Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: 5AQvUBLhBc1macPb1r0HQoN9ZWiZ/OTxKBCBgWb81Zo=
Subject key identifier: 2F:52:24:40:2C:6E:A9:77:0E:1B:7B:C4:F7:50:39:67:C8:FC:07:14
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 01A002B8EFE483C5B3A56AA12612FA859FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 0974
Signing time: Sat 15 Aug 2026 00:01:09 +0000
Manifest this update: Sat 15 Aug 2026 00:01:09 +0000
Manifest next update: Sun 16 Aug 2026 00:01:09 +0000
Files and hashes: 1: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: qUKz6vbMfH7tmo8IjU/67TKL4deHn3vgTy7ABPBdO80=)
2: rTC0QfBbtuMqPMUcNggAjT6mTZU.roa (hash: Kx4VZB+r4ecCnqS7wfmvRwNhUpPx2hLpmBb8CQQGRSA=)
3: xEEobC6a9g-ieILcoz7D0nJiJUk.roa (hash: oW3AWDFA5hp4F3w3Pl6J/jMvd/iESOLPY+Y+Yt3dnpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:ef:e4:83:c5:b3:a5:6a:a1:26:12:fa:85:9f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: Aug 15 00:01:09 2026 GMT
Not After : Aug 16 00:01:09 2026 GMT
Subject: CN=2f5224402c6ea9770e1b7bc4f7503967c8fc0714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e8:ce:25:af:df:01:ed:c4:40:d3:3e:3b:8d:
c0:90:18:df:d1:60:93:76:52:95:19:f8:9b:f3:1e:
09:5e:2b:21:82:0a:98:40:0b:ca:7c:29:9e:6d:5f:
5e:60:4e:ae:0d:b7:38:43:84:0b:a0:fb:0d:e4:bf:
3c:de:0f:08:b7:1c:b2:2d:5e:85:ac:12:ae:f0:29:
08:12:29:1d:6b:30:1e:8f:df:d7:65:a1:92:32:f5:
c9:f5:33:a1:09:05:66:51:dc:88:f8:12:af:4e:cd:
f0:f9:a0:7d:99:c4:66:57:e2:16:1c:c7:50:fe:b9:
98:b3:9e:23:e6:b8:9a:e0:e7:df:01:41:6d:85:86:
71:3e:53:74:0e:92:9a:cd:00:d7:fb:d6:9f:73:78:
19:b5:ae:ec:e4:c6:fe:e5:41:4b:03:07:87:d5:47:
f2:ae:27:44:a2:9d:35:4f:c6:ab:90:8e:c6:b2:47:
92:80:4b:51:c7:9d:33:00:d2:5b:09:3b:81:bf:fb:
57:40:e0:43:ed:ed:6a:0c:b9:fc:19:74:73:83:df:
40:a7:00:ec:54:06:c7:49:04:aa:61:84:84:53:79:
35:bb:13:2b:43:c6:80:50:db:a2:93:59:71:71:37:
a2:56:9f:d0:9e:e9:49:96:87:d5:42:86:4a:53:77:
9c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:52:24:40:2C:6E:A9:77:0E:1B:7B:C4:F7:50:39:67:C8:FC:07:14
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a9:a3:b9:16:44:c4:36:cf:d6:cf:d6:5b:c1:98:43:3f:39:
54:b4:61:29:8f:d9:0d:1d:a4:29:14:4e:57:5a:4e:34:c8:a7:
9e:30:4f:6e:97:11:04:15:84:48:2b:e9:b5:90:d5:59:c2:57:
79:74:0b:dc:3e:78:19:55:36:95:08:dc:17:2d:e7:45:4a:58:
b4:d5:e7:43:57:c1:ec:5c:92:a6:35:a5:0e:ed:96:34:78:8a:
84:01:7f:51:05:87:19:0e:f7:a2:28:13:50:35:45:9b:f0:bc:
91:e2:66:f8:37:05:2f:f4:d2:eb:a6:ed:87:68:f7:5a:3a:32:
ad:c4:08:af:dc:45:be:a6:d6:04:f4:35:eb:c1:8e:d1:2d:a3:
99:14:c0:f2:ce:73:c6:a0:11:b3:d1:de:12:49:22:37:0a:fa:
7b:7b:49:d7:05:9d:ec:c3:13:74:6e:32:e9:7e:68:10:ae:30:
7b:de:f6:c6:20:4a:64:fe:06:17:eb:81:42:38:6a:e1:74:e5:
3d:8a:5d:ce:4a:8e:ea:b6:6b:96:14:3c:e9:28:ad:78:68:44:
1e:5e:7e:99:2b:60:bc:ad:bc:8e:d2:08:0a:45:56:28:e9:d6:
79:80:b3:fb:74:6e:64:49:3b:63:45:4e:f6:99:bd:5c:5f:22:
93:cd:df:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:33:52 2026 by rpki-client