Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: on+5Gju1Ss663DK8bOxLXli0YKMjDt8+mmxJenIkNr4=
Subject key identifier: A1:EB:4C:53:52:39:2D:AB:4F:69:F1:1F:46:B6:DE:84:53:6D:8B:64
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 019D9BBE85188E087C50BB56095C1980FED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 14:00:47 +0000
Manifest this update: Fri 17 Apr 2026 14:00:47 +0000
Manifest next update: Sat 18 Apr 2026 14:00:47 +0000
Files and hashes: 1: HvZskpw_21d-SsBdoI8uL-bUlg4.roa (hash: KmGPloyU4A9Te8//GhzETG1AxiKoerTgtl8Qk1jFdRg=)
2: cJd8S-uaABuXAFfWeDiL3NUesCo.roa (hash: 0fC3HtMmFazUCnfsakHQvupcYRxYZ5KP3wkprur/geI=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: pb8onnCSukD66/K11l/1SjUGUrI56NTllXjq5P0gwq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:85:18:8e:08:7c:50:bb:56:09:5c:19:80:fe:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Apr 17 14:00:47 2026 GMT
Not After : Apr 18 14:00:47 2026 GMT
Subject: CN=a1eb4c5352392dab4f69f11f46b6de84536d8b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:3f:0b:7f:ea:60:ac:38:00:9a:39:b2:3f:
a3:5e:ea:56:67:6e:b4:ac:63:4a:ec:39:9c:c0:6e:
77:19:4b:80:e4:5d:f1:09:e7:97:f7:57:4a:65:a3:
3e:4f:73:3b:bf:1c:e8:6b:fd:8e:a3:e7:f4:a2:cb:
d1:8c:77:6c:ce:09:d6:4c:16:76:87:0e:c1:2c:49:
80:be:b8:5b:a9:59:66:85:36:cb:cb:d5:ee:21:c4:
13:f7:c2:69:f9:e9:5e:4f:cb:03:70:c4:70:9a:c7:
96:aa:3d:7a:7b:bc:dd:23:d6:52:b7:5c:2f:91:d7:
ac:d8:e2:00:ce:47:9c:a9:df:54:33:d7:2b:d6:9d:
56:19:5e:4f:57:7a:26:03:ad:06:87:23:34:db:e9:
7b:ae:90:e4:e0:31:07:4e:00:17:6d:6a:a8:90:92:
85:b6:e5:f0:b7:db:b7:26:43:6d:9d:27:d5:f8:7c:
fb:7d:f4:6e:0b:01:3d:47:33:7d:4c:07:89:30:b7:
e8:56:04:ab:73:a9:ef:18:97:c6:3b:45:d8:f1:9f:
16:cb:27:ca:44:b1:7b:9d:19:f7:85:d2:56:9e:f2:
7c:a7:03:f5:89:6a:d8:ec:8c:e4:dd:73:57:13:50:
1f:96:18:4e:be:46:9d:0c:fc:1c:0d:a5:66:7a:f5:
43:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EB:4C:53:52:39:2D:AB:4F:69:F1:1F:46:B6:DE:84:53:6D:8B:64
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:35:f4:7e:37:20:f3:6e:80:a2:03:ec:fd:4c:db:83:52:8a:
2e:cc:72:20:d9:d3:a6:f3:85:84:8a:7e:39:6d:cf:af:ca:60:
a3:d1:48:1a:ff:eb:86:85:a0:46:91:53:34:f2:38:cd:a4:d0:
e2:bd:39:e4:40:a9:c4:c2:ad:d8:cc:06:34:36:6f:85:84:ec:
29:a9:30:e1:fc:fa:1c:4f:bd:19:51:85:4f:5a:c2:28:06:4d:
3f:35:e7:7e:0d:c7:0f:d6:8d:eb:47:d0:c3:7d:11:f1:d8:f2:
d4:16:32:fa:0b:1b:32:65:c1:05:8f:47:ce:ff:d1:2a:6d:1a:
e4:30:fc:99:d3:ff:d0:14:f1:7f:bc:b1:f5:a4:8c:5c:5e:53:
61:38:45:6b:59:24:f7:bd:64:af:fd:ce:fb:91:a4:e8:74:d4:
75:d2:91:46:8f:3f:e2:1c:c1:d3:49:16:92:9a:a2:18:d5:fe:
1f:91:91:80:00:32:eb:9a:90:33:22:22:a5:ee:90:e7:c7:dc:
8c:16:da:19:8d:f9:50:45:27:00:ac:1c:ab:40:15:d1:0c:6d:
f4:32:c1:92:0c:fa:41:9e:d1:28:f3:d4:ca:23:61:17:83:24:
fd:98:f1:c5:1b:26:fe:1e:bc:09:73:70:d5:5a:f7:c1:3b:2f:
fe:38:34:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:35:02 2026 by rpki-client