Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
File: pOd3fHr7fUObRvaBxMe_aoJS4xU.mft (raw, json)
Hash identifier: fEBGHCAzrrp8Aj+KYxtCdtLigPWut607vaC7dnA6H08=
Subject key identifier: 24:0F:2D:22:21:E6:FE:2F:3D:4E:EA:2A:93:46:20:5C:A7:91:0B:4C
Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
Certificate issuer: /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Certificate serial: 01A08D56D336F9489FA080D2F7ECC16DC7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
Manifest number: 1134
Signing time: Thu 10 Sep 2026 22:01:12 +0000
Manifest this update: Thu 10 Sep 2026 22:01:12 +0000
Manifest next update: Fri 11 Sep 2026 22:01:12 +0000
Files and hashes: 1: buuNqOKeytQjK-fw0E6NNtyOW_g.roa (hash: QnGFqGYlvy+0tU6e4bILPLthTrwM/mOAa/IAuKQfucs=)
2: pOd3fHr7fUObRvaBxMe_aoJS4xU.crl (hash: MSDO0uMpBpHL+uXLfsKkhYQGUg6xsBWhL5zKocwJwFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:d3:36:f9:48:9f:a0:80:d2:f7:ec:c1:6d:c7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Validity
Not Before: Sep 10 22:01:12 2026 GMT
Not After : Sep 11 22:01:12 2026 GMT
Subject: CN=240f2d2221e6fe2f3d4eea2a9346205ca7910b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ef:92:93:36:bb:72:d5:be:5f:74:c3:55:e4:
8f:a3:b9:f3:02:a1:8b:c5:84:5f:1e:78:97:c4:ae:
f2:65:6c:0f:84:92:38:a1:c0:2f:3e:9c:62:c3:02:
c2:38:2a:20:36:42:e9:2f:73:75:f5:24:dc:31:b6:
2d:46:c3:93:21:d9:fc:40:f8:81:7b:8e:34:de:42:
e5:2f:39:e7:8c:1e:ac:39:75:90:0a:b9:9e:07:18:
14:50:dd:1c:9e:19:87:28:27:2a:49:35:2b:f3:71:
2f:61:60:82:11:55:82:55:d9:49:ab:1c:42:88:13:
d9:f5:11:a3:a4:aa:f9:f3:b6:e4:af:35:1c:65:76:
4e:a3:64:e7:3c:bb:66:bc:18:ae:0a:31:12:bf:39:
be:4a:6a:ee:14:b8:35:96:d3:39:ed:d5:91:75:24:
ef:6a:a5:ed:f4:c8:d7:44:7e:3f:38:9c:11:2e:17:
6b:44:d8:e0:f8:ea:e2:60:9a:7c:8e:46:72:cb:b5:
62:78:76:9c:f4:8b:cc:4b:e6:74:6b:ac:4a:0e:d0:
80:fb:6f:3f:10:e7:fe:c2:76:f5:e3:c2:c7:13:23:
c0:60:75:3d:50:bd:f5:ac:86:71:7a:b6:dc:1a:7c:
25:d2:39:d3:15:d8:21:de:7e:49:46:3f:85:c7:1e:
9c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0F:2D:22:21:E6:FE:2F:3D:4E:EA:2A:93:46:20:5C:A7:91:0B:4C
X509v3 Authority Key Identifier:
keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bd:44:7f:2c:c0:d4:09:90:1c:b3:86:9a:51:4d:13:05:e8:
4b:c8:31:85:e3:56:7b:5c:89:a7:16:d4:c9:0d:6a:fb:f5:d2:
ac:87:45:f1:45:ab:ce:fc:5d:58:04:5c:60:19:77:f3:67:17:
62:08:d9:7c:81:85:46:c2:01:b1:9b:be:99:46:74:99:0a:e3:
be:48:35:4d:0a:a1:fb:8b:21:46:5c:11:12:2b:9e:03:02:7a:
24:a9:ca:33:22:bb:70:78:f8:3d:54:1a:1f:4b:1c:4a:82:71:
2c:a8:3c:88:5e:04:0b:4c:36:12:7f:d1:1b:4d:05:99:38:ad:
00:96:f4:f4:c5:3c:14:44:29:c6:87:bb:35:71:76:e2:cc:0a:
88:6b:42:a7:18:0e:ec:b4:13:46:79:15:54:dd:3f:6b:36:7b:
93:90:9a:72:d0:da:5d:01:b7:0f:72:07:5e:76:99:5a:dc:b1:
1b:44:11:d2:79:b7:9a:74:9c:c8:a9:24:31:d5:75:e8:fe:e0:
ab:9d:a7:9b:67:75:36:8f:85:83:0f:09:b3:07:b9:9d:6c:21:
5b:7e:f0:a2:50:57:cf:0e:70:30:21:cd:47:31:9d:eb:1f:80:
02:ef:a5:d2:11:a9:bd:33:52:f6:c1:b2:2a:6c:9a:4f:36:94:
8e:f5:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:50:30 2026 by rpki-client