Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
File: PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json)
Hash identifier: POnQC8NLz9D/nZrEaFEgrTywWO0BYqALUc7fHQEgQQQ=
Subject key identifier: 66:D1:80:27:37:6A:97:6B:75:EA:F2:72:3F:53:29:56:E6:C5:DA:C1
Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
Certificate issuer: /CN=3d43cf40f691f14b35ca657032934802005cfa88
Certificate serial: 019CEAEEAD71E742B6C69339264E6F6DAB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
Manifest number: 08EF
Signing time: Sat 14 Mar 2026 06:00:36 +0000
Manifest this update: Sat 14 Mar 2026 06:00:36 +0000
Manifest next update: Sun 15 Mar 2026 06:00:36 +0000
Files and hashes: 1: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: z2OAX1QH8yHj8as8IUTGE4g/UxqXFAd8B5p5bin6EmQ=)
2: SRouw1ACmOxsP7DYIDJnot7Wy0M.roa (hash: Axkim79AjMG7Hlgx6O/xdzgLE7UsB+oDhwA5WGJg0Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ea:ee:ad:71:e7:42:b6:c6:93:39:26:4e:6f:6d:ab:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88
Validity
Not Before: Mar 14 06:00:36 2026 GMT
Not After : Mar 15 06:00:36 2026 GMT
Subject: CN=66d18027376a976b75eaf2723f532956e6c5dac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e1:cc:55:7b:35:10:7c:4d:3b:58:cc:e1:28:
45:fe:34:b7:c4:04:91:50:3c:b2:48:55:be:fd:b1:
08:32:ed:0e:17:b5:4c:05:1c:0b:c4:18:6a:f8:ed:
e1:63:7a:73:56:dd:06:19:74:f1:66:75:78:af:b5:
9b:69:24:e2:80:c6:63:e6:ee:c6:25:89:10:6b:94:
5e:e0:05:63:e9:60:1b:71:b8:7f:a9:cc:dc:3e:9b:
93:34:a3:e7:87:b1:39:50:a5:86:69:41:7c:12:ef:
16:50:76:82:b4:44:15:9b:37:bb:aa:a4:87:b6:af:
b0:9b:e7:c3:0d:09:70:fa:b3:65:a1:a8:b2:ae:8c:
b4:7c:c9:51:b7:a1:93:72:3d:3b:8b:6b:20:13:fe:
c7:fa:a4:7e:cb:b8:d7:bd:5b:00:07:17:41:e8:99:
a4:e6:f8:d8:cb:21:8f:3f:52:a2:6e:81:e7:47:df:
92:be:ee:55:83:0c:a9:e1:d4:67:c9:10:e9:43:42:
0d:ec:ba:76:a8:2e:1c:5e:8a:cc:d3:73:d3:92:51:
a8:3d:9c:84:62:bc:c1:86:e3:70:b0:e2:57:20:5e:
f0:73:37:64:c5:74:64:ef:65:4d:6b:67:d3:60:de:
44:67:49:e1:dd:62:8f:d2:64:dd:7b:28:f5:6b:cb:
15:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D1:80:27:37:6A:97:6B:75:EA:F2:72:3F:53:29:56:E6:C5:DA:C1
X509v3 Authority Key Identifier:
keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:de:c1:f4:76:1f:59:1d:da:11:e8:64:e5:b9:12:ec:16:46:
9d:0e:93:6a:7e:7d:9f:3a:b2:69:fd:78:c2:9a:10:d1:2b:2e:
0c:3c:6f:9d:36:f0:f7:7e:40:c7:42:aa:5e:18:ed:77:4a:f5:
5f:92:ee:c6:5e:96:c6:e9:a7:cf:d0:29:54:b4:bb:15:f1:e6:
8d:e6:fb:4f:6b:f3:a1:40:f6:57:fb:9e:77:22:69:e6:8c:2f:
c8:4d:e1:7d:b8:cd:fb:37:4c:7e:6d:1d:d4:6c:b0:34:6a:ad:
96:b2:09:2f:77:2d:69:6b:c7:ac:ee:43:e7:6a:0e:ee:e9:c7:
47:1b:79:0c:8f:aa:8b:f1:e5:fa:41:fa:a0:b4:7a:ab:f5:8b:
d9:c1:a2:ba:fe:82:51:77:30:6e:94:06:0b:b2:79:ce:5e:ea:
68:e3:3b:94:b9:a8:84:3b:94:77:ff:3e:93:db:b0:23:f0:01:
42:ed:fc:a5:2b:c7:84:1d:6d:6e:72:45:cd:04:38:82:43:eb:
8b:ad:56:84:aa:ec:ef:97:a4:85:33:e5:d0:cb:14:73:a5:e0:
3a:bf:76:0f:51:8c:0a:26:89:03:4d:9c:d3:6c:0c:13:60:79:
23:ca:a1:34:e3:af:63:13:a1:b9:d8:30:20:4a:9c:5a:81:6b:
5f:04:03:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 10:43:44 2026 by rpki-client