Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
File: ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json)
Hash identifier: B23ItW+NMQr+2+acwh6dvXAv3DhLrGLK0fUWLOTYWV4=
Subject key identifier: 9A:59:D2:23:F5:79:3C:E1:77:B2:10:F1:B1:20:7D:AD:44:08:C3:FF
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial: 019D27DF7FEA38F20AF9FF235A341863E81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 02:00:51 +0000
Manifest this update: Thu 26 Mar 2026 02:00:51 +0000
Manifest next update: Fri 27 Mar 2026 02:00:51 +0000
Files and hashes: 1: MvAQn98nXI-pzUTu-tvnQV3730A.roa (hash: MNGv8KMiMdRhLMioPsnMtgqiuDzFEe7d9ay8edeo/r8=)
2: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: hWNMhX+kkNHV/bD1C4lb9emojwBZuo0bL1VRm/adR5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:7f:ea:38:f2:0a:f9:ff:23:5a:34:18:63:e8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
Validity
Not Before: Mar 26 02:00:51 2026 GMT
Not After : Mar 27 02:00:51 2026 GMT
Subject: CN=9a59d223f5793ce177b210f1b1207dad4408c3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:62:f8:02:2b:3f:e5:3e:0d:b1:f2:57:0e:c7:
ab:2a:b9:75:ef:76:a5:05:1b:1f:12:8b:6e:6d:0e:
75:f6:8d:e6:b3:40:4b:19:e2:38:22:fe:7d:59:b6:
5c:9f:64:66:8d:d0:4b:ab:ce:9a:41:a2:9f:ce:37:
e3:49:88:b0:4f:3d:40:86:6a:61:35:ca:ae:d4:f6:
19:e2:ac:b2:65:75:d8:ed:6e:67:4d:3e:db:df:cc:
b0:26:9a:9c:c4:09:5c:79:59:84:9f:33:4f:72:55:
6f:0f:aa:09:4d:e0:10:af:78:07:6a:4f:07:4c:c7:
43:c1:2c:ef:e4:c2:dc:a4:5b:b6:0a:6e:ae:5d:df:
61:3f:08:ad:18:1a:7e:c4:de:61:c6:5c:5f:0e:a5:
71:ff:15:b0:e4:fa:87:7c:dc:9a:71:84:c2:6b:c7:
4c:d1:65:fe:de:52:47:73:de:d5:07:e3:27:96:b6:
f7:d9:64:45:9d:85:4f:2f:19:59:ab:53:5f:bb:7b:
7e:0f:9c:f5:d2:55:74:0d:83:ff:78:75:01:e6:5a:
41:b2:a5:ee:9e:a0:c9:37:34:47:88:02:f7:4d:b5:
4a:7d:ad:3b:c6:62:6a:8e:51:4a:90:65:91:bc:cd:
2b:e3:64:05:65:7c:29:a0:c7:9f:69:ad:a5:bb:c6:
bb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:59:D2:23:F5:79:3C:E1:77:B2:10:F1:B1:20:7D:AD:44:08:C3:FF
X509v3 Authority Key Identifier:
keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:09:f1:8a:83:a9:1e:33:01:9e:3e:2d:7c:21:fd:0e:9a:77:
28:39:e9:be:d7:32:37:13:5c:f3:8b:18:2e:92:37:01:c9:4b:
2f:52:a8:86:17:5a:fd:c3:49:59:0b:24:88:14:80:65:7d:2f:
c0:d6:58:54:88:3d:13:e4:42:92:5f:0f:48:24:aa:af:1c:6a:
9a:2f:46:dc:81:52:8a:bf:0d:e1:0c:f9:a5:6f:ab:b8:b9:6b:
c2:95:e5:88:3f:b5:2f:de:f2:a4:88:08:d9:f6:93:77:56:23:
80:10:c8:51:46:1f:19:02:4a:25:75:95:41:56:aa:70:f4:c8:
9b:89:b2:fd:6c:0b:46:fe:5e:37:f0:d4:6c:97:10:ae:cb:44:
22:62:f3:4a:5b:a3:49:80:e0:27:33:8f:ec:a1:58:32:5f:c1:
ad:11:bd:2c:b5:ff:0d:f5:7a:1e:c6:4f:ff:63:8f:16:9c:c5:
7e:2b:27:e9:a7:d6:83:4c:18:d5:9f:7a:fc:87:3f:b1:bb:69:
ee:6d:67:e6:d6:6e:10:98:b7:ee:a2:bb:f4:22:85:4d:93:50:
87:84:2f:18:3b:6e:91:8f:05:a1:7f:65:b0:d1:13:60:c7:90:
1c:b5:e7:65:1b:ed:b1:2b:da:d9:dd:5b:9c:9d:f1:a9:5e:79:
e9:78:d2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:51:58 2026 by rpki-client