Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
File: PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json)
Hash identifier: PSscjgs9t2GpUMmnhdlc7BaTw2ALqeGPuuba/JtM8/4=
Subject key identifier: 35:77:8A:83:6B:24:33:B5:14:5D:32:87:1A:83:20:CE:C5:6B:D3:C1
Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
Certificate issuer: /CN=3d43cf40f691f14b35ca657032934802005cfa88
Certificate serial: 01A101A3E12614C8DE3C76CB5FEF4D4B8156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
Manifest number: 0B0D
Signing time: Sat 03 Oct 2026 12:01:19 +0000
Manifest this update: Sat 03 Oct 2026 12:01:19 +0000
Manifest next update: Sun 04 Oct 2026 12:01:19 +0000
Files and hashes: 1: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: YFFdE6olnRdM97CG62HnTaqnz9gtyuWc/zJFJlY3/pM=)
2: SRouw1ACmOxsP7DYIDJnot7Wy0M.roa (hash: Axkim79AjMG7Hlgx6O/xdzgLE7UsB+oDhwA5WGJg0Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:a3:e1:26:14:c8:de:3c:76:cb:5f:ef:4d:4b:81:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88
Validity
Not Before: Oct 3 12:01:19 2026 GMT
Not After : Oct 4 12:01:19 2026 GMT
Subject: CN=35778a836b2433b5145d32871a8320cec56bd3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:f7:b5:cb:35:e6:97:3e:db:fb:dd:7c:6b:
7e:e3:1a:4f:1d:c7:78:7c:3c:29:be:37:45:15:89:
21:a6:07:b8:6e:97:58:ee:af:e2:a8:96:fd:c5:6e:
5b:ae:48:5a:df:81:8c:bc:1e:97:93:98:2d:a5:d5:
f4:61:48:01:f6:4d:5b:ad:90:c9:13:40:70:31:c2:
ef:b8:76:ac:ec:23:dd:93:6e:04:e1:42:67:f1:ec:
60:f0:6d:4d:85:d8:2f:c2:13:af:7f:0f:a2:02:e2:
1c:a6:01:dc:b2:99:f8:80:40:d4:01:34:b4:36:2e:
fb:5e:c7:09:ef:00:89:1f:ab:b4:a7:b6:74:92:24:
33:43:dc:97:e1:1e:29:d9:f0:74:d5:ea:b6:39:47:
59:b3:65:3d:ab:5b:d6:7b:43:97:bd:1d:6b:42:94:
1b:38:7a:15:45:0d:26:1e:b3:06:1e:7e:19:9e:68:
68:b9:85:ae:84:37:77:4d:7c:45:36:1a:15:12:ab:
80:95:c8:83:0d:04:39:27:7b:04:85:4b:87:71:20:
b5:ef:3d:e6:b4:e8:e1:84:d1:61:83:05:ca:a6:e6:
bb:74:b2:68:68:d7:fc:7c:5d:23:45:55:eb:c0:fc:
11:b7:1e:9a:59:1e:66:8f:0d:d9:c3:00:ee:e9:f6:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:77:8A:83:6B:24:33:B5:14:5D:32:87:1A:83:20:CE:C5:6B:D3:C1
X509v3 Authority Key Identifier:
keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f5:58:f7:2a:82:cf:7d:de:1c:a4:84:dc:00:ee:7e:e5:db:
4c:4b:3f:07:af:e5:f2:3a:2c:89:32:50:1c:a5:d6:68:b9:72:
cf:5c:2c:9f:73:86:d1:f6:72:18:59:54:b9:9f:d4:50:7c:18:
71:90:b2:c9:70:21:99:80:c9:de:37:fb:31:6b:48:50:3e:70:
d7:86:25:43:d9:67:6b:09:3a:1b:84:f0:e5:af:d6:f9:4f:40:
57:dd:f5:b5:18:eb:90:d6:a4:6d:25:c1:eb:b7:dd:e7:b7:c8:
5e:9e:b2:91:50:f2:0b:bf:42:0c:d6:2b:70:b9:13:2d:a8:62:
82:f9:de:45:84:51:66:82:0f:b9:06:44:cb:b5:4b:35:d5:c0:
12:85:21:52:08:2b:99:03:45:20:89:d7:a6:b5:18:68:da:4d:
3e:7a:63:31:0d:a5:06:ba:1c:aa:c2:56:35:67:af:4b:09:40:
ac:be:9f:7e:91:a8:4a:66:d3:ef:76:76:57:43:a9:64:9f:f0:
dc:fc:78:4f:cb:eb:8f:4c:7c:7d:d2:b8:a0:1c:10:35:f1:64:
f5:b6:10:35:b3:9e:e0:9e:a4:04:9c:7e:2a:27:ea:fb:ca:37:
3c:d2:cb:b0:32:d1:d5:49:47:38:b5:39:b3:96:94:0c:98:60:
79:5f:32:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:47:26 2026 by rpki-client