Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
File: pOuOt7S2LtElTwBWTgPEBnq_v8k.mft (raw, json)
Hash identifier: XICPFiaMQZ2F1Lk0iGE1ucFGKAorBKK94KYDOoYnsRk=
Subject key identifier: 60:6F:02:D2:F4:49:20:EF:88:80:8C:A9:8B:3F:51:9C:84:ED:B1:37
Authority key identifier: A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
Certificate issuer: /CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Certificate serial: 019D9C2CBF3B01234F83B38A1943CBBA85A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
Manifest number: 0614
Signing time: Fri 17 Apr 2026 16:01:11 +0000
Manifest this update: Fri 17 Apr 2026 16:01:11 +0000
Manifest next update: Sat 18 Apr 2026 16:01:11 +0000
Files and hashes: 1: I8rso1XHHs_G2n3Bf0ez8yM6EOo.roa (hash: hlyEsK6AFvAxueY2ITDcDncXLHyD3I173M2xknmBdkA=)
2: pOuOt7S2LtElTwBWTgPEBnq_v8k.crl (hash: veLRs6ADMAmuUduan0JOkPxqUZsS0Mi84neEvYTXJFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:bf:3b:01:23:4f:83:b3:8a:19:43:cb:ba:85:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Validity
Not Before: Apr 17 16:01:11 2026 GMT
Not After : Apr 18 16:01:11 2026 GMT
Subject: CN=606f02d2f44920ef88808ca98b3f519c84edb137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:08:0e:65:a5:47:c1:92:30:c6:b5:32:fd:b9:
23:26:ad:a6:04:9d:d7:e2:d9:5c:6c:03:1e:2a:36:
04:2a:28:3b:3a:c1:82:c9:49:98:e5:c1:6b:8e:de:
8d:25:a8:7e:e7:d5:9a:ae:91:60:99:91:7c:0c:9c:
be:4b:07:d1:a3:62:40:6b:71:05:0f:2e:ec:7b:b5:
5d:79:4d:40:8d:e4:dc:73:65:a1:e2:56:14:b0:ec:
a4:28:30:c8:16:4f:5c:27:75:0d:e7:c3:74:b9:4a:
d7:23:e2:27:43:c6:5e:9e:56:46:84:aa:6c:f2:8c:
12:49:73:e5:d2:12:53:88:93:e4:10:b3:d9:80:4a:
38:cf:94:5a:b0:bb:8c:05:09:d7:9d:9e:67:d2:c4:
c6:41:fa:75:2a:83:45:0b:7f:55:c7:83:33:15:32:
a7:ec:33:ca:fe:8f:50:a7:5a:9b:05:8e:3e:0b:bb:
28:b9:22:65:b9:1e:e9:41:4f:9c:37:f7:86:50:d2:
33:5d:2d:1b:19:41:a1:cd:72:0a:6f:29:dc:a5:84:
b6:83:ec:d9:f3:5a:60:e8:bb:9d:55:89:2b:0d:b4:
f4:e2:05:ac:28:a5:ac:28:49:e6:9a:98:3b:6d:2e:
b8:49:f4:81:9c:ee:bc:f7:33:31:b0:9d:2f:34:24:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6F:02:D2:F4:49:20:EF:88:80:8C:A9:8B:3F:51:9C:84:ED:B1:37
X509v3 Authority Key Identifier:
keyid:A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:00:5c:35:d9:91:18:0c:62:0d:57:d5:9f:53:c9:1c:9a:48:
c3:f5:a2:b4:76:c2:dc:87:d6:d6:5e:cc:d9:f0:54:6d:d2:b2:
4d:c0:b8:d0:c6:44:b0:26:96:04:a4:5d:41:80:cc:e7:b9:5b:
08:da:e5:30:16:f2:a6:08:d3:3e:82:04:ee:bb:fd:9e:bb:b0:
a6:22:d9:ea:8c:31:03:a9:a6:68:d8:1c:40:4c:cf:23:ae:74:
4a:e7:cd:95:d1:7b:95:2d:6c:65:88:50:b5:17:45:2d:04:86:
b4:de:70:ac:40:8e:e1:50:73:78:15:9d:94:be:4b:df:0d:fd:
e7:91:5a:56:6d:7e:ea:91:b2:b1:5d:01:ec:de:32:7a:4f:ad:
ea:bb:f1:70:ee:c8:bb:6c:5a:ff:39:0a:ee:13:29:1a:e3:a9:
9a:cd:a0:ad:a0:c4:88:e0:04:5c:3f:ed:87:76:5f:86:d4:cb:
46:07:ad:52:4e:e1:54:8c:1a:b2:4c:cb:50:33:7c:43:db:12:
60:29:a4:84:ef:78:af:eb:86:88:00:5f:70:3d:49:a0:28:db:
72:8e:b2:3d:1d:cf:38:c0:63:0d:c7:7a:48:be:e2:55:61:86:
4b:bc:43:4e:ab:08:25:4f:b3:ec:18:a8:1d:bf:85:d5:bf:5f:
67:ca:30:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:03:58 2026 by rpki-client