Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
File: pOd3fHr7fUObRvaBxMe_aoJS4xU.mft (raw, json)
Hash identifier: EDb5AUH+YeQo+pZLwgXxi8vzm4B906ruJqvQM99f8Ow=
Subject key identifier: C0:4A:69:5F:CC:FA:74:80:08:0E:B1:98:9A:74:73:9C:30:6D:2D:FF
Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
Certificate issuer: /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Certificate serial: 019D9A3EED73ED8DE65235173CB7084F9F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
Manifest number: 0FAD
Signing time: Fri 17 Apr 2026 07:01:48 +0000
Manifest this update: Fri 17 Apr 2026 07:01:48 +0000
Manifest next update: Sat 18 Apr 2026 07:01:48 +0000
Files and hashes: 1: buuNqOKeytQjK-fw0E6NNtyOW_g.roa (hash: QnGFqGYlvy+0tU6e4bILPLthTrwM/mOAa/IAuKQfucs=)
2: pOd3fHr7fUObRvaBxMe_aoJS4xU.crl (hash: fqhT/tpsSnUrdHk9JcPbo8df8t8EZO6A/ZS6wUFQEI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ed:73:ed:8d:e6:52:35:17:3c:b7:08:4f:9f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Validity
Not Before: Apr 17 07:01:48 2026 GMT
Not After : Apr 18 07:01:48 2026 GMT
Subject: CN=c04a695fccfa7480080eb1989a74739c306d2dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:84:d0:46:72:f8:a3:84:53:55:88:64:88:
12:c2:e3:94:8d:e2:a8:a6:9f:3b:fd:d0:6d:4d:9d:
11:ad:0d:ea:26:ce:de:06:71:93:60:cf:0c:1c:34:
64:51:00:12:5c:33:bd:7f:56:8f:25:5c:f8:8e:46:
4a:c3:ac:d2:37:92:1c:28:62:0f:4b:f2:d0:a9:29:
5d:ff:68:b8:7f:8c:e7:c6:df:34:43:c7:72:8c:4e:
49:6c:d4:28:e4:8c:95:9a:7f:33:24:1c:7c:3a:a3:
01:f7:f1:90:81:35:30:b9:72:37:1f:d4:58:2d:25:
51:d8:6a:12:94:00:3f:bc:e8:9f:20:ad:e0:15:2e:
50:22:fd:a3:4c:21:ec:3f:65:7a:a7:7e:2e:91:54:
3d:56:0c:45:f9:03:c0:9f:5f:2b:d1:4c:13:bc:70:
91:5d:0f:96:f1:c5:62:34:34:8c:af:14:55:76:54:
72:d2:37:e5:a5:14:21:fe:11:be:8a:2d:07:52:3c:
72:12:4f:36:af:f4:b8:47:84:fe:62:b3:58:9a:3e:
69:df:0e:d5:a8:e5:64:13:61:cf:18:00:89:4d:9a:
88:73:09:47:49:60:f1:89:75:69:43:4e:2e:9b:9c:
b8:1d:fa:7c:90:db:6f:35:91:ce:7a:5d:65:bb:22:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4A:69:5F:CC:FA:74:80:08:0E:B1:98:9A:74:73:9C:30:6D:2D:FF
X509v3 Authority Key Identifier:
keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e5:0a:2d:ab:4c:d0:08:4a:d4:bf:5e:17:4f:7b:a0:87:69:
d4:51:bf:a3:0e:b3:77:16:71:78:7c:92:ad:3d:8d:6d:39:c1:
c5:d0:c3:8a:67:82:9d:94:a9:09:bf:a5:aa:fd:f3:44:be:a7:
f1:ba:a0:71:55:47:01:c4:c7:5d:31:17:d7:a0:71:5e:6a:46:
1c:e1:99:ac:59:6b:a0:38:7c:48:78:1e:d0:23:1e:ff:0f:12:
45:c9:61:ae:0e:4d:cb:8a:c2:a9:c9:b0:f4:15:72:c9:06:3f:
8e:68:d2:5d:1c:a1:44:e6:f1:d3:d5:61:14:7a:43:11:51:a3:
c8:72:9e:26:f5:5c:11:d1:e1:1f:cd:a0:1f:65:dd:65:d0:8c:
ef:da:02:69:e3:4d:5a:70:da:15:cb:cc:ec:54:77:04:be:ba:
a0:6b:5c:38:aa:26:4d:c9:92:dc:2e:79:1d:4c:91:47:d0:aa:
37:ee:9e:02:5f:f2:b9:f5:1e:a8:c5:3e:fb:f6:64:71:c3:c7:
d9:8d:10:78:ec:a1:67:46:0b:d6:86:00:a0:43:fe:30:1a:d7:
54:9f:eb:69:1c:07:6a:95:d7:2d:2d:36:89:9d:7e:18:51:79:
a4:b7:a9:27:7c:ab:da:39:cd:0d:f8:8e:df:80:c0:a0:a9:b0:
be:77:fa:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPu1z7Y3mUjUXPLcIT5+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZTc3NzdjN2FmYjdkNDM5YjQ2ZjY4MWM0YzdiZjZhODI1
MmUzMTUwHhcNMjYwNDE3MDcwMTQ4WhcNMjYwNDE4MDcwMTQ4WjAzMTEwLwYDVQQD
EyhjMDRhNjk1ZmNjZmE3NDgwMDgwZWIxOTg5YTc0NzM5YzMwNmQyZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+GE0EZy+KOEU1WIZIgSwuOUjeKo
pp87/dBtTZ0RrQ3qJs7eBnGTYM8MHDRkUQASXDO9f1aPJVz4jkZKw6zSN5IcKGIP
S/LQqSld/2i4f4znxt80Q8dyjE5JbNQo5IyVmn8zJBx8OqMB9/GQgTUwuXI3H9RY
LSVR2GoSlAA/vOifIK3gFS5QIv2jTCHsP2V6p34ukVQ9VgxF+QPAn18r0UwTvHCR
XQ+W8cViNDSMrxRVdlRy0jflpRQh/hG+ii0HUjxyEk82r/S4R4T+YrNYmj5p3w7V
qOVkE2HPGACJTZqIcwlHSWDxiXVpQ04um5y4Hfp8kNtvNZHOel1luyK73wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBKaV/M+nSACA6xmJp0c5wwbS3/MB8GA1UdIwQY
MBaAFKTnd3x6+31Dm0b2gcTHv2qCUuMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE9kM2ZIcjdmVU9iUnZhQnhNZV9hb0pTNHhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80NWFkNWItM2NlMS00OGYxLWJlZjct
NjQxY2ZiNmUzZDliLzEvcE9kM2ZIcjdmVU9iUnZhQnhNZV9hb0pTNHhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS80NWFkNWItM2NlMS00OGYxLWJlZjctNjQxY2ZiNmUzZDli
LzEvcE9kM2ZIcjdmVU9iUnZhQnhNZV9hb0pTNHhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeUKLatM
0AhK1L9eF097oIdp1FG/ow6zdxZxeHySrT2NbTnBxdDDimeCnZSpCb+lqv3zRL6n
8bqgcVVHAcTHXTEX16BxXmpGHOGZrFlroDh8SHge0CMe/w8SRclhrg5Ny4rCqcmw
9BVyyQY/jmjSXRyhRObx09VhFHpDEVGjyHKeJvVcEdHhH82gH2XdZdCM79oCaeNN
WnDaFcvM7FR3BL66oGtcOKomTcmS3C55HUyRR9CqN+6eAl/yufUeqMU++/ZkccPH
2Y0QeOyhZ0YL1oYAoEP+MBrXVJ/raRwHapXXLS02iZ1+GFF5pLepJ3yr2jnNDfiO
34DAoKmwvnf6Ew==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:31 2026 by rpki-client