Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
File: ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json)
Hash identifier: 7ChIab8fmuyni+Sap9Bs259T5I3M4q7tIMtPlnVTya4=
Subject key identifier: 72:76:17:FE:FD:A7:D6:1E:45:25:AC:DF:E5:AC:A2:D4:F5:44:76:7A
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial: 019D39412586DC1578CFB7719B5FB5317319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:01:03 +0000
Manifest this update: Sun 29 Mar 2026 11:01:03 +0000
Manifest next update: Mon 30 Mar 2026 11:01:03 +0000
Files and hashes: 1: MvAQn98nXI-pzUTu-tvnQV3730A.roa (hash: MNGv8KMiMdRhLMioPsnMtgqiuDzFEe7d9ay8edeo/r8=)
2: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: /w1pncm3XtVLc7yLI3WJim5NqbQDQweUzUDohzbWehc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:25:86:dc:15:78:cf:b7:71:9b:5f:b5:31:73:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
Validity
Not Before: Mar 29 11:01:03 2026 GMT
Not After : Mar 30 11:01:03 2026 GMT
Subject: CN=727617fefda7d61e4525acdfe5aca2d4f544767a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d3:92:86:32:1a:2f:8e:c2:10:e5:5e:77:0d:
b0:fe:5e:f8:3c:c6:14:1f:97:67:6e:eb:8f:2e:84:
50:3c:91:ef:42:52:48:60:01:41:59:3b:17:50:29:
eb:cd:94:36:f3:b9:c4:7f:9d:78:ad:15:fe:48:92:
eb:dd:3a:5d:1c:4c:b6:6d:fa:7c:ae:6a:c5:34:95:
51:02:85:e0:83:1a:b4:26:86:0d:62:8c:ce:8b:90:
76:d8:18:91:ac:dd:b0:44:d5:76:a3:17:0d:89:7b:
62:db:92:df:8a:2a:79:c7:70:8c:49:4a:78:e2:e1:
1e:f0:65:63:2f:b1:2e:4f:c1:b7:e4:84:69:30:c6:
1d:77:55:cf:0a:70:e3:29:b1:ca:1c:16:5a:52:49:
d3:0d:f1:7e:95:14:e7:48:1b:aa:52:2c:75:06:45:
bb:32:df:b4:e1:1e:bd:3c:d1:25:35:5b:3f:f9:8c:
8d:4f:a5:2d:ac:1d:b4:5e:15:65:e6:38:9f:6f:70:
55:be:8c:69:9f:fe:3b:17:3d:d5:85:92:51:30:ba:
57:f8:53:a4:ec:f0:5c:3a:db:42:4a:af:0b:34:20:
ab:3d:0a:15:f7:e3:93:bc:a2:38:b5:de:09:ce:a1:
40:8d:c3:40:08:5e:03:b7:8f:d0:bb:93:c0:af:70:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:76:17:FE:FD:A7:D6:1E:45:25:AC:DF:E5:AC:A2:D4:F5:44:76:7A
X509v3 Authority Key Identifier:
keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:76:63:43:e7:b9:33:d8:b1:b5:8f:a5:82:48:38:59:24:60:
da:3f:1a:cb:30:1c:d4:cf:18:3a:5d:89:f2:b2:a9:83:11:3c:
e3:71:7a:61:50:dc:88:cf:86:02:36:65:33:b3:11:eb:6e:34:
51:a0:88:27:d4:6b:a1:f9:dd:b3:0f:ab:08:d5:73:5c:0e:23:
e7:cd:bb:a5:18:22:5b:08:51:43:75:79:1b:74:30:d9:ff:c2:
76:d8:e4:41:b1:fc:a8:57:db:33:c7:c5:06:78:a3:b5:10:bd:
f0:cc:71:be:9a:42:63:b6:ca:10:c6:64:bc:cc:2e:dd:3c:47:
f0:3f:24:f8:7f:27:fd:02:c7:38:0f:db:aa:93:e7:19:86:54:
48:34:7c:dc:aa:4b:c2:63:bf:06:a3:0f:b0:1d:b8:c6:96:d0:
a6:12:32:0e:52:c9:53:9d:b2:16:c9:6f:34:9b:20:e1:d8:45:
39:46:8e:fb:2e:a0:aa:a7:2b:7e:32:77:19:35:0d:72:77:f0:
9a:a9:f8:69:fe:f3:61:54:64:56:b2:ec:2a:b9:c3:a4:a0:0e:
4a:f4:29:df:b7:e2:ec:9c:c1:b7:f4:11:76:f4:ee:15:0b:f8:
ae:2c:e4:67:2e:74:71:2e:13:17:ac:0b:1a:da:58:da:31:37:
ed:c3:f7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:43:53 2026 by rpki-client