Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: gL9a36SwKl0w2x3tSN+WlrWNedAXKxoEDvAFn225jQc=
Subject key identifier: 40:87:18:E6:70:F0:1F:EA:1B:4D:6A:A5:FC:C6:91:91:29:DA:74:20
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 01A0C5209CA54941143662351BA70D79EEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 11AC
Signing time: Mon 21 Sep 2026 18:00:43 +0000
Manifest this update: Mon 21 Sep 2026 18:00:43 +0000
Manifest next update: Tue 22 Sep 2026 18:00:43 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: pDOLDJpDAeR5p/n2Yfqf1y6dPsm8MJmVYDe6/vgaaas=)
2: SdOMrTA1LJZTbylGBdmnZADVV2c.roa (hash: 2oF71VsuS57X0mplIwyTPLvBv9+R4wlk3shw+VNP3cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:9c:a5:49:41:14:36:62:35:1b:a7:0d:79:ee:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Sep 21 18:00:43 2026 GMT
Not After : Sep 22 18:00:43 2026 GMT
Subject: CN=408718e670f01fea1b4d6aa5fcc6919129da7420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:17:ae:dc:23:17:36:b0:eb:9e:3d:e3:f2:bc:
1c:ad:ae:86:b5:68:1b:62:d4:03:6e:67:e3:2f:14:
35:ff:0c:fe:5a:21:a2:db:f5:60:ea:36:41:82:bc:
84:94:d6:0d:3d:04:d9:d4:80:06:f1:88:d8:b9:76:
f0:93:72:83:6b:90:94:f1:d2:f9:e4:56:ef:95:ff:
41:73:dd:72:64:a8:5e:a1:af:ef:80:d5:05:be:9a:
97:fc:38:f2:3a:b1:7d:0f:a0:21:36:a5:69:e0:d3:
70:6d:1c:5f:73:77:48:76:f7:e5:4f:d3:e9:87:60:
28:0e:bf:64:ca:fa:d9:d4:13:04:47:d5:9e:cd:3f:
75:71:52:ce:3d:bb:67:cd:85:69:3d:86:71:83:63:
80:71:c3:bf:67:30:be:55:fc:7c:e7:53:e7:81:94:
a7:85:0b:16:48:42:db:17:e0:30:59:96:a6:5d:32:
84:57:4e:47:68:1d:24:85:48:c7:53:fc:6a:4e:4c:
3d:61:90:22:2e:21:36:e5:56:56:bd:02:c6:9b:61:
c4:48:db:70:b4:e9:c6:35:75:0a:b2:09:e5:5b:21:
5d:be:94:d1:b4:ec:3a:38:e9:b4:1d:91:40:84:fd:
ec:3d:57:c2:cb:6d:a2:78:2f:ab:c1:49:67:3e:e3:
30:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:87:18:E6:70:F0:1F:EA:1B:4D:6A:A5:FC:C6:91:91:29:DA:74:20
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d9:79:86:ea:e5:d4:2c:f5:3c:e9:80:3a:37:6c:35:da:10:
e2:1e:79:9c:b7:4c:66:52:29:00:5a:23:b1:2e:17:2d:62:d5:
7c:ee:c6:89:7b:24:f0:1f:25:50:1a:fd:6c:8e:b4:76:8c:00:
f3:08:a3:d7:f9:fb:8d:4c:21:6f:8b:3c:9b:d1:c6:3d:56:41:
63:44:96:5c:ba:87:c7:30:44:39:d4:12:a0:df:5e:7d:fd:b0:
2a:46:27:3e:72:61:04:2f:f9:27:3a:27:fd:ee:7b:22:41:3f:
d9:b7:b3:44:ec:29:83:d1:f2:08:22:bb:83:cb:8e:60:e8:9f:
75:67:7f:71:e0:ed:ce:b7:ee:19:01:40:f7:7e:7c:dc:12:c7:
dc:0c:8e:b5:db:b5:14:06:63:3b:b6:cf:45:72:d1:d2:f4:b5:
40:31:0a:5f:03:69:d4:68:9d:c7:3d:99:98:c1:d4:e9:48:f1:
fc:3e:d1:06:71:69:e6:55:ed:bb:b7:21:ba:00:42:e9:97:f9:
4d:d6:b1:48:a1:4d:9f:3c:84:b3:11:59:d9:4c:57:6b:70:3a:
15:2b:df:09:8e:39:ce:8d:3a:4e:d5:bc:8c:4a:04:fc:73:39:
16:42:c4:cf:ca:5b:c8:b2:e8:cf:7f:81:dd:87:87:53:39:f5:
ab:bc:3e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:00:40 2026 by rpki-client