Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
File: PPYV8G0jIox2moX68FEDk9Bk4OA.mft (raw, json)
Hash identifier: srVVOD1O2J5yI6odg1EyF6pGQzzKI3/H75E7z7+gzyM=
Subject key identifier: 4E:FB:A6:D3:7A:04:66:7B:2A:B6:FE:A3:30:33:FC:2A:74:24:CB:3B
Authority key identifier: 3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
Certificate issuer: /CN=3cf615f06d23228c769a85faf0510393d064e0e0
Certificate serial: 01A08B9F07D6200A64FE90E20ABD6CE517A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
Manifest number: CE
Signing time: Thu 10 Sep 2026 14:00:50 +0000
Manifest this update: Thu 10 Sep 2026 14:00:50 +0000
Manifest next update: Fri 11 Sep 2026 14:00:50 +0000
Files and hashes: 1: 2XSKC5_2aJdXis0i0E32cdzCcnE.roa (hash: WPJFZgYN6ewzMbdHq7cQDqzD7p7iGCXVy5MenFdGn80=)
2: 4Rp0pYTPzmcpl3vtXAjsk3xrRxU.roa (hash: kFKfBo1lMckvkQ9+DKJA3J99ay1w596AtH69ok/038k=)
3: 55fxNOw-fO30u-BmXgjw4WeUa80.roa (hash: gpla/Ku9QHt9oZP7wDDCGsD9ywE+luSObWiz+a4gmYw=)
4: Cxczu6pG_j9G8YgyCFhNWqwjOHY.roa (hash: WwxhEZK9JwB3xoHnIPrE7wXjUmLlZC5xHb6l9AOXBgc=)
5: IhnU6UFpK0ZZZ7JoJGYFZAdvlLk.roa (hash: ZMMMD3tfRdZSRuiATRZh0enby+U17qaQ+RlXaiCW2Ao=)
6: ML3bi4mx72Ipx4Kg1pME9LQZlRo.roa (hash: hTTuLE8cgZlfa+nvncE4HoPgMuLOWUMunYCYp0aquvs=)
7: PPYV8G0jIox2moX68FEDk9Bk4OA.crl (hash: caiH3mS2t1A39cm7nP8CU4Mfr9EWvU8meNdOyocQ84U=)
8: U47iKHcrgk6MFqkfqnJiGQZYHQU.roa (hash: TFdMzY4JMZ5lpBgywZ+gPmSJF7oZ1XI4SO9S+xKiraI=)
9: oxs1tuSUXUJmLqoL27S7ChGx4fM.roa (hash: 9KLCRWwLN8lTVB3jayQYsnUAOfMC7o7LYOk7o51/yYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:07:d6:20:0a:64:fe:90:e2:0a:bd:6c:e5:17:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cf615f06d23228c769a85faf0510393d064e0e0
Validity
Not Before: Sep 10 14:00:50 2026 GMT
Not After : Sep 11 14:00:50 2026 GMT
Subject: CN=4efba6d37a04667b2ab6fea33033fc2a7424cb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d3:fc:ca:a9:27:ae:d8:b5:f5:fe:90:61:01:
96:05:bb:8e:ad:70:58:dc:17:c6:0e:14:bf:a5:ac:
c7:39:9d:c7:a6:e4:e3:6d:98:07:75:8b:50:40:02:
8b:9f:dd:57:93:1f:a2:f3:48:41:2b:6e:c0:77:c0:
61:07:f5:75:0d:e2:ee:fc:6a:be:f3:8b:eb:43:f0:
d8:ff:d7:fd:25:75:48:28:c1:ca:5d:0c:80:bc:bf:
1b:76:f9:11:7b:36:6e:27:bf:3e:dd:84:58:c9:6f:
36:e0:76:95:54:8d:2f:94:05:f8:85:4c:03:e6:bc:
aa:2e:47:2f:bd:83:8f:ea:4a:28:82:fd:8f:24:d9:
aa:16:54:e7:32:c1:49:63:64:65:52:95:a8:5a:bc:
43:00:51:13:f6:72:8a:28:a1:33:82:cc:59:15:62:
b7:95:c3:d0:6e:4a:d2:77:44:1b:3b:89:cf:ac:76:
8a:41:62:71:f0:43:b6:78:44:ce:2c:dd:e1:ba:22:
7f:46:5c:3f:bd:2f:0a:41:0a:6f:1b:8c:14:27:1b:
dd:ea:51:63:2c:10:5f:3f:88:1b:a6:db:10:c9:bf:
3f:80:0e:c2:f1:d1:d1:da:20:45:97:6d:23:2d:be:
5e:13:a8:12:da:75:63:ce:5d:c2:fe:29:c1:d6:e2:
7a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FB:A6:D3:7A:04:66:7B:2A:B6:FE:A3:30:33:FC:2A:74:24:CB:3B
X509v3 Authority Key Identifier:
keyid:3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:59:f2:13:3a:85:af:31:f0:38:4e:76:77:24:5e:91:05:7b:
7a:4a:8c:04:23:44:33:d4:ef:01:59:10:a4:a8:aa:64:0d:a0:
04:06:f3:14:7d:bd:8d:a1:7f:bd:5b:7b:58:c4:1e:d7:c7:e8:
89:0e:6e:7f:5d:9f:63:99:0e:b9:d6:c2:e8:d9:71:ea:0c:fb:
e5:49:3c:3a:83:2f:43:df:e5:52:69:58:9c:6f:f0:08:58:f7:
c6:1d:d0:14:36:ef:d4:7d:35:30:ef:8d:37:d3:e0:48:ee:d1:
8a:0b:25:d5:62:a6:d9:61:a9:ae:31:9c:33:d7:66:38:d1:b7:
9c:16:56:87:cd:12:11:7d:2b:6a:2d:9b:1b:a2:a0:56:7c:12:
71:2f:19:4f:96:95:c6:ab:34:5e:bf:3a:e6:e9:83:64:d4:58:
c3:ca:70:4c:72:15:bf:6e:e8:54:68:4d:96:e5:3f:c9:40:8e:
fc:da:0b:96:0e:c3:52:f5:ca:c9:53:41:74:27:cd:4b:9c:5a:
07:e2:ab:cf:d9:6e:15:0c:d6:6a:2a:bd:a9:ca:d8:65:ca:47:
c2:41:5d:98:d4:b2:84:25:de:bc:61:ac:d4:9e:9f:ff:f3:fb:
3a:dd:52:da:7e:07:45:f9:61:6b:c9:ef:44:a1:80:b5:d2:68:
66:35:9a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:02 2026 by rpki-client