Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: yG4jdt6CZ18LpXjWJpAF3Y2vk0h80qVb+zkhG7jeEYg=
Subject key identifier: CC:0C:31:27:B6:AB:71:2B:FB:99:A2:B3:92:4E:41:82:62:04:EC:6A
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 019F190CE5C5452C6C27FCBB05D6F344D31D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 08FB
Signing time: Tue 30 Jun 2026 15:01:43 +0000
Manifest this update: Tue 30 Jun 2026 15:01:43 +0000
Manifest next update: Wed 01 Jul 2026 15:01:43 +0000
Files and hashes: 1: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: rCh0CBAl7A2nWkeKpwxBVtq0oP8bkA0fVKdRRyTX9Is=)
2: rTC0QfBbtuMqPMUcNggAjT6mTZU.roa (hash: Kx4VZB+r4ecCnqS7wfmvRwNhUpPx2hLpmBb8CQQGRSA=)
3: xEEobC6a9g-ieILcoz7D0nJiJUk.roa (hash: oW3AWDFA5hp4F3w3Pl6J/jMvd/iESOLPY+Y+Yt3dnpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:e5:c5:45:2c:6c:27:fc:bb:05:d6:f3:44:d3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: Jun 30 15:01:43 2026 GMT
Not After : Jul 1 15:01:43 2026 GMT
Subject: CN=cc0c3127b6ab712bfb99a2b3924e41826204ec6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:0f:85:e7:0e:2f:77:ca:62:8b:f2:2c:c5:
01:02:b4:71:03:3d:29:5a:82:c1:c4:19:96:0a:8e:
cf:28:2a:f5:4c:8d:86:5e:d5:82:6b:99:33:92:d5:
8e:9f:98:62:6a:2f:d4:be:57:71:aa:e8:ac:1f:16:
70:a4:92:df:4a:c1:87:4f:f8:ac:5b:85:f6:ed:92:
7f:78:a3:51:03:a7:3c:5d:41:4f:20:9f:c2:0e:61:
b7:b0:fc:1a:5f:10:6d:ce:f0:8f:61:5c:c9:4e:cd:
70:a0:b6:e0:16:b4:74:96:62:17:92:4b:56:e9:7a:
bc:8a:e4:29:a6:08:e8:7a:ce:e4:fd:47:7b:0b:c2:
89:a5:3b:d8:2e:94:fa:6c:e2:95:da:bc:7c:6a:08:
11:5c:eb:03:be:1d:81:25:d5:43:9c:ac:0d:6b:46:
d9:c9:a5:fc:97:ba:d3:aa:d5:2d:ae:2a:68:9e:22:
42:df:30:6c:f8:51:0f:49:35:ee:f6:d7:2d:3e:72:
89:3a:ae:5a:18:51:02:bf:12:ea:6c:10:07:4a:fd:
10:00:ac:c8:b8:fa:98:15:aa:4f:9c:1c:f4:25:6c:
65:30:f2:72:2e:54:c9:df:72:82:6c:f7:ff:bc:cf:
f2:5c:ff:00:99:3d:5b:5b:90:86:30:db:04:0b:65:
f8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0C:31:27:B6:AB:71:2B:FB:99:A2:B3:92:4E:41:82:62:04:EC:6A
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:55:5b:bd:50:67:48:41:1a:f0:e7:36:f9:43:aa:81:eb:07:
cf:45:0d:75:c6:43:36:7b:a2:8a:2d:6b:5c:59:20:7e:62:03:
db:a1:68:be:f4:e1:f6:fc:b3:17:10:f2:31:cb:9f:a2:ca:e2:
a4:31:af:8c:a2:d2:01:40:5b:69:f4:70:6b:a8:19:36:24:4b:
7f:a3:b3:ca:f0:e2:26:e8:18:a6:50:3a:50:67:70:b3:5d:8b:
7d:a1:43:c3:f8:f0:80:a6:b0:1b:c4:fa:5b:e4:03:e6:6e:2b:
f6:8b:ca:55:bd:cb:f1:0c:88:34:07:5d:c4:84:d4:11:8a:1a:
b6:91:34:60:b4:99:e4:68:75:b7:e5:ef:b0:18:15:82:95:f9:
71:2a:7b:88:8e:a6:a9:ac:c4:2e:d7:7a:81:b7:17:76:84:94:
7f:a9:6b:2c:7b:5b:c6:0c:05:da:4a:78:7e:cf:21:51:c5:26:
51:29:5b:4a:cd:07:91:db:83:3a:fe:c0:59:ec:e3:48:1f:51:
a8:d1:2f:e5:42:28:2d:d9:f8:75:ff:32:49:c2:6d:87:14:70:
57:bb:f0:d3:87:39:b5:73:76:60:15:68:b6:23:2b:ad:29:b6:
9d:d2:0c:82:7b:88:9a:d9:98:45:5f:1f:4b:4c:0f:1e:a4:15:
99:d2:ab:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:34:26 2026 by rpki-client