Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: gJKOzY36VUkzOsYwm+49vD9eNa/YnodGizreOZoB7+U=
Subject key identifier: 46:5C:5C:6A:E5:E2:6D:DE:7A:FA:0A:52:DE:3D:1A:78:BC:94:FF:FB
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 01A0D538C7CD4B0915C0EAA06E355A366F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 09E1
Signing time: Thu 24 Sep 2026 21:01:03 +0000
Manifest this update: Thu 24 Sep 2026 21:01:03 +0000
Manifest next update: Fri 25 Sep 2026 21:01:03 +0000
Files and hashes: 1: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: cQLnbgwkvgb3LDNhVrN911DkvX60XnYiSGl6ZKPX97k=)
2: rTC0QfBbtuMqPMUcNggAjT6mTZU.roa (hash: Kx4VZB+r4ecCnqS7wfmvRwNhUpPx2hLpmBb8CQQGRSA=)
3: xEEobC6a9g-ieILcoz7D0nJiJUk.roa (hash: oW3AWDFA5hp4F3w3Pl6J/jMvd/iESOLPY+Y+Yt3dnpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:c7:cd:4b:09:15:c0:ea:a0:6e:35:5a:36:6f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: Sep 24 21:01:03 2026 GMT
Not After : Sep 25 21:01:03 2026 GMT
Subject: CN=465c5c6ae5e26dde7afa0a52de3d1a78bc94fffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:31:d5:5e:a0:2f:05:d8:a2:ea:e9:ce:90:
17:2d:61:66:04:4d:63:9b:7f:f8:cb:1f:fe:c9:3d:
64:df:94:1b:2c:db:e6:c7:76:58:2e:a9:c6:03:5d:
71:68:5c:50:ec:9c:0a:20:14:00:c9:99:63:d3:79:
f1:9d:7f:f9:44:5a:bd:5d:23:86:11:05:0a:44:a5:
70:e6:88:b2:84:b5:eb:ca:cf:a8:88:66:eb:2a:12:
7a:0c:1c:ce:13:a0:b8:f7:6e:65:52:0f:f8:65:a6:
d4:d6:67:5b:67:c0:86:df:72:12:d8:ee:63:b2:f2:
17:0f:3f:9c:b3:a7:e0:6e:08:86:67:53:37:fa:a3:
d7:33:59:c6:05:e4:20:22:ed:bc:8b:07:36:b1:51:
1e:f1:d7:67:63:fc:5e:10:8e:09:5f:be:e9:f9:0b:
f8:eb:44:c3:7b:64:56:25:74:7a:de:8d:7c:50:3f:
a4:38:6a:8e:41:46:8e:bd:a9:d2:33:cb:2f:4f:f2:
2c:b9:47:5a:16:21:fd:fc:a7:15:ed:28:e1:f0:a7:
24:9f:b6:27:05:b8:e9:96:ef:6f:12:9c:d2:7e:7e:
50:88:51:a6:52:53:39:88:0f:6c:af:76:8a:46:7d:
f3:f4:63:51:84:28:6a:a9:66:6a:e9:17:83:2f:56:
c3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5C:5C:6A:E5:E2:6D:DE:7A:FA:0A:52:DE:3D:1A:78:BC:94:FF:FB
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c3:07:52:20:51:f5:2b:27:5b:30:d3:df:aa:38:e8:5c:41:
3a:06:11:fe:a0:b3:66:92:b2:77:22:73:7c:ce:b4:07:7a:e1:
35:22:71:a0:6b:53:b8:de:22:54:08:20:ef:ff:99:d1:bb:9a:
9b:93:51:a8:c7:40:2e:89:35:62:bd:f8:ae:bc:75:a0:c7:70:
2d:30:6a:b0:89:45:60:a3:c6:f6:0d:e8:12:78:c7:10:7e:49:
6e:38:e6:45:24:ec:2f:14:69:cb:19:1b:8e:0b:03:d3:9a:03:
53:53:9f:7b:c5:da:dd:fa:81:cf:01:72:53:da:6a:36:84:21:
c6:fa:11:9c:5e:27:d9:fa:b5:95:d8:28:ad:4c:68:56:ce:61:
98:2e:2e:ff:c7:d8:c9:40:bf:e2:2c:41:28:86:a8:1f:a2:96:
d4:db:3f:9f:4e:4e:e7:37:66:f0:25:9c:72:b9:b4:42:81:6c:
5f:6a:63:44:f4:82:1d:2b:ef:eb:ea:e0:22:6e:f7:c1:5d:40:
63:54:a6:bf:71:97:ff:5c:91:59:c3:ca:28:92:2a:08:cb:ea:
91:76:54:48:ca:84:bf:f3:f7:e2:61:b1:28:39:6c:6f:1f:8a:
ec:39:a3:10:c7:c7:90:93:84:4c:c7:bf:2b:53:49:f5:21:9d:
2b:40:47:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:42:51 2026 by rpki-client