Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
File: PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json)
Hash identifier: j2QegE6YyCpzPoks+XwfrzeTPZIKEjOx9FP6aoSMfVc=
Subject key identifier: 95:8E:A8:17:8E:8E:C8:21:D7:8E:A8:87:45:0C:5F:94:48:F0:6D:D1
Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
Certificate issuer: /CN=3d43cf40f691f14b35ca657032934802005cfa88
Certificate serial: 019DDE4434B6A0CE4F515378E39800F13638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
Manifest number: 096D
Signing time: Thu 30 Apr 2026 12:01:44 +0000
Manifest this update: Thu 30 Apr 2026 12:01:44 +0000
Manifest next update: Fri 01 May 2026 12:01:44 +0000
Files and hashes: 1: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: q0B0w7w0Shh7QcO362JTmqrsAm97tsMA1ZlWxKGwuiA=)
2: SRouw1ACmOxsP7DYIDJnot7Wy0M.roa (hash: Axkim79AjMG7Hlgx6O/xdzgLE7UsB+oDhwA5WGJg0Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 12:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:44:34:b6:a0:ce:4f:51:53:78:e3:98:00:f1:36:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88
Validity
Not Before: Apr 30 12:01:44 2026 GMT
Not After : May 1 12:01:44 2026 GMT
Subject: CN=958ea8178e8ec821d78ea887450c5f9448f06dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:27:31:0e:6f:56:ef:6f:47:53:6b:8f:a0:
da:9b:26:0d:bc:6e:44:24:00:02:71:4a:01:d4:15:
4b:3e:99:f7:1b:30:55:96:f1:3a:2c:b4:d8:27:82:
e5:0d:ae:b0:6a:c1:be:3d:84:f0:b1:a7:5d:81:12:
d1:dd:ea:bb:5e:8f:5e:fd:e2:28:ce:fe:a2:1c:6d:
00:15:d3:b9:fb:31:13:ff:85:ed:67:ec:f3:62:83:
a5:19:91:b8:e8:3e:b8:65:f0:ba:d3:a6:af:9a:ae:
5e:69:01:19:94:f8:68:4b:af:35:80:56:ed:54:8a:
7e:0e:07:17:21:b6:2e:96:72:1a:51:0b:9e:3c:6e:
bb:9a:d9:80:04:a1:93:59:08:dd:e3:b3:a0:1c:5c:
57:4e:f3:84:bc:67:b4:9d:89:2f:51:8b:8e:fb:3b:
9c:ac:3a:47:d3:68:37:3d:34:c7:26:32:8f:10:37:
b4:98:2b:93:2e:85:d4:b4:8f:fc:6e:84:4c:b6:2d:
8c:36:56:e2:94:b4:67:e5:cd:44:5c:87:c1:d5:16:
06:17:bf:15:e3:59:5c:86:7c:71:e3:1e:d0:44:de:
26:8e:70:3c:81:24:52:56:6a:65:f7:e8:65:e4:a6:
ee:db:f5:53:29:53:f0:75:eb:e1:6f:16:74:20:a8:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8E:A8:17:8E:8E:C8:21:D7:8E:A8:87:45:0C:5F:94:48:F0:6D:D1
X509v3 Authority Key Identifier:
keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:74:0c:f6:64:31:b9:bd:5f:c4:3a:80:f0:ce:46:bb:2c:3e:
ca:f1:e1:6b:ba:4f:1b:c1:ad:aa:76:48:3b:80:6a:38:3f:d7:
73:cc:30:18:bf:3d:b4:96:30:e6:6d:1d:d9:d7:d0:51:b0:3e:
fd:42:e5:6f:34:ea:fe:88:4c:87:59:10:c2:ba:0f:e7:63:7a:
c3:65:37:06:da:b2:5b:b1:65:30:d7:1e:9a:1d:ca:a8:2a:90:
fe:00:a7:a6:71:ed:41:e0:56:32:19:ec:ca:1c:1e:ed:0d:6d:
a0:59:06:9e:03:37:ba:40:ea:2e:c2:9b:fe:81:36:77:e9:76:
19:a5:50:57:85:45:3c:91:e4:87:1a:d9:75:7f:82:0c:ae:25:
12:ac:69:81:89:18:a7:64:90:9e:dd:a1:82:48:39:e8:f2:00:
cb:a2:5a:13:9e:13:a4:d9:0e:64:fc:44:e9:76:33:a2:5c:6b:
6a:4d:12:73:f6:6c:0a:b7:b4:82:4d:fc:1a:db:a4:cc:cf:06:
87:e4:5a:e3:75:df:c6:81:c1:cb:fc:33:a3:3c:26:34:7a:44:
f6:46:4b:d7:f3:7a:75:18:f5:eb:0b:08:a3:3c:1b:58:27:4d:
49:e6:26:8e:04:2d:f8:3c:40:59:c2:f9:96:ec:9a:a5:2f:d6:
37:93:64:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3eRDS2oM5PUVN445gA8TY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNDNjZjQwZjY5MWYxNGIzNWNhNjU3MDMyOTM0ODAyMDA1
Y2ZhODgwHhcNMjYwNDMwMTIwMTQ0WhcNMjYwNTAxMTIwMTQ0WjAzMTEwLwYDVQQD
Eyg5NThlYTgxNzhlOGVjODIxZDc4ZWE4ODc0NTBjNWY5NDQ4ZjA2ZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhEnMQ5vVu9vR1Nrj6DamyYNvG5E
JAACcUoB1BVLPpn3GzBVlvE6LLTYJ4LlDa6wasG+PYTwsaddgRLR3eq7Xo9e/eIo
zv6iHG0AFdO5+zET/4XtZ+zzYoOlGZG46D64ZfC606avmq5eaQEZlPhoS681gFbt
VIp+DgcXIbYulnIaUQuePG67mtmABKGTWQjd47OgHFxXTvOEvGe0nYkvUYuO+zuc
rDpH02g3PTTHJjKPEDe0mCuTLoXUtI/8boRMti2MNlbilLRn5c1EXIfB1RYGF78V
41lchnxx4x7QRN4mjnA8gSRSVmpl9+hl5Kbu2/VTKVPwdevhbxZ0IKijrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWOqBeOjsgh146oh0UMX5RI8G3RMB8GA1UdIwQY
MBaAFD1Dz0D2kfFLNcplcDKTSAIAXPqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80M2Y3YWMtNjc4OC00OTBiLTliM2It
MDdmYjYxNzFmMThmLzEvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80M2Y3YWMtNjc4OC00OTBiLTliM2ItMDdmYjYxNzFmMThm
LzEvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA03QM9mQx
ub1fxDqA8M5Guyw+yvHha7pPG8GtqnZIO4BqOD/Xc8wwGL89tJYw5m0d2dfQUbA+
/ULlbzTq/ohMh1kQwroP52N6w2U3BtqyW7FlMNcemh3KqCqQ/gCnpnHtQeBWMhns
yhwe7Q1toFkGngM3ukDqLsKb/oE2d+l2GaVQV4VFPJHkhxrZdX+CDK4lEqxpgYkY
p2SQnt2hgkg56PIAy6JaE54TpNkOZPxE6XYzolxrak0Sc/ZsCre0gk38GtukzM8G
h+Ra43XfxoHBy/wzozwmNHpE9kZL1/N6dRj16wsIozwbWCdNSeYmjgQt+DxAWcL5
luyapS/WN5Nk9w==
-----END CERTIFICATE-----
Generated at Thu Apr 30 16:42:51 2026 by rpki-client