Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
File: pPAKrld-dFH4jqYEv2ozc0zQMAk.mft (raw, json)
Hash identifier: yP1DGSSSUa8Dn00J4MZUlTcMxS5xsVhGyUMLfDxASy8=
Subject key identifier: 6B:D2:CF:AB:E5:92:87:8D:2C:F4:8D:CF:2C:C7:3C:F6:69:29:38:E5
Authority key identifier: A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
Certificate issuer: /CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Certificate serial: 019D28F217AE54B3A529405F888E623B48A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
Manifest number: 10E6
Signing time: Thu 26 Mar 2026 07:00:47 +0000
Manifest this update: Thu 26 Mar 2026 07:00:47 +0000
Manifest next update: Fri 27 Mar 2026 07:00:47 +0000
Files and hashes: 1: pPAKrld-dFH4jqYEv2ozc0zQMAk.crl (hash: OYB46cN7vUnkcNgYrznzdscywR0Y0slPZNj+xIX/p+w=)
2: wCMCzmGItEBLiq2zhCPR7XIYkCc.roa (hash: nQv2a3Px/0ZD2/O010YD46BOn/AzS13ORg3ozlLVCtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:17:ae:54:b3:a5:29:40:5f:88:8e:62:3b:48:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Validity
Not Before: Mar 26 07:00:47 2026 GMT
Not After : Mar 27 07:00:47 2026 GMT
Subject: CN=6bd2cfabe592878d2cf48dcf2cc73cf6692938e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:33:69:2b:fd:7e:b4:48:0b:be:05:cf:ef:ac:
ec:14:75:03:77:b6:a9:ae:bb:3f:f3:78:46:07:bd:
0f:d6:78:b1:6c:6d:58:34:4c:d0:f6:9b:d8:5d:c8:
5e:c8:05:72:7b:83:76:83:6b:e0:05:c9:48:c8:54:
96:b2:e9:60:2c:36:b2:b0:8a:2c:e4:d8:1d:61:ea:
4e:da:e3:ab:b6:13:75:1b:a4:3a:43:5a:c9:c1:a0:
d6:3d:79:1e:f3:e3:17:cd:63:c7:9e:4b:b0:4f:88:
89:cf:be:99:93:05:85:d1:f9:49:bf:b4:64:13:1a:
fb:f2:5a:86:65:af:df:8c:96:90:ac:79:c1:1e:be:
b4:02:6f:e5:14:b1:f1:54:b3:0f:46:58:fe:e8:5a:
0b:18:11:31:42:ca:ca:f7:c6:92:20:7d:e5:0e:28:
c1:f8:da:65:be:8b:fb:dc:80:b4:e5:0c:29:04:d1:
b1:f3:a8:79:7f:9c:9f:b9:d1:3a:3e:61:a3:69:0e:
30:e0:65:26:d1:d9:64:fe:f8:a1:b4:87:be:58:b0:
e5:e8:50:e4:78:a5:7d:e3:56:6e:52:36:11:d0:50:
91:ef:82:f2:c8:a5:a8:a2:18:3a:e4:f7:6d:a9:00:
d2:c2:ac:1d:61:0f:d8:9c:57:bc:fc:62:48:d7:dd:
68:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D2:CF:AB:E5:92:87:8D:2C:F4:8D:CF:2C:C7:3C:F6:69:29:38:E5
X509v3 Authority Key Identifier:
keyid:A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d5:2c:e0:d5:88:83:fe:70:ae:ca:0f:5e:dd:ac:87:89:e6:
d6:9e:03:38:c7:20:26:ba:91:12:02:69:f2:81:76:a8:a1:f2:
98:68:7d:b3:aa:a0:ad:18:74:a2:68:3a:f4:c4:95:df:49:67:
dc:24:fa:e2:63:12:fc:66:c4:d5:9b:30:34:cf:38:5c:7e:b3:
97:21:ca:6b:c2:4a:fe:c1:ac:77:52:f5:d8:5d:31:20:1b:73:
3d:86:8a:cd:73:02:38:18:ba:5b:fe:50:07:75:33:f7:af:97:
c4:e0:90:db:25:fe:ee:11:35:ef:ad:57:e1:8a:60:bb:8b:c1:
7a:78:b8:ab:1e:dd:9b:9d:bf:30:28:19:25:22:9f:dc:93:a8:
be:62:1b:df:eb:29:1a:2e:ae:87:ea:52:d4:12:49:08:7c:87:
d0:86:e8:7b:0c:15:20:f3:23:27:18:f8:cd:3e:ea:e0:5b:22:
4f:a6:7f:6d:eb:c1:e0:4e:57:22:60:82:3f:a1:0a:60:f9:a8:
78:1e:c1:7c:5e:77:dd:29:54:58:c0:0e:c9:45:87:74:ce:e7:
94:a7:7c:4c:43:57:79:6a:2c:44:01:1e:e3:8d:2b:45:ef:b9:
2a:bf:ae:dd:eb:a2:88:29:ba:3d:84:d4:f2:10:a2:f9:db:6e:
7c:89:55:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:26:35 2026 by rpki-client