Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File: pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier: 3u5Y+vvkQd2otKAUJGrFCKqMrfpz3b6b1NiNa5Xk+t4=
Subject key identifier: 44:BD:62:F4:F4:10:D0:27:46:13:9D:E9:73:CF:84:E0:A0:05:50:6E
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 019FACACFBA8C77867E5146C7E2EE4F69B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number: 0DC6
Signing time: Wed 29 Jul 2026 07:00:45 +0000
Manifest this update: Wed 29 Jul 2026 07:00:45 +0000
Manifest next update: Thu 30 Jul 2026 07:00:45 +0000
Files and hashes: 1: RZZbXwpHPue2NW4m459EoqMZKyE.roa (hash: v17nBO3LbcF/rH9ckA2KnZ23x5seOdWkK+ByqrSeon0=)
2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: BQyvBmxXr5jRt4pG3C6b95rMVyMmMscIUlEgxIngmeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:fb:a8:c7:78:67:e5:14:6c:7e:2e:e4:f6:9b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Jul 29 07:00:45 2026 GMT
Not After : Jul 30 07:00:45 2026 GMT
Subject: CN=44bd62f4f410d02746139de973cf84e0a005506e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:c3:63:55:ba:63:f2:86:7b:02:72:42:58:
d3:4d:7f:57:ae:55:33:81:f5:2a:0a:5d:cb:dd:c1:
d0:b5:09:ce:5d:a1:a0:6b:22:b3:43:4f:4f:0f:ad:
31:de:6c:d7:49:0a:1b:3b:87:d1:8a:64:82:3f:25:
7f:6d:f4:92:94:3b:0f:a6:0f:6f:6f:9b:34:e3:4d:
ee:07:fb:2f:10:4d:74:cc:b5:bf:7d:d5:87:07:44:
ee:85:e0:c4:81:89:fc:51:f8:38:61:b6:e7:6f:55:
f4:f2:43:e2:66:f7:4c:c8:c4:50:46:6d:76:ee:98:
be:8a:7b:9d:e1:2c:01:8d:86:73:50:1e:f1:f1:40:
61:6f:d7:7b:a1:21:1b:0f:5d:09:5b:52:8e:30:1b:
e0:db:e9:86:70:be:11:38:2b:5a:9d:d7:9a:f4:d3:
a0:b3:da:ce:ee:b0:bd:0a:0e:10:6d:66:ea:f7:02:
41:f4:35:e7:2a:88:de:aa:64:5f:e1:18:97:12:ab:
2c:96:82:14:77:6c:3e:6c:39:cc:1d:8d:88:89:b2:
80:37:57:7e:77:2e:47:33:cb:2e:ec:d5:d5:c7:80:
41:8f:84:ae:9b:0a:9e:93:9f:54:16:03:0e:1a:04:
50:8c:fd:a8:67:02:7b:a2:28:30:f9:97:00:91:53:
ef:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BD:62:F4:F4:10:D0:27:46:13:9D:E9:73:CF:84:E0:A0:05:50:6E
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e7:fa:62:fe:13:10:69:05:5c:74:bb:63:8c:e8:56:84:0f:
e3:f9:e3:cf:06:ab:0e:6a:24:bc:38:ea:cb:d4:d9:f5:08:04:
2b:cd:ca:3e:8e:cb:28:b1:44:3a:29:b0:a1:d7:36:21:67:42:
c2:be:6d:a7:1b:c0:46:57:dd:e2:47:ad:51:0d:87:f5:fc:76:
3d:f7:59:82:3a:04:9a:c5:1e:6e:fa:d5:da:d3:4a:ad:9c:da:
12:78:74:68:a6:a4:3b:3e:1d:63:fb:cc:f3:23:1c:74:28:70:
c0:71:39:69:cc:e9:1a:d9:75:d1:8e:b8:70:f5:c4:c5:c1:d9:
4c:bf:3b:bb:f8:f6:cc:f9:6e:52:d1:35:96:41:a0:76:a1:1b:
84:72:ae:46:62:83:37:e5:48:42:6e:35:80:dd:2f:39:d5:0d:
fa:c4:91:cb:4a:f0:66:22:16:85:45:3e:ed:ff:d5:5d:78:34:
75:30:a6:9a:a4:99:0d:2d:6c:50:59:77:35:5a:f6:cf:87:26:
96:94:39:4c:9e:88:81:e5:c8:bb:89:13:b7:25:bf:81:bb:ce:
ac:b6:ed:f3:74:7e:97:bf:a0:0e:ff:55:8f:36:63:eb:59:fd:
d8:45:39:d1:29:e4:46:4c:d8:1a:48:2f:34:3f:b3:d2:81:5a:
24:75:56:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:14:56 2026 by rpki-client