Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
File: pOd3fHr7fUObRvaBxMe_aoJS4xU.mft (raw, json)
Hash identifier: yPzZ0aCEQI4Tooi8MHxu+AGcc5C2uEWV+0rZvCDXdWQ=
Subject key identifier: 41:5F:FA:7B:AF:33:65:35:FA:96:00:23:25:17:7D:14:26:62:76:17
Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
Certificate issuer: /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Certificate serial: 01A0C9341E599C491E90C49BA04ED22EC037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
Manifest number: 1153
Signing time: Tue 22 Sep 2026 13:00:30 +0000
Manifest this update: Tue 22 Sep 2026 13:00:30 +0000
Manifest next update: Wed 23 Sep 2026 13:00:30 +0000
Files and hashes: 1: buuNqOKeytQjK-fw0E6NNtyOW_g.roa (hash: QnGFqGYlvy+0tU6e4bILPLthTrwM/mOAa/IAuKQfucs=)
2: pOd3fHr7fUObRvaBxMe_aoJS4xU.crl (hash: abpXbvPCb0jH16IkUqtmPCUWTpw0hx9r6hPz+khgXE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:1e:59:9c:49:1e:90:c4:9b:a0:4e:d2:2e:c0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Validity
Not Before: Sep 22 13:00:30 2026 GMT
Not After : Sep 23 13:00:30 2026 GMT
Subject: CN=415ffa7baf336535fa96002325177d1426627617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:66:3e:f7:16:7d:4f:04:f2:18:a0:24:40:
dc:cb:94:ca:aa:7b:f1:b6:ca:28:64:7c:54:1d:77:
e3:fe:a2:93:c6:54:3a:e4:07:fe:c8:67:36:1d:5c:
8c:26:0f:e6:62:2f:d5:83:ab:43:61:4a:7f:d0:75:
e2:98:ff:77:1f:30:d1:1e:2c:5a:f4:de:be:28:50:
d1:5e:8e:c3:d3:54:62:2d:36:9b:b6:12:dd:bf:6d:
39:45:7a:6e:00:56:fb:10:31:0d:60:59:04:59:3c:
3f:35:bb:a4:86:4c:58:c6:fb:dc:e5:8d:89:50:56:
b6:72:64:55:9b:ab:9c:a5:5b:0c:26:82:49:af:c4:
27:e4:ed:2a:3c:c1:3e:3e:c7:8a:04:14:8c:3c:e6:
10:92:6d:3e:6a:2b:21:5d:d0:3d:2c:9b:1e:8e:b1:
0b:8b:b0:37:98:47:8f:15:1e:96:8c:0c:0d:09:30:
52:3b:f5:03:21:6f:c6:1e:d1:be:1e:09:c9:58:78:
6f:b8:46:00:ac:b7:53:d3:6e:0f:9c:b3:a0:fa:f3:
b5:07:44:6c:ca:45:8c:64:6c:69:98:66:a3:16:44:
c4:3b:e2:39:2c:af:5e:77:a3:42:f6:62:ac:f5:6c:
73:a8:06:e8:fe:11:79:14:19:fa:a2:93:13:52:e1:
eb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5F:FA:7B:AF:33:65:35:FA:96:00:23:25:17:7D:14:26:62:76:17
X509v3 Authority Key Identifier:
keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d9:bd:28:1e:d7:74:66:ed:74:95:c5:e1:52:40:90:7e:84:
1c:2d:52:28:d7:5d:d5:d6:ca:aa:e2:a5:26:4e:97:22:96:19:
c9:ba:f9:cf:39:07:3b:99:18:c3:a3:50:3b:bf:2e:11:96:9a:
08:b0:b9:db:59:40:7c:0e:f6:a3:9b:ca:16:39:6f:fe:fc:dc:
25:59:19:f4:3c:3a:43:92:f1:3b:64:1e:61:a5:5b:04:d8:a2:
27:8e:99:13:1d:ba:e7:eb:8d:39:41:09:b4:d0:e1:22:9c:e6:
ef:3d:a0:a4:5e:cd:c1:90:b8:3e:fe:dc:a2:61:56:1e:fd:40:
64:ef:b1:87:c9:b7:cd:45:9d:1a:3a:04:7a:5a:79:51:4d:ac:
98:0d:6a:f8:04:c3:15:6d:2f:a7:ec:e6:f4:dc:9e:b2:d1:7e:
0c:37:ce:9b:fb:f5:69:6f:c7:eb:61:97:29:db:cb:b8:d8:a8:
9a:8c:d2:28:a3:93:94:60:90:a4:16:d2:87:50:f8:23:e6:41:
66:5b:fb:06:36:6f:37:ae:06:c2:cc:8d:00:45:cc:0b:f4:a4:
af:e4:6c:95:8b:38:2f:aa:0d:96:8a:2f:89:87:84:dc:7e:69:
5f:a2:6d:3a:07:36:b7:c2:ad:5c:6f:66:9b:e7:ea:61:00:7e:
fd:69:9f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:29 2026 by rpki-client