Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: Ei59axtAD8P04iIWzGKHBbVvGnCgWWyxqktxbNhuTbE=
Subject key identifier: 65:E0:57:CC:76:4B:82:CA:00:36:26:8C:21:FE:6B:2A:84:05:28:06
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 019D9BF5BBA0A1D64B52D817E0E6CA7EC7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 1009
Signing time: Fri 17 Apr 2026 15:01:05 +0000
Manifest this update: Fri 17 Apr 2026 15:01:05 +0000
Manifest next update: Sat 18 Apr 2026 15:01:05 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: W3rdm8+Z6O4QkimrKDn52mI5C1ri4hUu0krYUHLDlGA=)
2: SdOMrTA1LJZTbylGBdmnZADVV2c.roa (hash: 2oF71VsuS57X0mplIwyTPLvBv9+R4wlk3shw+VNP3cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:bb:a0:a1:d6:4b:52:d8:17:e0:e6:ca:7e:c7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Apr 17 15:01:05 2026 GMT
Not After : Apr 18 15:01:05 2026 GMT
Subject: CN=65e057cc764b82ca0036268c21fe6b2a84052806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:2f:10:3b:c8:a3:29:63:ab:e2:17:6f:09:
56:19:a1:7b:28:1c:c6:8e:13:10:25:86:d2:34:37:
fc:d4:60:25:c8:c3:43:f5:27:dc:6d:0b:47:23:28:
d7:44:53:63:c0:db:3c:10:94:f8:57:63:2d:c1:7a:
36:5f:36:89:e4:06:70:df:0a:9b:1e:01:e8:0a:a2:
7a:52:ff:99:14:1c:d3:6f:af:aa:17:58:62:10:b2:
18:50:8c:41:d0:29:44:51:c1:29:17:6a:65:4d:3c:
4d:b8:07:74:aa:58:a2:98:a5:51:28:0f:e6:1a:b9:
38:7c:05:e6:f1:7e:fc:3e:5b:06:d1:11:dd:dc:fc:
c1:0e:4f:70:e7:26:e6:af:60:13:3f:b4:ae:38:97:
74:12:33:ca:09:6c:7e:ec:6b:9a:cd:f2:64:44:26:
b9:e0:3c:43:1f:c5:22:05:32:2e:6b:b9:87:8e:54:
bf:88:70:06:8c:40:12:81:3c:85:d0:c0:86:8d:dd:
1d:24:fb:97:3d:03:da:9a:ba:59:f6:0f:d3:b8:3d:
51:6f:9a:16:dd:7d:1d:29:1e:f3:03:b9:9d:f9:4e:
3d:8c:e6:a4:a4:5f:3b:c9:2f:e4:d1:44:58:b9:81:
5e:b3:b8:93:bf:a4:24:16:01:22:8e:84:60:d3:e5:
36:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E0:57:CC:76:4B:82:CA:00:36:26:8C:21:FE:6B:2A:84:05:28:06
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:15:2e:1b:9e:3a:63:f3:c5:74:98:21:45:bd:e8:94:db:13:
d3:01:32:31:48:ae:96:88:76:c9:c1:6b:05:93:b7:2d:d2:4d:
df:84:50:ac:fd:fe:f9:24:d8:65:aa:d5:1b:72:00:44:5e:b3:
b3:36:ca:09:8e:b3:15:95:1c:dd:6d:7d:34:04:10:07:2f:ba:
2e:bd:ef:cb:eb:45:fd:61:c6:89:b0:ab:9f:60:88:95:db:72:
d4:7b:c1:6e:48:00:58:57:fa:76:16:df:eb:04:59:3d:2d:67:
e4:98:6c:32:d1:c7:9f:11:3e:d0:2a:af:dd:d7:53:64:30:27:
76:07:2f:08:04:e5:c1:e9:8d:d7:35:6b:98:7a:f0:d9:36:0f:
09:e0:ef:75:93:76:64:89:18:86:d8:af:4f:87:11:17:ed:95:
32:d6:96:d7:a5:90:e1:b5:bb:4c:7a:e4:27:52:a7:f5:de:f4:
7b:a9:c5:2c:75:bc:58:ed:ff:cf:13:ef:d9:e9:87:46:ec:bb:
f5:c5:48:1b:08:2e:96:b1:84:c4:d9:da:11:19:14:89:2a:d0:
4d:bf:af:47:bb:39:ad:52:3a:dc:ca:cc:1f:13:0c:7a:8d:4a:
18:1b:84:67:09:1a:ce:68:87:12:1f:9f:be:74:ed:79:29:3f:
ab:96:70:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:30 2026 by rpki-client