Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
File: pOuOt7S2LtElTwBWTgPEBnq_v8k.mft (raw, json)
Hash identifier: pfvIkvYTDRrzj+Ll2tdW7/Otrb1qKAqc0Wh0Z865zD4=
Subject key identifier: 92:57:CB:21:EC:12:24:27:D3:20:F1:C4:9D:BD:F6:6C:8D:0F:BE:CB
Authority key identifier: A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
Certificate issuer: /CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Certificate serial: 019CACB480C6A7EF43F29D3C97B06C989DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
Manifest number: 0598
Signing time: Mon 02 Mar 2026 04:00:36 +0000
Manifest this update: Mon 02 Mar 2026 04:00:36 +0000
Manifest next update: Tue 03 Mar 2026 04:00:36 +0000
Files and hashes: 1: I8rso1XHHs_G2n3Bf0ez8yM6EOo.roa (hash: hlyEsK6AFvAxueY2ITDcDncXLHyD3I173M2xknmBdkA=)
2: pOuOt7S2LtElTwBWTgPEBnq_v8k.crl (hash: ICfnc7o/ufrHy4tMuojtjhHuvR3gHoXQmAeYfLBqjcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:80:c6:a7:ef:43:f2:9d:3c:97:b0:6c:98:9d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Validity
Not Before: Mar 2 04:00:36 2026 GMT
Not After : Mar 3 04:00:36 2026 GMT
Subject: CN=9257cb21ec122427d320f1c49dbdf66c8d0fbecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:5a:24:81:3b:12:45:0e:50:36:49:d5:28:
ca:ac:ed:af:98:45:f8:ce:e2:da:2c:60:f6:3b:7a:
e1:60:3d:16:3a:7a:31:25:e7:03:40:30:21:6f:25:
9d:49:ec:1b:de:e5:4a:d0:2b:5d:bb:cd:16:89:5c:
70:a8:b4:d6:e4:4d:18:72:8d:19:e7:e1:62:a5:42:
b5:1c:d8:7d:00:bf:c5:3c:c7:16:ae:6b:f2:a2:f2:
12:a7:ec:c8:38:a2:ff:f7:9a:25:40:af:6d:60:1a:
96:70:a2:4d:03:e4:1b:c5:c1:28:44:30:c1:f2:aa:
bf:d5:3e:a4:b3:92:32:33:fe:c0:b0:05:21:f8:b3:
ee:08:59:9a:72:3f:0b:68:36:cb:e8:8f:be:00:7a:
5d:b5:65:4e:26:2f:58:8e:f3:68:33:f9:57:b7:14:
1c:f1:7b:55:3f:8e:7a:89:13:26:8c:7d:a7:85:4c:
89:c0:34:de:af:c3:77:d2:34:2f:cf:3e:14:4f:50:
4f:f9:65:28:cc:20:81:99:2b:9c:3e:8c:fd:b4:42:
b9:b3:45:70:51:ea:69:a9:60:42:69:61:ea:f8:a2:
02:5d:d2:1f:7b:e5:71:65:89:1d:dd:69:92:7a:83:
d4:93:55:f0:c5:2f:68:5c:1d:5c:e1:ba:03:ed:7e:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:57:CB:21:EC:12:24:27:D3:20:F1:C4:9D:BD:F6:6C:8D:0F:BE:CB
X509v3 Authority Key Identifier:
keyid:A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ac:44:92:84:e2:42:8e:74:7a:b6:6b:05:17:7e:51:71:71:
be:e8:d4:29:b4:ea:2e:31:48:7e:b9:18:6d:db:c5:53:4f:d0:
10:f8:37:1d:39:de:68:99:a7:bc:dd:a3:0d:19:88:e2:be:b8:
b7:b3:a3:f0:ca:4d:44:79:6f:4a:92:bb:9b:2c:4b:d9:70:2b:
e9:f3:fa:2f:5f:21:b6:f2:88:de:1f:86:2c:45:63:f5:81:22:
e1:bd:03:26:18:ad:6d:90:4c:36:04:1a:2a:dc:90:e9:c0:e3:
e7:fb:79:4d:33:84:a1:d3:c8:b1:2d:12:13:6b:1a:c2:03:a0:
4f:36:97:27:5f:91:90:51:c4:f3:15:fc:01:37:c9:af:12:71:
62:74:ef:35:09:10:de:cd:b7:fb:a8:b8:34:cc:48:fe:57:66:
63:f9:33:bc:aa:e9:56:44:f9:95:9a:c2:74:71:ff:f7:6e:72:
2c:dd:fb:d7:1b:26:1f:69:98:23:a6:80:09:0f:e1:cb:e9:a0:
1a:ee:c4:a4:79:50:9f:6d:83:3e:a2:7e:cb:90:4d:e1:d8:c0:
9d:75:ca:af:ef:6e:f4:24:72:87:f5:b5:6e:a2:4c:5f:ee:9f:
7c:6e:c8:12:d4:af:8f:17:62:a4:cf:5b:84:35:63:5a:0d:e8:
3c:7c:b4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:34 2026 by rpki-client