2c.roa (hash: 2oF71VsuS57X0mplIwyTPLvBv9+R4wlk3shw+VNP3cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:69:e4:a0:89:d1:02:0f:c2:49:1e:d6:e7:a0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Mar 2 03:01:31 2026 GMT
Not After : Mar 3 03:01:31 2026 GMT
Subject: CN=3a5557c4a360542ff5540b205e68d659a5c75f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:86:8e:07:cd:e6:3d:4d:34:7c:07:96:6a:13:
d7:fe:ec:fd:98:f8:6b:f6:10:9c:ec:c6:95:eb:c4:
98:1b:ce:7f:c2:d4:7a:06:bf:83:5b:55:71:7b:30:
c2:7f:69:28:a4:dd:67:61:2f:13:7d:ec:b2:65:4b:
b0:a2:10:44:df:46:70:17:d1:58:39:1f:bd:f9:17:
9d:b5:6f:28:e2:8e:0e:9e:d6:12:4b:80:c1:80:08:
7a:c1:49:17:b0:51:75:98:13:1c:0c:54:71:81:22:
c3:b0:f2:ed:21:28:70:c0:51:d5:a7:71:a8:7e:4a:
36:f6:6c:26:51:98:4f:a1:16:94:14:de:59:bb:b2:
0b:ee:b3:ce:f5:60:b5:5f:2f:54:94:e4:30:5e:2c:
1b:c4:82:ed:58:ba:cc:19:07:bc:42:37:6b:4f:47:
11:e5:93:7b:68:26:0b:57:7f:a9:d0:35:82:6b:00:
8d:76:b5:a6:e5:b7:68:c1:c1:f8:3c:94:85:27:4c:
1e:a4:60:33:82:0b:94:61:ca:52:0c:aa:92:17:e1:
3e:57:68:68:bc:32:ea:b9:84:fb:8c:06:7d:46:c5:
ef:69:79:71:dd:16:72:44:02:26:cb:2d:dc:74:9c:
73:03:3a:90:39:15:59:fe:57:05:a5:1c:33:05:25:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:55:57:C4:A3:60:54:2F:F5:54:0B:20:5E:68:D6:59:A5:C7:5F:9B
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b8:65:35:48:4f:02:c4:72:1a:be:a1:69:f0:2f:3a:54:92:
33:35:6f:df:8f:1f:91:7e:6f:ab:0b:18:c1:bc:cb:7a:5c:77:
09:57:b3:93:03:7f:1a:44:ac:05:04:1a:a7:fd:eb:94:2a:17:
f1:51:d6:40:80:f8:73:1e:6a:f5:61:a5:8c:7f:16:a3:85:96:
78:26:ac:6c:93:77:9e:db:0e:44:44:9c:b1:da:b5:be:90:05:
cc:60:8d:c1:ed:80:10:28:78:bd:ab:73:e9:65:99:2c:4d:6f:
d2:a6:04:8f:fe:12:f0:66:5d:7f:88:95:8c:32:92:30:b5:85:
ee:35:c3:6a:29:7a:b6:8b:f0:22:3b:32:77:cc:a5:a0:b7:78:
91:f8:87:89:82:87:ad:48:32:94:9b:a4:24:01:73:1f:39:2c:
eb:0f:be:d7:c0:25:3d:b6:ca:7a:a1:05:77:fb:03:94:2a:01:
ac:ef:ea:31:b1:c3:bc:bd:6c:7b:73:6a:7f:11:07:e4:37:fc:
d1:27:03:79:a3:2a:ce:5e:fe:e4:a1:c9:38:f6:7e:12:9b:a1:
06:92:06:d6:e8:0b:fc:d9:dd:6a:84:0e:9b:94:66:1d:77:b3:
dd:c1:80:91:df:17:8f:d0:3d:63:30:89:2c:4f:21:51:14:a4:
6f:33:39:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:08 2026 by rpki-client