Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
File: ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json)
Hash identifier: IAp6Pk90hem1yrWQFFospVNz7/tXs05m+BIWvlS3q4I=
Subject key identifier: 19:4C:CF:01:36:59:12:06:01:32:42:01:B9:E6:92:00:AA:B1:C0:08
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial: 019D97E16E6A75EE92CFE50EC09CB2CC3BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 20:00:26 +0000
Manifest this update: Thu 16 Apr 2026 20:00:26 +0000
Manifest next update: Fri 17 Apr 2026 20:00:26 +0000
Files and hashes: 1: MvAQn98nXI-pzUTu-tvnQV3730A.roa (hash: MNGv8KMiMdRhLMioPsnMtgqiuDzFEe7d9ay8edeo/r8=)
2: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: S+kvwY7b/MOLmZXp5K0+cav5J717N0sIBzaWdL3W3Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:6e:6a:75:ee:92:cf:e5:0e:c0:9c:b2:cc:3b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
Validity
Not Before: Apr 16 20:00:26 2026 GMT
Not After : Apr 17 20:00:26 2026 GMT
Subject: CN=194ccf013659120601324201b9e69200aab1c008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:b4:4a:c0:1f:df:42:e9:7b:d5:4e:60:e0:
c7:69:a4:79:15:07:02:8e:d2:1d:b8:ea:11:3e:84:
eb:19:1c:dd:9b:61:7b:26:76:c2:81:8e:1b:b0:2d:
e7:69:ee:1f:2f:06:16:88:70:8b:87:fb:b5:9c:16:
0b:c9:7b:20:85:86:2c:8e:94:bf:42:cd:ab:ac:76:
b6:9e:86:32:6a:e2:6f:2a:c7:37:86:4f:65:53:b0:
31:ca:01:1b:f3:d1:91:22:59:50:f4:c5:b1:c2:59:
b1:aa:08:ac:3c:f7:3b:b0:f9:37:40:a8:a9:d6:39:
27:22:45:74:4e:14:42:7c:01:f7:47:45:88:ff:e9:
13:34:50:af:b5:ec:fe:5b:57:58:65:51:c5:fb:0c:
d7:91:3b:5c:7c:3c:c8:4b:05:20:79:5e:05:59:19:
22:c6:cc:6e:36:af:59:c0:24:4a:16:23:65:17:93:
f7:f0:82:be:37:ba:6b:57:fb:12:ab:52:a6:41:e6:
58:1d:3b:59:a9:b8:53:fe:7c:14:47:4a:bc:5a:f6:
dc:fe:25:db:f5:36:33:cc:b9:15:63:78:06:71:49:
38:1e:64:57:11:f0:35:0c:30:51:25:ab:58:ed:89:
19:d7:b6:a2:64:44:11:ca:63:74:57:39:49:d6:67:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4C:CF:01:36:59:12:06:01:32:42:01:B9:E6:92:00:AA:B1:C0:08
X509v3 Authority Key Identifier:
keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fc:b6:82:5b:3b:2c:f6:cd:5a:0e:d3:8a:fd:ab:28:07:63:
f8:f9:b7:c1:13:11:32:77:7c:f5:21:30:db:e4:01:bb:9a:f4:
ed:34:38:73:d5:d7:cf:60:a8:a0:99:32:c9:bd:41:41:a2:29:
b3:2e:93:75:8e:15:df:d0:21:6c:2d:1f:d7:92:e1:89:8b:56:
a4:dd:d2:09:1c:5a:36:4f:f9:38:fc:25:d4:9b:2f:09:c4:59:
52:6b:eb:63:16:2c:e2:c8:7a:97:b9:6d:16:e2:99:88:37:93:
b6:0c:db:27:91:81:da:74:37:e0:ad:6e:dc:d2:55:b9:75:f2:
db:46:a9:b1:ca:c5:1a:52:5a:27:6d:d4:43:4b:1f:0c:5c:de:
95:bd:bb:5a:61:c7:e8:e9:db:46:33:22:ef:4e:70:b7:6d:4b:
01:c4:22:5b:04:8f:36:cd:57:7f:b2:1e:28:3b:9c:e8:22:b9:
36:41:71:2a:98:73:e1:6f:fb:e9:de:06:be:1d:36:d6:1f:0c:
a7:36:9f:ff:19:32:63:c3:f6:e1:23:b3:5d:bf:8e:be:b5:94:
84:d8:b0:ff:14:3c:c8:e6:62:ab:16:9c:30:74:88:59:a1:bb:
5b:4d:2a:93:a7:95:7e:ed:f8:40:b6:cf:26:13:4e:70:fc:17:
7d:a9:2a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:16 2026 by rpki-client