Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: kaVZcpj7y4saEs4M/TvrKkFXxs3jGNOo1CV1TyTKVcM=
Subject key identifier: BC:21:AC:9F:19:50:83:EF:04:7A:2C:AA:40:F6:FA:80:51:C0:25:FF
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 019EC224A1690A1C8766A00821553E8956E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 08CE
Signing time: Sat 13 Jun 2026 18:00:40 +0000
Manifest this update: Sat 13 Jun 2026 18:00:40 +0000
Manifest next update: Sun 14 Jun 2026 18:00:40 +0000
Files and hashes: 1: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: m0Xa3KoY4wXXnbSj4BXGd3og4tWPBsrFc7lkMyuP9No=)
2: rTC0QfBbtuMqPMUcNggAjT6mTZU.roa (hash: Kx4VZB+r4ecCnqS7wfmvRwNhUpPx2hLpmBb8CQQGRSA=)
3: xEEobC6a9g-ieILcoz7D0nJiJUk.roa (hash: oW3AWDFA5hp4F3w3Pl6J/jMvd/iESOLPY+Y+Yt3dnpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:a1:69:0a:1c:87:66:a0:08:21:55:3e:89:56:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: Jun 13 18:00:40 2026 GMT
Not After : Jun 14 18:00:40 2026 GMT
Subject: CN=bc21ac9f195083ef047a2caa40f6fa8051c025ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:21:bb:54:3c:32:d3:db:2f:d5:9d:88:3c:
32:60:98:1d:08:d8:04:67:9d:f9:49:f6:d9:b5:dc:
a1:9a:92:fc:a0:dc:6c:22:04:03:7b:6b:81:00:d5:
3f:30:0d:2f:55:a4:f8:2c:6b:7a:96:28:3d:fa:d5:
3a:34:a3:dd:0c:f4:36:4b:fd:fc:6e:ee:e1:f9:37:
c4:dd:37:66:ed:7a:3e:06:d5:49:7e:90:28:36:56:
8d:95:65:4e:58:38:2b:39:58:9d:be:b5:66:c8:eb:
60:ee:3f:df:bf:b1:a5:53:84:28:81:ca:c2:2a:13:
7d:59:2f:cc:59:b0:13:a5:d1:7f:cf:98:fc:f2:56:
0b:93:58:51:5e:61:3d:d8:e6:fa:9d:ac:ca:12:f5:
4a:22:58:61:2e:94:c4:b2:66:01:9d:ae:bd:50:9d:
7f:06:4e:4e:37:6c:58:c1:f4:52:3d:38:0e:d2:ce:
b4:a1:66:84:86:23:88:c4:30:13:9e:7b:16:56:cf:
f1:f1:ff:f4:95:29:92:05:6b:f8:6c:6c:1e:d9:d8:
63:d8:23:75:fe:8d:52:45:ac:38:c1:77:a9:22:dd:
c7:63:70:e4:f7:b7:90:24:fa:e0:c6:de:fd:b7:e3:
5c:8c:18:96:0a:52:f1:60:aa:1d:db:77:2c:f6:b8:
b9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:21:AC:9F:19:50:83:EF:04:7A:2C:AA:40:F6:FA:80:51:C0:25:FF
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:19:c3:af:f7:69:d9:ad:50:df:c0:69:b6:71:94:a9:a1:4e:
15:bc:25:29:21:1d:21:e9:68:3d:40:d4:0e:7b:b0:c8:8a:90:
c7:a6:66:d5:ca:09:c3:07:03:89:11:e5:4a:c3:ed:b1:16:16:
8d:cc:27:19:d7:17:b9:a5:c7:a7:7f:4b:59:a6:25:e3:b1:24:
7f:f3:0a:81:37:39:01:6d:e3:41:be:2d:79:64:6c:91:8f:95:
fe:2a:5a:a6:a3:5e:5a:7b:d8:d6:fb:4f:5d:88:98:69:b4:1c:
7f:14:5b:5f:8d:15:90:6e:c9:39:c1:d6:d8:1f:16:73:5b:d6:
60:99:8c:88:4f:1d:68:56:30:a8:34:73:76:c3:63:53:e8:9b:
df:ca:29:35:cb:0f:f5:30:65:61:5c:23:c4:01:63:f4:6d:9d:
da:f1:9d:f4:e0:fa:d4:92:dd:09:30:22:2e:e3:f6:f3:b6:b5:
8c:a5:d7:fa:a4:0b:17:4a:95:24:d5:42:cf:cf:c5:2f:8e:38:
a5:6a:bc:92:33:0b:cb:d1:98:0d:58:59:00:7a:80:a2:cb:3c:
d0:7c:a3:82:3a:0c:9b:0a:ca:a8:0d:80:e8:fb:d4:b6:de:c6:
cc:a3:5a:97:b3:68:7a:81:6e:77:80:5b:96:44:69:1d:29:ce:
fb:7e:78:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:45:35 2026 by rpki-client