Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File: pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier: JUqGCL3a1I+m6grwvSqP8lOdfHTqE8kpJpWJSWBi5RY=
Subject key identifier: FF:B9:E9:68:D7:45:33:7C:A7:23:71:48:85:E3:E3:3B:85:8C:B9:69
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 019D9999000923552AF0B053454FC638A560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number: 0CB3
Signing time: Fri 17 Apr 2026 04:00:34 +0000
Manifest this update: Fri 17 Apr 2026 04:00:34 +0000
Manifest next update: Sat 18 Apr 2026 04:00:34 +0000
Files and hashes: 1: RZZbXwpHPue2NW4m459EoqMZKyE.roa (hash: v17nBO3LbcF/rH9ckA2KnZ23x5seOdWkK+ByqrSeon0=)
2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: se2CShv8pbtGa2W+vKLZp7bOBtxfyWNafj1y4YgQAgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:00:09:23:55:2a:f0:b0:53:45:4f:c6:38:a5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Apr 17 04:00:34 2026 GMT
Not After : Apr 18 04:00:34 2026 GMT
Subject: CN=ffb9e968d745337ca723714885e3e33b858cb969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:99:3d:0f:5a:6f:aa:39:85:bd:1e:b2:3d:
02:fe:07:75:ad:0b:a1:01:40:83:18:58:41:42:69:
9e:78:6f:0e:d3:33:c6:01:65:30:b1:20:23:98:de:
26:d1:a2:9d:51:9c:e1:59:26:a3:65:d2:b6:4a:f3:
21:b2:10:f8:d3:dd:91:db:ba:0b:76:81:c2:2f:f8:
e7:c2:31:8a:42:69:d9:03:f5:4f:19:93:ff:0e:35:
9b:e3:37:02:35:25:e4:37:0c:fa:10:72:74:e4:64:
58:9f:c8:3a:c5:77:a2:28:1f:2a:c0:1d:fa:99:ba:
3f:ee:ed:a5:9c:71:ab:28:a6:6a:8b:a3:7a:8a:59:
a7:1e:bf:27:30:cf:af:a4:79:be:58:5d:d0:c2:3e:
06:41:32:b0:2b:84:84:fd:9c:78:12:f5:69:6d:7d:
a1:0d:64:a5:0a:fb:df:fe:12:2f:8f:64:86:62:9c:
8f:a3:ac:6b:d8:e5:1c:10:a6:44:04:df:51:b2:99:
f2:eb:39:75:9d:f1:01:93:97:28:4a:96:0a:6d:94:
d6:e0:8d:61:2f:74:4d:57:2e:9d:f7:af:09:92:9f:
60:a0:1c:ac:08:51:ff:be:50:7d:ed:d7:b6:1c:3a:
f2:2e:42:01:ea:e0:2f:50:94:84:a6:09:db:94:e1:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B9:E9:68:D7:45:33:7C:A7:23:71:48:85:E3:E3:3B:85:8C:B9:69
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fa:8f:03:a6:b4:91:26:c9:96:9a:8b:82:cd:f6:bb:f8:52:
e7:13:85:39:e7:e3:16:1b:48:ac:43:ab:f9:bc:e4:af:10:11:
75:6e:6e:01:ca:bf:98:49:ab:3f:30:98:4f:76:dd:9b:99:bc:
3b:5d:e7:70:9d:8e:19:6d:0b:b6:d8:71:37:d7:2f:90:46:35:
f2:1f:91:ec:dc:c9:1a:c0:e4:c2:1a:54:11:58:9f:1b:ca:ff:
b7:9d:bc:03:76:43:c9:c3:ff:64:f7:b0:92:4f:75:6b:be:0c:
bc:d0:19:a0:ec:3c:e7:d1:f9:58:14:8d:8e:9c:ad:ee:d2:56:
b6:be:8b:9b:3d:e4:92:f2:c0:a5:44:56:51:24:62:41:da:e8:
59:25:e0:ce:f3:89:8c:40:a1:b0:35:c5:43:54:6d:1a:4c:3c:
e3:72:ce:7a:14:d7:1a:6a:6f:37:14:e4:0f:b4:e6:7c:a5:60:
bc:a6:8f:e8:43:27:e2:66:ed:02:8a:f1:20:a8:87:67:0c:31:
36:24:cc:b8:6a:97:0f:79:b6:17:df:28:8d:c0:52:a8:7d:7e:
28:2c:06:3d:5c:46:2a:96:7b:70:70:2f:ce:6a:aa:36:17:79:
e5:8c:50:3f:a6:48:4c:ed:8f:27:41:8d:f8:60:36:99:2a:3c:
f5:44:03:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:49:58 2026 by rpki-client