Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: xA+4ZypptO85bT+IDxpbAizapM5IrQkYfVqTbef6gUs=
Subject key identifier: 07:DC:E7:6C:8A:F5:35:14:4D:B6:3A:57:4A:62:CD:68:81:1B:1F:76
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 019EBF5A2809E38CD30F7CBE09C0B9A93064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 05:00:17 +0000
Manifest this update: Sat 13 Jun 2026 05:00:17 +0000
Manifest next update: Sun 14 Jun 2026 05:00:17 +0000
Files and hashes: 1: HvZskpw_21d-SsBdoI8uL-bUlg4.roa (hash: KmGPloyU4A9Te8//GhzETG1AxiKoerTgtl8Qk1jFdRg=)
2: cJd8S-uaABuXAFfWeDiL3NUesCo.roa (hash: 0fC3HtMmFazUCnfsakHQvupcYRxYZ5KP3wkprur/geI=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: xY9Ezu6AviYhZkTohUUune0ajhgCXQuJ1pD+5LScPKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:28:09:e3:8c:d3:0f:7c:be:09:c0:b9:a9:30:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Jun 13 05:00:17 2026 GMT
Not After : Jun 14 05:00:17 2026 GMT
Subject: CN=07dce76c8af535144db63a574a62cd68811b1f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:1d:f4:0c:54:70:c2:36:11:a9:7f:73:0b:
ef:0c:15:e2:1d:89:18:89:71:82:a3:18:1f:81:88:
2c:3c:17:6b:cb:06:d4:9b:86:b8:17:3a:cc:b0:7d:
30:78:76:3c:bb:99:83:1a:ed:05:db:14:65:e2:d7:
e2:05:47:42:d0:2a:4b:a6:48:91:31:e6:8b:82:06:
f3:6f:30:46:8a:ee:bc:73:02:e2:67:a2:ca:f8:22:
01:32:ed:6b:11:9b:35:3c:d0:83:23:3e:cb:02:b9:
65:f1:8e:c1:ed:01:d6:27:af:0e:3b:a8:93:e2:e0:
48:bf:8f:6f:9b:45:57:d6:76:e5:89:f5:08:65:b6:
fa:11:9e:ef:0c:13:ba:b0:6b:8e:3e:0b:0f:f3:3e:
89:f1:be:69:2c:e9:9b:87:42:a5:db:f4:90:53:33:
e3:ed:01:4d:8e:18:88:65:8e:89:76:36:b9:2b:67:
c2:1a:34:4f:19:f9:f6:36:f2:bc:6b:3f:a3:1e:77:
e3:64:56:50:72:98:bd:b6:ba:59:93:40:17:70:ea:
8d:0b:28:b5:6f:ee:0a:e4:ff:3c:f8:15:a0:94:74:
e9:4a:5a:92:5c:b7:39:71:1e:73:c6:63:5e:60:2c:
d9:f6:2e:99:12:0a:12:3f:bc:fc:7c:12:ce:b6:0b:
45:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DC:E7:6C:8A:F5:35:14:4D:B6:3A:57:4A:62:CD:68:81:1B:1F:76
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fd:3b:fc:29:52:a5:c6:84:53:cf:9e:8f:2b:56:1e:05:43:
f7:ff:4f:69:4a:59:e0:fa:95:83:62:06:a6:a2:69:9e:16:96:
eb:0d:f7:29:a2:6d:c2:1b:9a:83:3e:0f:da:f2:ac:63:99:bc:
6d:de:73:e5:61:82:ea:8b:b5:3e:b8:e1:60:da:ee:8a:64:e2:
40:60:0c:9d:f2:a9:72:61:ed:3b:65:f6:1d:b3:e1:9c:0d:b9:
6d:5e:69:bd:53:ba:2d:ac:fc:6c:fb:86:94:b8:49:97:96:a5:
60:8a:d2:44:79:96:96:89:05:04:77:44:6b:e8:58:3c:27:fe:
74:e1:b1:73:26:c4:37:20:e7:a2:a2:2e:e7:84:84:28:02:0c:
2d:0c:13:bb:fa:d6:cc:9a:8e:fe:c0:f7:42:45:a3:2f:51:9d:
d0:e0:e0:f0:7c:7b:bd:6c:3e:df:b7:95:5d:70:41:ba:57:65:
35:ae:6a:e2:ba:09:dc:ff:3a:0c:e7:15:b6:de:e9:61:30:e6:
40:cd:67:cf:12:6e:c7:4d:42:2c:59:8e:19:d8:3a:bc:20:75:
0b:18:b5:73:de:0c:4f:fb:07:29:25:06:98:43:86:6e:19:70:
7e:24:bd:46:1c:21:9d:72:3b:67:ca:3c:f3:b2:b6:21:4a:9d:
ba:eb:5c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:36:32 2026 by rpki-client