Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
File: pOuOt7S2LtElTwBWTgPEBnq_v8k.mft (raw, json)
Hash identifier: Mxd79hZYGWRNKl9g/9ZkdWwLcWSoqnon0GSo43WBFsQ=
Subject key identifier: 44:6C:3C:A1:78:24:46:29:58:EA:7A:B8:43:B2:E8:9A:68:E3:BB:FD
Authority key identifier: A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
Certificate issuer: /CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Certificate serial: 019D37C00288B426BFF3E43DBFCE1FEFECC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
Manifest number: 05E0
Signing time: Sun 29 Mar 2026 04:00:23 +0000
Manifest this update: Sun 29 Mar 2026 04:00:23 +0000
Manifest next update: Mon 30 Mar 2026 04:00:23 +0000
Files and hashes: 1: I8rso1XHHs_G2n3Bf0ez8yM6EOo.roa (hash: hlyEsK6AFvAxueY2ITDcDncXLHyD3I173M2xknmBdkA=)
2: pOuOt7S2LtElTwBWTgPEBnq_v8k.crl (hash: PfZtVIKFn5tQhjbEJCdxRC4ZVcq9+aTPuW/qGH9gODw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:02:88:b4:26:bf:f3:e4:3d:bf:ce:1f:ef:ec:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Validity
Not Before: Mar 29 04:00:23 2026 GMT
Not After : Mar 30 04:00:23 2026 GMT
Subject: CN=446c3ca17824462958ea7ab843b2e89a68e3bbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:20:b8:17:ff:ad:57:b1:d9:1e:1c:b8:c8:
5d:c3:67:23:d5:49:39:59:27:1e:87:36:ad:df:3d:
cd:6a:57:86:ba:2e:8a:67:74:14:e8:05:b1:3b:a8:
58:7a:f9:a7:b2:04:e6:ef:9f:13:1c:4d:3d:e5:5b:
cf:b2:22:e9:18:e8:14:33:77:22:f8:c3:cf:28:29:
69:f2:bf:93:e0:0d:0e:ea:a1:38:f2:39:11:02:78:
49:8b:de:19:cf:62:23:c8:ce:0a:b9:e7:3d:ac:13:
7b:25:d5:6c:8f:92:c1:45:2d:f7:c8:ed:50:1c:b2:
8b:8c:00:ad:7b:76:aa:22:24:d2:1c:7e:88:7c:30:
09:68:35:cc:82:4c:c6:04:9e:9a:e6:12:dd:de:63:
e3:f7:f1:02:3e:42:55:75:bf:a6:1d:b8:0d:b1:b3:
94:33:e3:8d:82:7d:37:6d:34:db:04:1c:44:91:61:
4b:bf:89:64:83:ac:33:44:70:0a:cf:80:32:79:bc:
f3:31:c6:fa:4d:8b:82:4d:91:54:a8:a7:d2:96:d9:
ee:a8:fe:d8:d3:63:cd:ef:9f:1c:09:f0:ba:fe:88:
4b:8b:ac:fc:5d:9b:b0:60:75:04:bb:cb:93:e2:74:
24:4c:ad:e0:2a:99:99:b6:bc:99:aa:9f:76:22:87:
aa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6C:3C:A1:78:24:46:29:58:EA:7A:B8:43:B2:E8:9A:68:E3:BB:FD
X509v3 Authority Key Identifier:
keyid:A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:fc:1c:8f:43:39:21:42:20:34:45:40:ec:09:82:7e:f4:b1:
b6:cb:84:72:a9:ab:ad:4a:e7:24:f6:7b:7d:74:89:d5:1a:e3:
c3:a8:0c:ab:73:f5:91:4c:b8:20:30:bb:78:15:55:8d:01:22:
3a:77:8e:46:40:e6:1a:76:c7:3f:a0:95:d1:5f:aa:27:9b:71:
35:1c:b6:e6:a6:fd:07:07:ba:d9:44:bc:29:c0:91:a5:62:97:
97:46:13:83:09:c9:d2:86:fc:0a:61:87:20:d0:cb:01:4a:78:
27:9f:a3:1a:37:22:f1:ce:4c:21:c0:be:45:4d:10:f0:4f:25:
43:f4:8d:ff:60:af:60:20:6c:43:a6:87:7b:38:0d:85:f8:c6:
c1:41:ff:b3:82:e3:b5:e2:92:6b:57:89:a6:d3:88:63:ad:29:
63:70:55:36:4a:a0:3b:71:50:1c:53:a2:e6:7a:a5:4c:5c:d5:
07:64:10:e4:30:79:9d:81:a2:bc:b7:a5:4d:38:bb:ce:7b:89:
d7:2c:b7:34:cb:d7:26:06:34:14:23:d8:d2:fc:4c:a2:49:2a:
ec:e7:5f:63:66:2e:c6:a6:3a:a7:ce:56:66:b9:e9:1d:f6:60:
a7:2f:d8:40:eb:71:98:54:19:a3:ee:13:69:71:eb:6f:8c:74:
97:24:95:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:23 2026 by rpki-client