Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: BdM83dmvWCUXyua20SDrOFjUtl2X7GPqEcXvi0efOiE=
Subject key identifier: 84:E7:4D:08:2C:84:0F:9B:D3:EA:6C:3C:BB:17:39:80:B5:4F:B3:E6
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 019E314E35DCB80273E30D4605767AA0D998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 0883
Signing time: Sat 16 May 2026 15:01:09 +0000
Manifest this update: Sat 16 May 2026 15:01:09 +0000
Manifest next update: Sun 17 May 2026 15:01:09 +0000
Files and hashes: 1: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: jHj9m1gkr0gWfQp6oH2TWh4bGNNX+jNjTLmiqb7a/m4=)
2: rTC0QfBbtuMqPMUcNggAjT6mTZU.roa (hash: Kx4VZB+r4ecCnqS7wfmvRwNhUpPx2hLpmBb8CQQGRSA=)
3: xEEobC6a9g-ieILcoz7D0nJiJUk.roa (hash: oW3AWDFA5hp4F3w3Pl6J/jMvd/iESOLPY+Y+Yt3dnpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:35:dc:b8:02:73:e3:0d:46:05:76:7a:a0:d9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: May 16 15:01:09 2026 GMT
Not After : May 17 15:01:09 2026 GMT
Subject: CN=84e74d082c840f9bd3ea6c3cbb173980b54fb3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:ee:f8:6d:05:7c:29:23:ce:6f:30:fa:ac:
6c:31:97:dc:9b:4c:7c:d4:2c:71:00:29:45:39:70:
ef:b1:19:a6:de:e5:81:2b:db:c4:9d:27:9f:fd:36:
e2:2d:09:71:9e:69:5c:b0:c9:43:f9:b3:b6:63:3b:
2f:4c:1d:70:88:40:46:b3:3c:64:05:cf:2f:96:28:
62:6d:73:3d:67:d1:40:20:e9:00:3a:d2:93:e0:f9:
25:a9:92:d4:1c:75:1c:cb:f1:6e:cb:c7:92:f3:86:
16:de:78:3a:fc:8f:0b:bc:42:75:68:19:3c:d8:e0:
a3:4b:71:ff:83:fc:31:ed:67:04:c8:a4:89:07:9b:
4d:80:95:57:d4:2f:85:53:ed:17:30:ff:25:2b:3c:
c0:8e:dc:bc:5a:11:84:3a:40:0c:88:ce:d0:1e:9c:
27:97:76:0a:1b:8d:37:0f:29:47:93:08:06:59:a2:
cf:84:d2:b9:bc:99:69:45:70:cb:84:ec:f5:18:63:
0c:b7:48:1e:07:85:11:3f:ac:0c:a3:69:57:8c:45:
fd:1d:c7:28:02:d1:b6:d7:8b:bd:fe:5f:90:03:b1:
85:82:26:48:53:43:79:b9:11:94:e8:3e:dd:c8:34:
4e:d7:03:13:0f:49:27:2c:ed:73:0a:7e:f8:76:5f:
2e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E7:4D:08:2C:84:0F:9B:D3:EA:6C:3C:BB:17:39:80:B5:4F:B3:E6
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:39:40:9d:7e:35:d4:7c:25:3a:67:67:37:a0:02:c5:cb:8f:
d1:69:a7:a6:60:be:26:b2:4a:0f:37:7f:42:55:a8:b4:76:4d:
4c:97:a6:46:f7:0b:e3:35:b3:74:b2:4e:fe:63:41:8b:c2:c6:
ef:6a:2d:75:14:2b:39:15:e0:15:6d:5a:04:ff:8a:e9:41:89:
fc:4c:a9:01:51:7f:3a:36:92:96:f3:26:69:28:75:ac:54:aa:
61:9b:2c:08:3a:3c:d9:81:27:99:83:04:00:cc:59:c9:78:44:
7f:14:f7:9c:b0:5c:d9:33:e3:58:e4:d0:1d:18:e9:e5:24:5c:
cb:fc:93:70:fb:49:3a:41:81:ca:27:8d:e7:42:83:4f:3f:29:
c7:45:37:90:06:d2:5c:0d:29:dc:22:68:e7:2d:b5:05:b7:97:
3b:81:84:8a:6e:52:7e:c5:15:6e:32:2e:7b:79:17:4b:9b:20:
75:38:d5:cd:21:ba:6a:b1:ac:e1:f2:81:30:a6:2f:0c:6b:3d:
1b:c4:9c:bb:d1:cb:d4:69:84:8c:5f:bb:db:8c:68:e9:ce:d8:
54:32:61:ff:fd:d5:d0:f1:3b:ea:70:7f:bf:f0:bb:ad:c1:ae:
f1:a8:72:18:84:dd:91:30:18:fb:7c:20:6a:45:33:9e:c2:c7:
c0:1d:15:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:14 2026 by rpki-client