Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File: pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier: /1CzwVsAtQ1SpYjvEBplyxdTEAb4XykbCb/BTi8rxYQ=
Subject key identifier: 2C:7C:5C:75:9D:D3:90:C3:51:EE:C3:24:98:CC:A1:1F:A4:52:09:A9
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 019EC30007CB1D0E28361DF7B50622D31F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number: 0D4D
Signing time: Sat 13 Jun 2026 22:00:19 +0000
Manifest this update: Sat 13 Jun 2026 22:00:19 +0000
Manifest next update: Sun 14 Jun 2026 22:00:19 +0000
Files and hashes: 1: RZZbXwpHPue2NW4m459EoqMZKyE.roa (hash: v17nBO3LbcF/rH9ckA2KnZ23x5seOdWkK+ByqrSeon0=)
2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: kY+tsI+pSfVgeLDvC2qBfTconZ5lPrWcKNZfMRkGRbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:07:cb:1d:0e:28:36:1d:f7:b5:06:22:d3:1f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Jun 13 22:00:19 2026 GMT
Not After : Jun 14 22:00:19 2026 GMT
Subject: CN=2c7c5c759dd390c351eec32498cca11fa45209a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:06:c1:92:d8:1f:1a:bd:9e:e7:5f:ed:fa:28:
21:2d:2e:14:8d:89:1e:b7:83:3a:2e:7e:f0:7c:50:
63:eb:54:28:58:eb:74:4a:a7:53:7b:6e:1a:cc:a0:
e8:cc:9f:35:c3:a8:e4:fc:0b:f7:eb:5b:98:d1:83:
e6:f2:54:7a:91:1d:4c:c9:ee:8e:98:79:dd:31:14:
cc:92:c9:ef:ca:d0:af:bf:51:28:97:7d:38:23:4c:
12:b9:06:c8:75:95:d5:94:8b:95:e9:c7:3f:63:f0:
21:43:dd:2d:77:9e:b3:74:d0:3a:26:7d:25:7f:48:
5f:73:35:d6:cd:85:aa:bf:0d:2e:e4:20:9e:5a:20:
3d:da:c2:3d:21:87:ca:72:f7:91:3c:7b:c3:a7:f2:
80:79:d8:6c:b2:78:18:20:06:72:31:f0:ed:fb:10:
ae:8b:b3:ad:81:6d:42:9d:ca:24:8d:06:88:31:ac:
d8:30:5e:5b:7a:c8:dc:39:76:8e:bd:6f:9e:3c:85:
22:86:48:d3:74:83:41:8c:4a:c7:4f:47:a1:15:4b:
28:42:c3:7d:12:d0:e3:5e:29:1c:b6:7e:82:a2:56:
8b:05:e7:54:e1:cb:49:fa:0b:fb:9a:88:d8:ad:dc:
7a:af:b5:71:6d:23:50:db:e7:82:39:c5:d9:a8:8f:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7C:5C:75:9D:D3:90:C3:51:EE:C3:24:98:CC:A1:1F:A4:52:09:A9
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8e:3a:62:0c:cd:03:88:85:01:14:5f:23:6b:50:f5:65:02:
ba:b4:92:da:19:a8:b5:18:44:bb:2a:bf:0d:77:e3:2a:d2:aa:
f9:a8:a4:ae:37:51:07:e1:c4:ba:bf:7a:d7:d0:e3:20:3f:6c:
41:44:60:38:ee:d1:dc:8c:2c:a6:c4:31:fb:25:1e:86:98:96:
ac:29:23:c3:a4:b9:6b:12:72:2d:a5:fc:87:bb:0a:e5:9b:96:
08:f9:02:8a:87:fe:43:9b:e8:7b:0d:66:24:56:ce:03:3a:f5:
05:68:a6:b6:a2:ef:fc:79:ce:34:09:50:bd:a4:b6:b1:09:5b:
83:1f:59:4d:0b:33:d5:72:b3:31:70:6a:35:ca:cd:0b:3a:9b:
f4:0a:eb:7c:20:a3:81:dc:91:11:ad:86:2d:9b:3b:27:fc:1a:
77:b1:4b:3c:6f:64:c0:a6:f6:6c:85:db:bf:7a:eb:6e:44:f4:
41:7a:c9:e4:d1:41:2b:6d:3c:41:0b:9f:87:e5:d8:b2:0a:1f:
83:74:7b:51:2c:a1:e6:90:04:89:dc:b6:d1:66:31:7d:dd:e0:
df:c4:f5:58:dc:d6:33:ac:86:79:b7:79:4c:df:1c:53:00:d9:
25:89:ce:6f:5a:02:85:b6:c8:ef:3d:2a:62:ce:f5:5f:a3:2a:
53:6f:49:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DAAfLHQ4oNh33tQYi0x+fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZWI5ZWI1NTQ3YzdmNWYxYWFmYzBhZGExNDA4MDU0MTk2
MTg3MjYwHhcNMjYwNjEzMjIwMDE5WhcNMjYwNjE0MjIwMDE5WjAzMTEwLwYDVQQD
EygyYzdjNWM3NTlkZDM5MGMzNTFlZWMzMjQ5OGNjYTExZmE0NTIwOWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AbBktgfGr2e51/t+ighLS4UjYke
t4M6Ln7wfFBj61QoWOt0SqdTe24azKDozJ81w6jk/Av361uY0YPm8lR6kR1Mye6O
mHndMRTMksnvytCvv1Eol304I0wSuQbIdZXVlIuV6cc/Y/AhQ90td56zdNA6Jn0l
f0hfczXWzYWqvw0u5CCeWiA92sI9IYfKcveRPHvDp/KAedhssngYIAZyMfDt+xCu
i7OtgW1CncokjQaIMazYMF5besjcOXaOvW+ePIUihkjTdINBjErHT0ehFUsoQsN9
EtDjXikctn6ColaLBedU4ctJ+gv7mojYrdx6r7VxbSNQ2+eCOcXZqI+LhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCx8XHWd05DDUe7DJJjMoR+kUgmpMB8GA1UdIwQY
MBaAFKTrnrVUfH9fGq/AraFAgFQZYYcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE91ZXRWUjhmMThhcjhDdG9VQ0FWQmxoaHlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80Y2Q3MmQtZDhhNS00NmNlLTg2NzQt
MGQyMjIzMmMzNGEwLzEvcE91ZXRWUjhmMThhcjhDdG9VQ0FWQmxoaHlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80Y2Q3MmQtZDhhNS00NmNlLTg2NzQtMGQyMjIzMmMzNGEw
LzEvcE91ZXRWUjhmMThhcjhDdG9VQ0FWQmxoaHlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKI46YgzN
A4iFARRfI2tQ9WUCurSS2hmotRhEuyq/DXfjKtKq+aikrjdRB+HEur9619DjID9s
QURgOO7R3IwspsQx+yUehpiWrCkjw6S5axJyLaX8h7sK5ZuWCPkCiof+Q5voew1m
JFbOAzr1BWimtqLv/HnONAlQvaS2sQlbgx9ZTQsz1XKzMXBqNcrNCzqb9ArrfCCj
gdyREa2GLZs7J/wad7FLPG9kwKb2bIXbv3rrbkT0QXrJ5NFBK208QQufh+XYsgof
g3R7USyh5pAEidy20WYxfd3g38T1WNzWM6yGebd5TN8cUwDZJYnOb1oChbbI7z0q
Ys71X6MqU29JUA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:20:40 2026 by rpki-client