Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
File: ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json)
Hash identifier: kw9MnwR33E3P1K1RSN1WOVaA9T+Pw3f1jA/MoaSpoX8=
Subject key identifier: 94:BC:BB:E7:FE:06:21:14:5C:CA:58:1B:3A:8D:C0:33:52:6E:56:F9
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial: 019CAC477FF8CB335DDDD27B64C347F3A58C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:01:32 +0000
Manifest this update: Mon 02 Mar 2026 02:01:32 +0000
Manifest next update: Tue 03 Mar 2026 02:01:32 +0000
Files and hashes: 1: MvAQn98nXI-pzUTu-tvnQV3730A.roa (hash: MNGv8KMiMdRhLMioPsnMtgqiuDzFEe7d9ay8edeo/r8=)
2: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: 6sKy2yi4wEiyp5B8DZHm0QRCZyrjTfe/D0tlH7kTR7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:7f:f8:cb:33:5d:dd:d2:7b:64:c3:47:f3:a5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
Validity
Not Before: Mar 2 02:01:32 2026 GMT
Not After : Mar 3 02:01:32 2026 GMT
Subject: CN=94bcbbe7fe0621145cca581b3a8dc033526e56f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1d:fd:f4:5a:f5:d4:80:59:a7:3c:33:28:f7:
1b:95:0b:80:17:11:ec:10:4e:69:c0:96:82:93:96:
39:7c:97:07:db:f0:be:07:da:6a:14:7c:1b:f7:24:
57:fd:70:45:3f:75:db:bc:2b:e2:14:ab:41:68:27:
16:a5:37:8f:61:97:72:0e:ab:4b:b3:af:34:fa:56:
9f:d7:9a:9f:74:17:eb:cd:25:f5:55:e3:64:61:90:
a0:45:30:df:aa:4f:22:45:72:5d:cb:78:f6:21:48:
aa:e2:dc:4f:6b:7c:70:bb:6c:fb:6f:23:e4:b4:a7:
c2:9d:8d:58:f5:31:c4:7d:8c:9c:43:69:63:7d:8a:
c5:57:b4:73:2e:f5:04:b0:f3:0a:70:85:50:e2:e0:
6a:7d:37:7d:d4:a3:3d:e6:53:e0:27:da:ca:a2:03:
ef:01:aa:a3:96:7c:3e:cb:c0:0e:fb:64:93:ad:f4:
1f:7b:e8:ec:57:8d:f7:9b:74:e7:31:8c:d2:2b:1c:
43:dd:74:19:8d:3a:3b:8c:db:87:88:57:98:ab:df:
ae:b8:a6:b4:80:4c:a5:8c:3b:88:e9:dc:ea:69:92:
12:06:5e:04:8a:7b:3b:f9:d5:17:23:81:ae:86:3d:
33:0d:b9:57:8e:61:6d:b4:b8:74:c4:be:92:05:dc:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BC:BB:E7:FE:06:21:14:5C:CA:58:1B:3A:8D:C0:33:52:6E:56:F9
X509v3 Authority Key Identifier:
keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:be:59:bc:60:11:e2:2a:dd:b9:9c:d5:b1:a1:5e:2a:56:36:
0f:a9:b9:8c:c9:9b:ea:f0:96:e4:0c:9e:f0:6a:2c:8c:83:77:
b8:00:9d:99:29:d0:ba:13:39:50:16:8d:4b:b0:0a:58:7f:03:
d6:a5:0b:d9:9c:b1:07:0f:33:ba:b6:61:d7:e0:93:07:3f:59:
dd:e8:d0:8a:b6:c2:92:2d:f0:51:1c:c5:ab:dc:9f:10:81:da:
8a:4d:5d:b0:92:8c:f1:21:cf:56:1d:56:2f:f3:27:76:82:08:
a0:58:1d:54:ef:9f:dc:03:e0:bc:ae:cf:4a:c0:68:83:4b:52:
e2:46:64:7b:24:97:e7:57:86:65:17:e7:0b:05:05:2c:97:9b:
81:16:fe:ba:11:20:ee:67:41:cc:42:2f:fc:8c:20:b5:02:8c:
9c:45:59:9d:54:4f:c0:d7:11:13:dc:9a:ac:84:4e:6e:c6:4f:
f5:83:49:4b:14:a1:87:f0:ee:34:6f:30:cd:3e:1a:17:ed:c2:
2b:db:11:81:8e:a2:62:55:b8:4b:f5:b1:4b:e7:09:61:f0:5c:
aa:e0:45:b1:ae:75:61:9a:4d:b4:c7:82:e1:f4:1c:05:36:43:
cc:d6:eb:ad:21:02:29:e6:98:6a:8b:27:02:07:df:3d:c7:8d:
64:3d:ef:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:29 2026 by rpki-client