Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: 8Qg7ecJ+A475D7E8nKOI50R/1clOkgtpFMwzOEJ/c04=
Subject key identifier: AD:6C:E7:C3:DB:1B:B5:ED:34:73:CE:9D:1A:82:F3:6A:1D:A8:B5:A1
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 019FD5A9AF7F01FF6B0CFA4A1B00316E5B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 1130
Signing time: Thu 06 Aug 2026 06:01:35 +0000
Manifest this update: Thu 06 Aug 2026 06:01:35 +0000
Manifest next update: Fri 07 Aug 2026 06:01:35 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: CZHnlFQv7sBUGKKaFVMIKhucVVb4kGEjf0/s3gb99fw=)
2: SdOMrTA1LJZTbylGBdmnZADVV2c.roa (hash: 2oF71VsuS57X0mplIwyTPLvBv9+R4wlk3shw+VNP3cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 06:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d5:a9:af:7f:01:ff:6b:0c:fa:4a:1b:00:31:6e:5b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Aug 6 06:01:35 2026 GMT
Not After : Aug 7 06:01:35 2026 GMT
Subject: CN=ad6ce7c3db1bb5ed3473ce9d1a82f36a1da8b5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:eb:23:7e:74:89:d3:bd:e7:09:7c:77:7a:61:
e8:3a:fa:ac:f6:2a:dc:cc:d2:af:d5:a5:72:b2:d5:
45:12:c9:64:11:47:34:3d:c7:f0:30:70:17:65:66:
f9:07:69:10:6c:9a:cc:5d:35:51:d1:f9:cc:59:29:
1b:76:54:93:69:bd:f0:73:d7:95:a4:87:df:ff:f6:
7a:d4:91:9b:be:8f:19:cb:03:24:10:56:c7:58:c5:
8d:75:ef:03:9f:ef:ce:68:94:00:93:27:9d:c4:78:
4a:09:6b:7c:53:9f:92:4c:4a:e0:a5:f2:f8:e9:a6:
5b:dc:40:d5:08:38:23:68:eb:96:6d:8d:14:d4:79:
1d:70:ce:4e:4f:dc:dc:49:05:6a:b0:9a:f3:e3:cf:
76:c5:96:3c:cc:ff:e2:4f:d5:19:d0:cb:e5:10:a6:
e3:de:41:e3:3b:1e:b8:00:65:6c:af:11:06:ba:79:
96:d6:5c:11:23:9d:6c:74:ed:85:24:72:a9:5a:bc:
8b:35:45:71:45:18:d0:f6:c6:86:1e:fa:d0:05:93:
a6:cf:6d:77:a8:ab:27:b5:ba:58:78:3e:00:a3:85:
29:52:72:b9:59:9c:7b:6a:f8:68:e0:17:25:f1:0b:
de:1e:65:66:89:2c:58:b9:aa:70:64:9e:e7:b2:60:
72:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6C:E7:C3:DB:1B:B5:ED:34:73:CE:9D:1A:82:F3:6A:1D:A8:B5:A1
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:64:b2:72:9e:98:11:74:ab:4f:bd:d3:5b:95:4f:3f:a7:25:
b7:4f:9b:8a:9b:6f:46:bd:80:b7:13:20:af:74:6f:2e:1d:9b:
28:15:d4:41:f1:8c:7f:32:2f:f2:f2:e1:7b:e5:b4:86:8e:00:
e9:36:bb:72:7a:f0:7a:27:84:3f:8b:ab:c7:ba:03:a4:d2:36:
4f:da:6d:6c:a1:42:9f:2a:fc:69:a2:6a:b2:ed:88:2f:c3:a7:
83:33:5e:08:fb:78:05:82:38:55:6f:71:1b:23:ce:9b:5a:cc:
3b:3f:4a:a2:51:c2:5c:db:b3:c0:0c:f8:60:da:0a:00:6d:0d:
4b:5a:b8:7b:1a:85:ea:3b:b2:53:6c:d5:4c:69:29:0a:1d:fb:
3b:ce:ee:ea:d5:a0:04:f0:95:f5:53:4c:dc:fc:51:8b:71:9c:
91:4e:c1:53:e7:e6:ab:6b:fa:23:40:0c:88:30:17:33:d8:e8:
a0:b4:1c:a1:f9:c3:fe:38:c1:d0:76:0b:a8:e4:d8:53:ae:31:
db:c2:0c:f1:26:4f:92:b9:34:76:ab:7b:43:a7:da:a5:48:5d:
31:f6:00:3f:4a:3f:a0:4a:df:fa:e2:fc:c2:14:94:c2:08:f3:
ee:69:cd:36:ad:95:6e:2c:3a:bc:b7:a1:9a:7b:56:0a:5c:4d:
cb:ee:5e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 12:14:44 2026 by rpki-client