Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: btoYPbL6yV7g7Qsq0Xa7DUyjIh7SCCu9gdQGFfau0Rk=
Subject key identifier: EE:75:72:4D:9C:3B:11:3D:7B:93:1C:25:30:79:E8:12:67:57:34:17
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 019EC36E64F7A9A3B2AB8226A630E4BBF21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 10A2
Signing time: Sun 14 Jun 2026 00:00:52 +0000
Manifest this update: Sun 14 Jun 2026 00:00:52 +0000
Manifest next update: Mon 15 Jun 2026 00:00:52 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: axI0HpWvVn3V6qRj+SEuc/pw5xHnDd82A9tER/yVE1o=)
2: SdOMrTA1LJZTbylGBdmnZADVV2c.roa (hash: 2oF71VsuS57X0mplIwyTPLvBv9+R4wlk3shw+VNP3cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:64:f7:a9:a3:b2:ab:82:26:a6:30:e4:bb:f2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Jun 14 00:00:52 2026 GMT
Not After : Jun 15 00:00:52 2026 GMT
Subject: CN=ee75724d9c3b113d7b931c253079e81267573417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:64:9f:68:39:85:42:b8:91:c9:67:12:65:
e1:76:c9:30:cd:4d:16:9c:76:73:3d:b8:81:07:fd:
6a:e0:43:3a:d3:75:7b:c7:4b:7c:da:95:28:cf:c0:
e0:50:9e:42:5a:25:3b:c8:02:46:9d:79:66:90:c5:
96:f4:bd:03:42:fd:48:0a:7b:f0:2e:66:df:b1:73:
97:ae:01:40:9d:4b:8e:13:1d:04:fa:04:50:49:03:
e8:86:d3:ef:4d:d3:a0:6a:bd:73:f9:90:f7:96:e6:
9b:9c:a8:ed:03:38:fa:41:70:ac:1a:d2:78:0e:2f:
67:39:22:17:91:79:ba:54:b4:a0:85:c6:7c:7e:01:
22:ce:cd:c9:2e:6e:d9:97:97:0e:a2:fa:b1:83:69:
a0:9d:36:3d:c6:17:6c:49:60:cd:1a:cd:20:9c:00:
c9:76:f0:34:ae:fd:f8:05:e3:45:30:ce:b9:9d:37:
e4:66:91:2f:e3:55:ec:d0:24:86:6a:12:64:8a:c2:
d9:f9:e2:2f:9c:6d:fb:bc:82:8f:cc:2a:81:5b:df:
ed:87:41:1b:62:46:34:4a:71:96:ae:07:82:51:39:
1b:7d:a9:e2:8e:4d:18:5b:62:bc:43:1c:4b:08:a9:
09:3f:21:69:c6:b7:8f:c9:31:c9:cb:e3:8e:b7:82:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:75:72:4D:9C:3B:11:3D:7B:93:1C:25:30:79:E8:12:67:57:34:17
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3a:0b:78:bc:1f:37:2d:01:c7:b7:31:f7:19:34:ff:ee:7c:
fa:87:4d:ae:42:4a:39:70:db:cc:1d:8d:cb:6b:d6:dc:ad:99:
5b:a6:a0:de:93:00:aa:44:d6:e0:e0:c0:c1:74:a2:02:da:84:
3d:09:eb:8f:18:c7:56:d5:f9:82:b7:6e:e6:a1:5e:2f:6a:85:
f6:11:3f:66:89:96:30:3b:e9:10:44:62:6a:74:b6:ee:b7:56:
77:8a:5e:31:ff:23:40:89:8f:82:07:ef:15:d2:13:2d:cb:7b:
fb:37:5d:94:e1:32:1d:77:48:39:bc:ea:3a:93:23:6c:d4:e3:
47:bf:cc:7e:b1:30:09:fe:92:2c:f3:04:7b:03:20:38:4d:b8:
38:24:c6:06:e9:1f:7d:d4:8c:a1:e8:60:d4:62:13:09:0a:f6:
37:2d:98:60:b9:b4:1f:51:ce:7a:93:ad:90:ad:fc:66:6c:c1:
1a:f2:79:97:90:74:1e:01:42:aa:27:a1:f3:e9:2c:f9:b8:02:
45:e8:72:20:23:16:65:24:62:0f:c7:3b:d0:d3:2c:ae:ad:ce:
3c:b1:22:5b:6e:6a:52:36:70:a9:b6:bc:78:d0:4e:fd:46:5e:
87:81:60:ac:9d:f5:bb:09:d5:1a:09:f7:a5:9a:66:a4:ee:1b:
1d:5a:34:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:44:32 2026 by rpki-client