Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0b3cc1-318e-497f-a2b5-1316ad805e64/1/pol1o9gy4UUny7or4QujwebGOFY.mft
File: pol1o9gy4UUny7or4QujwebGOFY.mft (raw, json)
Hash identifier: xMiCqlxrukCVlC/sJGV0Y9SKbEgWvRcf5w6gASQbDUQ=
Subject key identifier: E8:AC:79:F9:D3:25:B9:C4:C2:DD:41:54:74:BD:22:B3:47:96:3D:EE
Authority key identifier: A6:89:75:A3:D8:32:E1:45:27:CB:BA:2B:E1:0B:A3:C1:E6:C6:38:56
Certificate issuer: /CN=a68975a3d832e14527cbba2be10ba3c1e6c63856
Certificate serial: 019D98F4844E66A5D762D59ADD3D64EE714A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pol1o9gy4UUny7or4QujwebGOFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0b3cc1-318e-497f-a2b5-1316ad805e64/1/pol1o9gy4UUny7or4QujwebGOFY.mft
Manifest number: 0895
Signing time: Fri 17 Apr 2026 01:00:54 +0000
Manifest this update: Fri 17 Apr 2026 01:00:54 +0000
Manifest next update: Sat 18 Apr 2026 01:00:54 +0000
Files and hashes: 1: pol1o9gy4UUny7or4QujwebGOFY.crl (hash: /0DGEQDDX8u8J18jptTd3hx2VJQ3ucDEOZfP6KTv7zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0b3cc1-318e-497f-a2b5-1316ad805e64/1/pol1o9gy4UUny7or4QujwebGOFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0b3cc1-318e-497f-a2b5-1316ad805e64/1/pol1o9gy4UUny7or4QujwebGOFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pol1o9gy4UUny7or4QujwebGOFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:84:4e:66:a5:d7:62:d5:9a:dd:3d:64:ee:71:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68975a3d832e14527cbba2be10ba3c1e6c63856
Validity
Not Before: Apr 17 01:00:54 2026 GMT
Not After : Apr 18 01:00:54 2026 GMT
Subject: CN=e8ac79f9d325b9c4c2dd415474bd22b347963dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:93:31:64:05:f4:64:17:f6:71:8b:8f:dc:64:
fb:bc:de:ce:4e:43:d9:84:b2:c1:5e:68:8b:f4:9a:
3a:c3:a9:64:5d:cf:bf:6a:96:8b:f8:ab:57:38:4e:
73:63:58:f0:e3:87:f4:3d:23:9c:73:79:cd:d6:c9:
9e:ea:f5:91:58:95:22:3f:22:aa:f4:a9:b7:c6:52:
e0:7c:e7:83:5d:07:b8:5b:f3:2d:48:cf:b4:9e:5c:
5f:07:97:79:0f:13:c0:f1:ca:a2:04:df:1b:02:db:
32:87:46:ce:53:ca:cc:12:0b:90:bb:2a:e8:62:99:
8e:59:f4:70:f2:73:ca:89:82:b4:11:fd:92:f9:bc:
6b:18:2d:ba:e9:cc:5e:cf:05:c8:55:71:f9:61:b8:
90:af:b9:ee:15:cc:ec:ec:f9:3c:4d:ca:4e:2d:65:
2a:8b:fa:b6:e2:b4:a8:d4:dd:58:90:27:d7:67:b1:
f0:80:f4:14:85:f5:e7:cd:4e:41:c7:b1:f1:37:95:
2c:c4:58:5e:d7:62:b3:1c:e5:65:bf:7c:1e:01:c3:
14:e1:ea:ce:cd:8b:69:5a:82:ae:d2:80:57:3f:b0:
b1:5f:55:fe:70:99:bd:4a:e0:04:ea:27:e6:76:6e:
b2:6b:1c:bb:85:f0:40:de:80:ad:62:28:d6:b2:5d:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AC:79:F9:D3:25:B9:C4:C2:DD:41:54:74:BD:22:B3:47:96:3D:EE
X509v3 Authority Key Identifier:
keyid:A6:89:75:A3:D8:32:E1:45:27:CB:BA:2B:E1:0B:A3:C1:E6:C6:38:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pol1o9gy4UUny7or4QujwebGOFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0b3cc1-318e-497f-a2b5-1316ad805e64/1/pol1o9gy4UUny7or4QujwebGOFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0b3cc1-318e-497f-a2b5-1316ad805e64/1/pol1o9gy4UUny7or4QujwebGOFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ba:c9:5b:70:89:29:a2:d3:09:5d:90:52:bd:99:4f:ac:d3:
ca:a1:24:ac:fa:bb:99:a2:4d:8d:3c:ae:19:59:7a:35:dd:47:
4e:4b:d1:eb:8c:aa:cd:5d:eb:07:08:1c:cb:3d:0c:63:fc:59:
97:74:4d:4d:2d:80:4f:a4:2e:fc:ed:72:12:c6:cb:eb:9e:a9:
4a:c5:05:9e:db:96:d9:b0:55:60:23:5c:27:91:4f:8d:67:0f:
b8:4d:4d:e1:73:65:fe:67:a6:d9:dd:5c:9e:2a:1b:39:0c:ff:
1e:36:16:64:38:dd:2c:a0:b5:a3:37:cc:d3:32:23:f1:7a:46:
aa:8c:d9:b2:a3:f3:98:71:9c:e8:91:0e:24:4f:7a:a3:f6:59:
10:b6:31:d8:7a:2a:c0:85:2b:9c:6e:5c:a2:99:13:5a:41:4a:
77:25:a0:e4:f4:13:73:03:92:ab:53:a3:ef:57:e5:48:de:83:
12:6c:15:bc:52:3d:0b:bb:fe:4a:66:97:20:f0:f4:d7:7b:f0:
ac:ed:bc:7c:b6:6b:cc:38:99:9f:e4:8e:24:61:3f:68:44:c3:
b4:44:cd:89:fd:93:c0:1d:61:ba:58:f5:21:15:28:9f:06:63:
37:fa:c4:d4:03:c1:0a:f9:fa:d6:a3:17:2f:41:cf:d7:59:63:
d2:a4:02:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:45 2026 by rpki-client