Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
File: pOd3fHr7fUObRvaBxMe_aoJS4xU.mft (raw, json)
Hash identifier: i+1casnUE59HAld2JBhggzN5POni50KRPCXL/MjDvtI=
Subject key identifier: 5D:C6:8A:A4:99:B6:AD:81:0D:01:13:F9:E5:BC:8D:A7:D1:A9:D5:9C
Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
Certificate issuer: /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Certificate serial: 019CACB4DD2B3BF47867AC0A5A7AECB981DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
Manifest number: 0F32
Signing time: Mon 02 Mar 2026 04:01:00 +0000
Manifest this update: Mon 02 Mar 2026 04:01:00 +0000
Manifest next update: Tue 03 Mar 2026 04:01:00 +0000
Files and hashes: 1: buuNqOKeytQjK-fw0E6NNtyOW_g.roa (hash: QnGFqGYlvy+0tU6e4bILPLthTrwM/mOAa/IAuKQfucs=)
2: pOd3fHr7fUObRvaBxMe_aoJS4xU.crl (hash: 9otbOi7v5KWWrszAFL2NziHPlcjIB8zQuB7KR24pHqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:dd:2b:3b:f4:78:67:ac:0a:5a:7a:ec:b9:81:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Validity
Not Before: Mar 2 04:01:00 2026 GMT
Not After : Mar 3 04:01:00 2026 GMT
Subject: CN=5dc68aa499b6ad810d0113f9e5bc8da7d1a9d59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:5e:d8:3b:db:0d:97:e1:97:90:7e:00:5a:
39:83:bb:f6:30:47:bf:8f:7c:51:ef:70:f6:57:e2:
77:09:60:4e:16:ca:07:16:e9:65:74:45:ef:68:db:
61:a0:9f:80:e4:d3:b9:1f:0d:53:3f:ee:c5:e9:b4:
07:4c:d8:6d:b5:7c:02:d6:15:90:cc:e8:e7:fe:77:
52:26:90:9d:d4:f9:d9:3d:d3:61:7a:ae:e7:2d:94:
42:b6:bd:a2:c8:ba:ca:7b:54:c8:e0:7b:3d:56:35:
55:90:f1:ad:3a:7f:52:e7:51:a1:89:2c:a6:39:2f:
fe:07:b9:3e:58:1c:bb:65:e4:97:97:76:46:c8:b1:
c7:99:39:ee:7b:59:65:0f:13:e6:e5:ce:4b:61:e8:
27:1e:7a:71:e6:d0:87:4d:5f:a0:08:ff:e7:f9:20:
1d:bc:00:46:69:ae:db:74:0e:f8:f2:b4:be:b3:3b:
71:d5:0a:c2:9f:93:dd:cd:76:0a:71:ef:e1:f5:fa:
69:5d:b2:31:15:d8:31:00:24:55:7d:5c:2b:3c:9b:
f0:f3:3f:09:ec:3d:41:f0:02:9f:33:35:08:10:17:
5e:fc:3c:89:63:5d:1f:e0:14:a4:3a:cd:a6:dd:d2:
0a:13:8f:21:28:c9:bf:3d:06:97:45:de:59:38:35:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C6:8A:A4:99:B6:AD:81:0D:01:13:F9:E5:BC:8D:A7:D1:A9:D5:9C
X509v3 Authority Key Identifier:
keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9e:8b:fc:98:03:9c:62:31:fe:47:eb:2b:25:5d:f8:7a:f2:
3a:c0:40:3a:60:87:2b:aa:ff:16:51:78:59:99:48:f7:41:f7:
f4:f6:03:60:3e:3d:97:91:f2:26:49:92:12:d7:69:ee:d1:d2:
3d:9f:84:e7:14:fe:7f:3f:a5:80:3e:01:56:4c:c9:c4:e8:37:
f9:ca:e2:4d:78:f5:bd:58:a7:9a:d2:12:9c:fd:09:84:59:ad:
a6:67:b3:71:36:47:b7:72:fc:1e:c2:7a:c7:bf:8a:96:db:62:
0e:01:d6:1e:26:f8:0b:6f:74:29:ca:f4:00:9f:43:9f:80:5a:
00:4e:dc:d9:53:e0:05:33:60:f8:ec:08:c1:09:f7:59:b1:82:
29:f5:5f:f9:91:3b:a9:e8:f1:46:3b:72:69:62:ee:d2:2c:3c:
0a:43:1f:fa:a3:91:d9:a9:49:8c:d3:15:07:85:e7:52:dc:06:
54:53:53:e8:7f:58:70:3a:78:a9:98:a5:97:3d:f8:e5:85:db:
6b:8d:01:a9:42:71:c9:05:c0:d3:59:1c:ab:13:6e:67:9a:f3:
27:19:d7:53:4a:aa:e8:26:59:57:f5:5d:92:5b:51:60:87:9c:
26:63:cf:e6:96:e8:28:12:a4:e2:fb:a4:ef:42:2e:04:b1:13:
28:11:36:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:31 2026 by rpki-client