Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: 6Qw7+iPfowsPAVe1x5mhgb+z5NuWDRaTDK+JDdY8X1Q=
Subject key identifier: 36:61:31:77:C4:20:6D:19:95:47:9C:1A:91:F3:F7:5F:D3:BF:AA:4D
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 019D3977A1D9FCAB721AD2C69A5639B73272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 0FD6
Signing time: Sun 29 Mar 2026 12:00:34 +0000
Manifest this update: Sun 29 Mar 2026 12:00:34 +0000
Manifest next update: Mon 30 Mar 2026 12:00:34 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: D+ApLhj3nb82GtATPGb8yqzIiXJkeDqha/rPTge/zFs=)
2: SdOMrTA1LJZTbylGBdmnZADVV2c.roa (hash: 2oF71VsuS57X0mplIwyTPLvBv9+R4wlk3shw+VNP3cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:a1:d9:fc:ab:72:1a:d2:c6:9a:56:39:b7:32:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Mar 29 12:00:34 2026 GMT
Not After : Mar 30 12:00:34 2026 GMT
Subject: CN=36613177c4206d1995479c1a91f3f75fd3bfaa4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d9:1f:42:f3:54:8e:12:36:4f:60:6f:c4:34:
2a:48:70:6a:4e:80:a1:68:2c:ba:28:27:9e:7d:3b:
8f:63:98:9c:ef:7f:23:a5:a7:df:5c:f8:d0:4a:de:
d6:d9:d1:86:d2:d0:fc:ce:e5:c0:33:32:8b:28:4b:
c5:a5:ef:51:5b:50:d9:60:9a:bf:c1:2f:ba:24:2a:
93:4c:f3:41:3b:62:a3:4e:6d:08:9a:c0:42:6d:7f:
2b:f7:fe:ed:28:5b:52:b4:4f:14:54:21:31:8f:6b:
4f:0a:fd:a0:ee:22:78:0a:e2:3b:c7:50:d0:10:30:
fc:b2:03:6e:5e:da:a6:d7:5e:30:37:2d:85:90:2a:
ef:a2:26:07:94:6c:55:e2:00:3a:3b:2b:2f:f5:5f:
c2:1b:d4:34:f4:99:95:79:6f:f7:3e:35:bc:48:79:
b3:8d:2e:6e:fa:62:b4:a6:bb:12:78:82:72:2a:21:
52:95:d3:45:e5:b2:bf:2d:1a:0b:7a:4d:06:ea:34:
6e:2a:30:a5:44:2f:4a:ac:82:de:0b:ae:bb:63:28:
de:04:0d:92:b4:2d:de:c8:eb:53:40:a7:05:80:65:
59:b8:fe:7f:f6:80:74:ce:8d:b4:01:b1:86:e6:2b:
28:3a:d7:9c:1a:9a:7e:44:db:10:bf:ab:20:d3:cd:
65:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:61:31:77:C4:20:6D:19:95:47:9C:1A:91:F3:F7:5F:D3:BF:AA:4D
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cc:0c:2e:8f:fa:31:ea:45:c9:1c:b2:10:a3:bb:9b:6d:81:
7d:db:44:80:3e:c9:b0:85:f0:6d:49:c7:c6:d7:ac:83:22:5f:
d5:76:15:e9:44:55:54:de:c4:ee:18:41:04:ad:8f:ab:c8:b9:
ce:b5:7f:ce:1d:fc:ec:ff:39:49:37:a4:21:b0:38:7c:fe:37:
15:96:31:6f:84:51:02:0d:1f:4e:e5:80:84:81:f3:96:a8:78:
4f:95:6c:19:f0:13:bc:5c:9c:00:ec:cf:d5:ad:59:52:d5:6e:
18:c1:d9:d2:7e:8e:d9:f3:a5:4d:19:83:39:f6:55:a0:a2:88:
8d:ae:25:ce:89:09:29:17:7f:51:57:40:75:0e:47:b1:23:1d:
53:c4:f1:92:1b:f5:fe:a0:23:8c:e3:cd:4c:4b:fe:8e:31:1c:
35:ec:b7:0b:9e:be:8b:90:e8:a6:85:ba:4d:70:b1:f0:5a:f5:
f7:d1:59:c5:c1:37:06:71:66:c6:59:cf:1e:fe:e0:39:1b:82:
72:95:50:39:61:07:85:98:b6:62:ce:0f:68:d6:77:1b:65:e5:
b6:0b:73:da:c6:eb:c3:30:1a:a1:20:ba:bb:87:93:3b:a6:6d:
89:db:7b:31:ae:3d:36:01:87:d2:95:32:40:40:98:dd:f8:6b:
d8:0d:6a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:58 2026 by rpki-client