Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: GK7EK45vUemxqmQ+DwEjq9PofZZ1jzF317rOkcQGxyU=
Subject key identifier: 94:98:4C:8C:89:99:71:81:4A:22:45:5F:3D:07:D3:58:11:47:17:51
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 019FAAF5A50573A758B9F7DD3AE1B8483214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 23:00:52 +0000
Manifest this update: Tue 28 Jul 2026 23:00:52 +0000
Manifest next update: Wed 29 Jul 2026 23:00:52 +0000
Files and hashes: 1: HvZskpw_21d-SsBdoI8uL-bUlg4.roa (hash: KmGPloyU4A9Te8//GhzETG1AxiKoerTgtl8Qk1jFdRg=)
2: cJd8S-uaABuXAFfWeDiL3NUesCo.roa (hash: 0fC3HtMmFazUCnfsakHQvupcYRxYZ5KP3wkprur/geI=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: VFZsGsOpEPgUxP+7olGOkH8It9e55bKbT6UXD0EkNyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:a5:05:73:a7:58:b9:f7:dd:3a:e1:b8:48:32:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Jul 28 23:00:52 2026 GMT
Not After : Jul 29 23:00:52 2026 GMT
Subject: CN=94984c8c899971814a22455f3d07d35811471751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:bb:ee:6c:50:3a:11:27:b4:b5:f7:43:bf:
19:e5:c5:cd:85:99:dd:4e:d6:d1:c9:96:b8:da:a9:
55:f3:dc:15:83:22:15:1c:33:95:ba:56:6c:0d:a0:
87:50:d6:11:85:fb:91:04:bb:22:9c:ad:92:64:a6:
88:67:cb:a2:d5:5e:59:5e:a2:b0:f9:a4:d6:72:99:
51:f0:ec:79:72:c9:fe:ce:5f:1f:f7:32:34:f2:e7:
d5:91:69:50:c6:34:a6:70:3d:b8:62:56:b3:16:8f:
5c:55:ac:de:da:d0:19:b1:e1:cb:51:2b:f1:1b:b3:
c5:02:d5:2c:cf:63:14:3a:ac:16:2b:f2:54:be:ab:
50:19:56:37:97:9b:cd:81:7b:5a:4e:4e:d2:64:9a:
40:a9:59:84:70:67:98:4b:29:29:1f:5a:06:1f:73:
05:0b:3f:de:fb:15:5a:65:26:c3:d5:10:2d:c9:a1:
0e:ca:a5:3a:cc:e4:25:bb:93:c7:06:48:93:9f:cd:
75:04:17:96:de:5a:af:51:20:f6:37:8c:aa:a3:ca:
73:5e:d3:51:72:66:48:77:f4:7e:42:d5:a0:6b:f8:
5a:37:b1:e9:75:69:98:1a:e0:4f:3a:11:d4:43:3d:
e0:d1:09:3d:32:b6:92:71:ee:50:dc:cd:56:bb:37:
d5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:98:4C:8C:89:99:71:81:4A:22:45:5F:3D:07:D3:58:11:47:17:51
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1b:2f:a4:da:0c:27:bf:5e:86:00:91:94:ed:b6:39:33:cf:
01:d7:e2:51:49:b2:ff:08:3b:9b:ad:b3:56:68:65:68:13:62:
c1:fb:68:f6:83:0f:9b:8a:4f:ff:e0:5d:cd:af:4e:4f:2b:a9:
a2:48:a2:d3:2e:46:63:d6:87:01:01:53:f1:06:c4:f0:bd:6f:
bb:b7:b1:25:59:aa:8e:84:2c:64:5c:6a:08:b6:37:12:3d:b0:
d4:5b:dd:ed:2e:bf:35:77:33:35:83:1d:8f:83:da:d7:ad:b5:
f9:d2:11:5f:91:35:7d:c4:d0:97:61:9d:d0:6b:6a:15:96:e5:
3c:90:33:93:36:82:78:27:35:72:ec:66:77:ef:a8:88:cf:7b:
72:ff:63:22:6b:27:f6:39:76:a8:da:92:ec:b1:04:d8:fb:d8:
cd:47:56:a8:9a:e9:1d:17:c9:5e:d0:1e:fa:b2:b1:a7:5a:74:
ce:4b:7e:f7:fc:92:cc:d2:15:82:d8:97:04:eb:54:f2:09:50:
e0:f8:25:1b:58:58:7c:4b:97:29:03:bd:ac:11:a1:4c:1e:ff:
42:a4:28:2f:4f:37:5a:90:9a:7d:f1:e0:26:ea:70:1d:f9:28:
f3:af:fd:8e:a9:f0:ee:9e:9b:65:58:e8:71:03:0f:9d:89:8e:
ea:70:d6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:12:30 2026 by rpki-client