Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
File: pOd3fHr7fUObRvaBxMe_aoJS4xU.mft (raw, json)
Hash identifier: tEKPiA9TnEv7Dr/mvyVKh/XO1+ZV3TdF+CSxevyz8i4=
Subject key identifier: FA:AE:16:33:9E:93:03:7A:19:A9:6B:EF:A5:3D:16:30:65:60:8F:56
Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
Certificate issuer: /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Certificate serial: 01A17CCE96869EAC7590158FC4ABFF315D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
Manifest number: 11B0
Signing time: Tue 27 Oct 2026 10:01:15 +0000
Manifest this update: Tue 27 Oct 2026 10:01:15 +0000
Manifest next update: Wed 28 Oct 2026 10:01:15 +0000
Files and hashes: 1: buuNqOKeytQjK-fw0E6NNtyOW_g.roa (hash: QnGFqGYlvy+0tU6e4bILPLthTrwM/mOAa/IAuKQfucs=)
2: pOd3fHr7fUObRvaBxMe_aoJS4xU.crl (hash: 6a8BN/oPm5Y3akyw1PnOjTh/XtEZdWLrLDGRWHSED0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:96:86:9e:ac:75:90:15:8f:c4:ab:ff:31:5d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Validity
Not Before: Oct 27 10:01:15 2026 GMT
Not After : Oct 28 10:01:15 2026 GMT
Subject: CN=faae16339e93037a19a96befa53d163065608f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f6:85:74:1c:88:9f:c0:f0:d3:e3:5f:be:c4:
f1:36:93:8d:ad:41:bf:8f:91:21:13:a6:f9:23:34:
1f:db:71:23:10:b7:bb:82:0a:48:ac:96:07:1f:d2:
a9:c6:a6:bb:25:79:36:f0:4c:99:7a:1f:20:a9:03:
05:a5:d3:af:a5:08:31:c1:1e:33:97:8d:fa:a6:cc:
6d:8d:99:bb:bb:33:e7:19:80:cf:63:aa:99:e6:ed:
ec:14:46:94:ad:fa:2e:6f:6d:2b:a3:04:e6:f2:bf:
b9:42:51:e5:88:85:78:87:97:f3:e0:f7:a8:9c:20:
52:28:b6:f3:e7:58:c1:ba:c6:1e:79:f2:57:04:c2:
3f:d1:4e:f2:9a:ce:6d:80:dc:a7:c4:4d:fd:7a:9a:
5e:73:44:6f:10:3b:7d:34:bd:f7:68:79:06:e5:5a:
23:5b:93:41:d7:2f:44:57:03:ef:13:1d:c3:dc:86:
dc:bf:48:5a:b3:79:6c:ef:45:c0:c8:a4:81:66:de:
c7:f4:e7:64:f7:6a:e3:53:aa:51:ec:3f:6d:1e:3e:
e1:41:77:e6:e7:71:2e:05:19:34:a9:75:10:ce:50:
e9:6a:80:5e:ff:54:24:03:c3:d2:a7:7c:01:5c:8f:
af:94:51:6c:fc:ad:65:eb:b5:a1:19:1c:bb:d4:dd:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AE:16:33:9E:93:03:7A:19:A9:6B:EF:A5:3D:16:30:65:60:8F:56
X509v3 Authority Key Identifier:
keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:68:b4:da:cf:9d:34:7b:47:9c:e3:71:31:45:04:8e:94:82:
d2:3d:d8:2d:8d:69:9f:3e:0e:a9:c4:1d:15:5b:7f:b4:a6:cb:
14:2f:36:e9:1c:11:cb:19:4e:2f:c0:20:2a:f0:2a:26:e7:3d:
d5:11:2c:03:29:2e:12:90:fd:b5:71:8b:d2:b6:41:4c:1f:c7:
78:36:62:cc:74:e5:5d:ed:09:16:ff:04:97:0c:66:f8:59:ea:
88:56:39:81:41:fa:6e:d1:02:4d:a9:23:88:3d:78:90:e3:68:
a9:94:2c:b6:f5:99:f0:7e:cf:1e:7a:c8:0b:35:a3:a2:2a:12:
f8:35:6d:ff:4a:0a:ae:52:76:01:cf:56:ef:c6:51:ad:f3:cb:
77:9a:fb:e4:64:7f:6c:d1:c9:c3:ed:5a:65:3e:41:79:8a:f0:
44:d7:62:7e:42:57:68:e6:d1:e2:38:24:ed:bb:b0:b6:45:75:
e5:55:1e:34:84:d2:49:b1:8e:3a:ad:bd:65:77:e5:a9:d5:ad:
5f:fd:e8:3c:48:9f:7e:62:c6:0a:e8:21:02:6a:c0:74:44:74:
2f:07:4f:9e:5b:04:d9:a9:8b:71:05:5c:1f:61:b7:b6:f8:7a:
27:8e:69:f2:d9:89:ad:d3:89:95:42:69:3d:cc:0a:66:d4:42:
f4:dc:4d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:20:03 2026 by rpki-client