Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File: pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier: Zc3PFEJ3IqTHH7UlIKfl5PtmD1GW7n9lo5Gk8M1WtJw=
Subject key identifier: 11:B7:F0:9E:ED:10:81:7B:DD:E2:70:D8:DD:32:9E:23:19:90:2F:1A
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 01A134B58FB40A053F61B109182F09135A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number: 0E91
Signing time: Tue 13 Oct 2026 10:01:16 +0000
Manifest this update: Tue 13 Oct 2026 10:01:16 +0000
Manifest next update: Wed 14 Oct 2026 10:01:16 +0000
Files and hashes: 1: RZZbXwpHPue2NW4m459EoqMZKyE.roa (hash: v17nBO3LbcF/rH9ckA2KnZ23x5seOdWkK+ByqrSeon0=)
2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: ieq43tUAL98yEPBPGoo0DhLrYx22ps89xQjuj769cQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:b5:8f:b4:0a:05:3f:61:b1:09:18:2f:09:13:5a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Oct 13 10:01:16 2026 GMT
Not After : Oct 14 10:01:16 2026 GMT
Subject: CN=11b7f09eed10817bdde270d8dd329e2319902f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:19:a0:5c:b1:03:f3:aa:dc:8e:9e:4a:03:f1:
4f:92:ac:bc:95:9b:55:5f:cd:b1:58:6a:5e:79:ff:
b7:9f:7e:79:3c:58:cb:d2:d8:1d:1f:3b:d7:6c:fc:
43:bf:83:72:8d:34:8e:33:0d:ae:df:42:b8:d8:c4:
40:9b:ee:9d:f1:99:28:85:63:42:f6:e3:6d:e7:b8:
9e:87:90:bb:db:11:4d:86:b1:e9:f0:e4:ca:67:f0:
14:2a:ab:9f:58:90:55:d4:c9:a2:2a:6b:ba:46:25:
8e:8f:71:b5:1a:c8:b2:18:fb:33:3f:74:78:e2:f2:
07:51:dd:7c:37:c9:45:e3:4c:70:c8:3e:aa:19:10:
1e:2a:91:ba:a6:be:6e:9d:45:81:86:3d:97:84:98:
33:54:0f:3e:34:3d:fb:e1:d6:cc:78:49:4c:99:fd:
cb:82:14:3c:78:a5:9f:26:6a:37:c5:95:58:c8:51:
a1:48:9a:5b:d1:54:44:95:c8:56:e4:01:e6:d3:e9:
15:d1:5f:b3:44:d4:f9:8e:aa:f8:90:ab:ac:0b:68:
69:33:4c:2f:19:20:b2:da:1c:6a:9c:e7:d0:92:ee:
15:62:65:09:7d:42:06:79:04:af:69:e6:d6:30:1a:
29:a7:79:bf:26:cb:fb:56:9f:25:f8:0f:3e:7c:12:
4b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B7:F0:9E:ED:10:81:7B:DD:E2:70:D8:DD:32:9E:23:19:90:2F:1A
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:30:fd:b8:10:8f:52:13:13:27:2c:5f:5c:43:d5:e4:87:7f:
2e:d7:2f:78:e7:33:89:c6:aa:ca:cf:1d:ce:3f:6a:74:8e:85:
75:24:89:93:fd:d1:32:44:9c:8e:b6:03:6d:14:a9:54:43:fd:
f4:e0:71:ca:f4:dd:5e:bb:c9:3a:51:68:5e:48:d6:b2:58:ee:
69:80:74:a4:01:24:10:a7:99:bd:68:98:4b:5e:8f:f8:32:6b:
05:80:d5:ab:a8:30:11:a5:62:2f:43:21:4e:6b:e1:f8:75:07:
d4:04:10:77:48:09:2c:08:c5:bf:6a:b1:08:cc:c0:b7:cc:c2:
29:45:af:4e:db:76:68:5d:18:ad:52:7e:b1:8f:c9:46:14:ff:
7e:18:34:37:49:4b:7d:e6:d0:25:5e:25:c8:df:26:33:c5:cc:
ba:a8:90:3e:2f:5e:f1:10:3f:fc:48:37:20:96:bb:1c:38:4c:
d8:ad:c8:19:3e:f8:40:9c:38:60:a2:95:66:30:9e:fc:97:ed:
99:3c:85:12:17:76:a3:f3:65:52:80:37:48:cd:d5:53:39:24:
34:22:34:5f:1a:df:1d:59:92:d3:af:dc:05:b3:c3:4f:35:72:
9b:4c:90:21:75:bf:1d:39:e5:fe:41:e6:2e:e7:ae:8c:4a:00:
b0:5a:a9:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE0tY+0CgU/YbEJGC8JE1o0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZWI5ZWI1NTQ3YzdmNWYxYWFmYzBhZGExNDA4MDU0MTk2
MTg3MjYwHhcNMjYxMDEzMTAwMTE2WhcNMjYxMDE0MTAwMTE2WjAzMTEwLwYDVQQD
EygxMWI3ZjA5ZWVkMTA4MTdiZGRlMjcwZDhkZDMyOWUyMzE5OTAyZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRmgXLED86rcjp5KA/FPkqy8lZtV
X82xWGpeef+3n355PFjL0tgdHzvXbPxDv4NyjTSOMw2u30K42MRAm+6d8ZkohWNC
9uNt57ieh5C72xFNhrHp8OTKZ/AUKqufWJBV1MmiKmu6RiWOj3G1GsiyGPszP3R4
4vIHUd18N8lF40xwyD6qGRAeKpG6pr5unUWBhj2XhJgzVA8+ND374dbMeElMmf3L
ghQ8eKWfJmo3xZVYyFGhSJpb0VRElchW5AHm0+kV0V+zRNT5jqr4kKusC2hpM0wv
GSCy2hxqnOfQku4VYmUJfUIGeQSvaebWMBopp3m/Jsv7Vp8l+A8+fBJLHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBG38J7tEIF73eJw2N0yniMZkC8aMB8GA1UdIwQY
MBaAFKTrnrVUfH9fGq/AraFAgFQZYYcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE91ZXRWUjhmMThhcjhDdG9VQ0FWQmxoaHlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80Y2Q3MmQtZDhhNS00NmNlLTg2NzQt
MGQyMjIzMmMzNGEwLzEvcE91ZXRWUjhmMThhcjhDdG9VQ0FWQmxoaHlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80Y2Q3MmQtZDhhNS00NmNlLTg2NzQtMGQyMjIzMmMzNGEw
LzEvcE91ZXRWUjhmMThhcjhDdG9VQ0FWQmxoaHlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADD9uBCP
UhMTJyxfXEPV5Id/LtcveOczicaqys8dzj9qdI6FdSSJk/3RMkScjrYDbRSpVEP9
9OBxyvTdXrvJOlFoXkjWsljuaYB0pAEkEKeZvWiYS16P+DJrBYDVq6gwEaViL0Mh
Tmvh+HUH1AQQd0gJLAjFv2qxCMzAt8zCKUWvTtt2aF0YrVJ+sY/JRhT/fhg0N0lL
febQJV4lyN8mM8XMuqiQPi9e8RA//Eg3IJa7HDhM2K3IGT74QJw4YKKVZjCe/Jft
mTyFEhd2o/NlUoA3SM3VUzkkNCI0XxrfHVmS06/cBbPDTzVym0yQIXW/HTnl/kHm
LueujEoAsFqpLQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:29:25 2026 by rpki-client