Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: vz6cxVgmF1sNcHI093Frg/NIMMUiculwAaG4v+dfTdI=
Subject key identifier: 77:F0:E4:FC:BD:46:50:58:5F:D0:7B:8A:8B:56:94:70:2E:06:69:D8
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 019CAA5829B7D0172DA1D53D50B1930402CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 17:00:30 +0000
Manifest this update: Sun 01 Mar 2026 17:00:30 +0000
Manifest next update: Mon 02 Mar 2026 17:00:30 +0000
Files and hashes: 1: HvZskpw_21d-SsBdoI8uL-bUlg4.roa (hash: KmGPloyU4A9Te8//GhzETG1AxiKoerTgtl8Qk1jFdRg=)
2: cJd8S-uaABuXAFfWeDiL3NUesCo.roa (hash: 0fC3HtMmFazUCnfsakHQvupcYRxYZ5KP3wkprur/geI=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: LwfUIqgbLZrArnj4jwApNTzsQ94V50t6E9gqORpMAqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:29:b7:d0:17:2d:a1:d5:3d:50:b1:93:04:02:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Mar 1 17:00:30 2026 GMT
Not After : Mar 2 17:00:30 2026 GMT
Subject: CN=77f0e4fcbd4650585fd07b8a8b5694702e0669d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:7c:c3:3d:2b:b3:50:cf:01:36:9c:cb:48:
70:64:20:ab:a0:61:60:2b:9c:71:9a:ee:10:2b:5f:
1f:bc:7f:33:24:81:70:cd:85:71:c2:5c:11:cd:46:
9c:51:63:26:60:24:9c:04:c8:e8:be:96:3b:1a:2c:
4b:f0:2f:d2:1f:c6:81:1f:f7:33:5f:e0:fc:1c:46:
f5:79:5e:5e:80:ca:d3:57:26:b9:1e:b4:16:fc:50:
4f:c5:47:9d:27:5b:95:d6:05:bb:65:be:db:23:f0:
0f:cc:fd:ef:2c:c0:d4:5e:45:95:4a:6d:8c:8e:72:
4a:a1:df:33:aa:78:04:08:26:f1:b3:1b:39:33:fc:
46:82:fd:3a:b3:2d:59:fb:a6:66:59:6c:32:fd:6d:
e9:f1:9f:e4:d4:1a:78:d9:43:db:3b:37:d5:c4:01:
52:f5:11:97:a4:b4:31:13:49:85:b1:cd:c5:60:47:
b9:fd:a2:38:93:35:bf:dc:cf:85:5e:b5:7a:f8:13:
d9:de:54:8a:be:c2:3d:87:bb:c5:cb:b2:92:9e:5d:
ff:54:f3:29:17:aa:3e:c9:f9:93:e7:ce:e3:c6:8e:
76:4d:bc:18:6e:64:6c:db:c3:84:10:c5:49:e8:44:
af:4d:72:4b:b0:f1:31:20:33:c1:0c:1b:81:c8:36:
fa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F0:E4:FC:BD:46:50:58:5F:D0:7B:8A:8B:56:94:70:2E:06:69:D8
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:58:88:ca:ac:84:fd:80:f0:d0:29:38:db:e9:fc:8d:2c:69:
3b:3b:86:ee:46:5a:07:94:bd:22:25:74:fb:0c:78:b9:2f:62:
f5:b1:d1:0a:ab:15:97:cf:28:26:30:81:50:f7:de:d4:a2:5e:
ed:b5:1f:54:70:b5:e1:b5:8a:29:f6:34:65:af:28:98:e2:5c:
17:c8:d5:ce:da:77:75:f0:92:27:40:3a:c1:82:67:e6:e1:b7:
7d:74:90:ed:f9:78:5a:af:57:bd:4e:3f:91:06:ed:3b:79:07:
40:d4:2e:46:5f:49:ab:c0:80:d4:23:10:24:7a:31:6e:8a:c9:
e0:e4:19:5f:0b:6f:b2:86:c9:d3:21:18:d0:33:ec:ed:0a:dd:
f3:85:8b:da:cc:6b:f9:20:8f:3e:02:f4:d6:0e:1b:82:1d:4f:
da:ce:4b:39:c4:fd:fc:7c:28:76:46:88:7d:bc:72:e0:61:3f:
8b:cb:90:8c:af:e3:8d:e7:c2:9b:bf:85:ae:ad:6c:83:13:fb:
c2:8d:14:f2:9f:eb:71:59:58:f1:2f:39:db:1b:fa:db:f3:5d:
df:be:d6:1e:e7:6a:f9:13:14:d2:a2:ed:34:50:3c:73:d1:95:
4d:1a:d5:7e:4f:22:fe:d3:9c:47:2f:b3:07:a9:54:18:72:18:
30:51:88:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:30 2026 by rpki-client