Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: 5ctJf2YPFZa7aDqnMg+ccIqME6kSN3LSNnGVgDnxemo=
Subject key identifier: EC:20:45:0E:EE:C0:77:42:A6:24:13:F1:29:75:5E:28:F3:A9:FD:CC
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 019FABD1738CB0137DF21F6888176FB45F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 0947
Signing time: Wed 29 Jul 2026 03:00:58 +0000
Manifest this update: Wed 29 Jul 2026 03:00:58 +0000
Manifest next update: Thu 30 Jul 2026 03:00:58 +0000
Files and hashes: 1: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: LhQRWU/y7/Qtqr06j2TJqZIIYVqjKlx1Izg5IIVsr5I=)
2: rTC0QfBbtuMqPMUcNggAjT6mTZU.roa (hash: Kx4VZB+r4ecCnqS7wfmvRwNhUpPx2hLpmBb8CQQGRSA=)
3: xEEobC6a9g-ieILcoz7D0nJiJUk.roa (hash: oW3AWDFA5hp4F3w3Pl6J/jMvd/iESOLPY+Y+Yt3dnpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:73:8c:b0:13:7d:f2:1f:68:88:17:6f:b4:5f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: Jul 29 03:00:58 2026 GMT
Not After : Jul 30 03:00:58 2026 GMT
Subject: CN=ec20450eeec07742a62413f129755e28f3a9fdcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fd:ec:99:b7:7c:c6:50:55:65:72:f7:93:87:
7a:41:12:af:d7:fe:6b:db:ac:2e:3e:f3:3b:4c:e8:
3e:08:db:cf:bd:06:19:4a:25:d0:2e:b5:7b:5a:c7:
bc:45:20:7d:48:10:f6:56:00:03:57:ec:81:06:7a:
82:67:78:0f:a0:4a:bd:1c:8b:d9:89:d8:45:b6:d3:
dd:e7:84:6a:40:fa:ba:cf:2a:c5:be:9a:ca:f6:c3:
a7:8a:54:e3:92:ce:22:07:02:bb:a1:9f:4c:62:3e:
ee:5d:71:eb:38:54:4f:85:43:62:20:26:d4:d6:12:
35:f4:13:37:d6:b1:a0:de:b3:1a:28:2c:57:d0:a7:
ec:aa:4a:e9:2d:5d:a1:4b:14:48:f4:11:aa:4f:c9:
61:7d:e8:d9:cd:86:8a:f9:10:c9:5d:cd:c9:68:01:
46:bc:ed:c3:fd:42:82:91:28:a5:49:a3:32:66:ed:
7f:c7:32:66:6f:bd:32:a0:ec:b6:6d:0f:a8:f3:b3:
19:fc:ff:76:4a:5d:16:9b:47:60:79:2f:d9:5d:b6:
f5:ea:c4:d5:80:cf:da:dc:f2:af:d4:48:64:88:40:
f4:39:42:11:26:1f:1b:6f:5d:ee:06:1d:2a:4c:c8:
41:16:18:d3:76:31:6a:ef:63:1d:dd:06:5f:1f:90:
38:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:20:45:0E:EE:C0:77:42:A6:24:13:F1:29:75:5E:28:F3:A9:FD:CC
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ba:b5:e7:2c:d8:94:05:77:e8:9b:2d:74:8a:36:3c:bd:17:
48:96:c8:e5:da:d5:e9:e9:64:bd:f5:5b:8b:b8:1f:65:85:43:
a7:5f:de:cb:45:47:5f:ce:eb:a3:45:32:cb:8a:97:4d:cc:de:
3f:11:2a:47:8f:76:a6:84:0d:e4:f1:e7:57:b4:e9:80:01:8e:
f9:63:06:b0:20:6f:bc:e4:03:b1:74:74:b1:75:d8:da:f6:f1:
a5:a9:73:4b:32:b8:2f:b9:e2:67:e9:69:4a:13:c5:f9:51:98:
3c:9f:fc:fc:ee:8c:d6:cc:43:23:cf:4a:e0:e1:d6:bd:ff:e8:
e4:6e:c9:00:d0:ae:19:18:0c:9e:1e:25:64:ce:1e:d9:79:89:
36:48:55:17:da:7c:96:ad:87:9b:d7:ed:c9:8d:e6:58:b9:5d:
d4:79:7b:c9:ee:ff:8d:af:8a:ce:a7:3f:14:0a:a5:4b:7f:ec:
b0:a5:03:18:18:3a:8c:f8:7b:c7:37:f1:81:a3:96:8a:1b:c7:
41:21:16:fd:1e:18:dc:87:64:ff:b4:2f:e2:67:90:0c:b5:59:
c8:9d:d3:12:7c:d7:54:f8:a1:fa:62:24:a7:91:ad:d6:c8:47:
8a:70:d7:91:f9:7a:2f:51:e8:b2:05:8e:67:09:be:d2:1e:80:
d5:76:3b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:04:47 2026 by rpki-client