Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8f58a7-5bcf-4371-8285-3f7cdaeb86a0/1/pOopq0HGXysU-RHRaY4HMMtJ_pI.mft
File: pOopq0HGXysU-RHRaY4HMMtJ_pI.mft (raw, json)
Hash identifier: CYKCwsJAYzpBjtdbGoPfJKHXTjenbq7YCdhcDaOT8+Y=
Subject key identifier: D0:66:A4:97:7B:6F:4B:47:91:08:54:CD:BD:E3:AB:E6:96:A9:3F:7A
Authority key identifier: A4:EA:29:AB:41:C6:5F:2B:14:F9:11:D1:69:8E:07:30:CB:49:FE:92
Certificate issuer: /CN=a4ea29ab41c65f2b14f911d1698e0730cb49fe92
Certificate serial: 019D39782DBE50D38D00B4BB7853091C7838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOopq0HGXysU-RHRaY4HMMtJ_pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8f58a7-5bcf-4371-8285-3f7cdaeb86a0/1/pOopq0HGXysU-RHRaY4HMMtJ_pI.mft
Manifest number: 0C
Signing time: Sun 29 Mar 2026 12:01:10 +0000
Manifest this update: Sun 29 Mar 2026 12:01:10 +0000
Manifest next update: Mon 30 Mar 2026 12:01:10 +0000
Files and hashes: 1: pOopq0HGXysU-RHRaY4HMMtJ_pI.crl (hash: HLW7Q3V+k1tZkyrHrlbI/aPAm0IZcwwMRHquN5DTANs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/8f58a7-5bcf-4371-8285-3f7cdaeb86a0/1/pOopq0HGXysU-RHRaY4HMMtJ_pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/8f58a7-5bcf-4371-8285-3f7cdaeb86a0/1/pOopq0HGXysU-RHRaY4HMMtJ_pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOopq0HGXysU-RHRaY4HMMtJ_pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:2d:be:50:d3:8d:00:b4:bb:78:53:09:1c:78:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ea29ab41c65f2b14f911d1698e0730cb49fe92
Validity
Not Before: Mar 29 12:01:10 2026 GMT
Not After : Mar 30 12:01:10 2026 GMT
Subject: CN=d066a4977b6f4b47910854cdbde3abe696a93f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:ad:3b:59:c1:e7:80:76:0f:88:e3:4d:05:
b0:07:fb:fb:6e:a2:17:07:23:76:17:99:e0:7b:2b:
c3:ec:3e:83:71:34:83:b7:a1:38:50:91:a3:b6:ed:
93:bc:43:fb:c9:5a:56:5c:bc:29:7d:26:e3:58:20:
99:71:02:6b:26:98:8d:00:54:94:0a:d6:0f:53:0e:
84:d5:3f:62:c2:6a:b2:a9:95:da:35:8d:71:90:65:
60:44:6f:78:05:3c:62:49:ba:67:3a:37:b0:21:28:
1c:a8:9a:c0:45:f2:ac:d3:19:8b:2c:e0:ba:59:ff:
70:3e:1d:16:95:66:c8:7a:c8:15:6a:45:5d:c8:12:
bd:51:99:b8:4e:9a:62:48:e8:34:89:1d:88:bc:06:
d9:2d:01:9b:0d:78:07:79:ea:b7:c2:47:53:55:2b:
97:94:30:03:8c:53:63:7b:2a:58:1d:45:b4:8e:ff:
85:ae:8d:ef:88:d4:bf:9d:3d:37:19:f5:a6:24:54:
f4:c7:fb:31:ce:ae:6a:8d:e8:35:46:fc:70:39:c6:
9f:7c:23:85:78:22:6d:6c:0c:76:12:75:d6:49:d9:
0f:0c:93:bd:be:48:34:6c:d2:61:73:8e:e5:97:04:
fc:91:fe:38:91:84:0c:36:3c:66:69:16:a5:db:3a:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:66:A4:97:7B:6F:4B:47:91:08:54:CD:BD:E3:AB:E6:96:A9:3F:7A
X509v3 Authority Key Identifier:
keyid:A4:EA:29:AB:41:C6:5F:2B:14:F9:11:D1:69:8E:07:30:CB:49:FE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOopq0HGXysU-RHRaY4HMMtJ_pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8f58a7-5bcf-4371-8285-3f7cdaeb86a0/1/pOopq0HGXysU-RHRaY4HMMtJ_pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8f58a7-5bcf-4371-8285-3f7cdaeb86a0/1/pOopq0HGXysU-RHRaY4HMMtJ_pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:53:17:4a:63:92:59:ce:78:df:c2:c7:19:68:8b:80:9c:79:
12:c2:c1:78:a3:d7:71:9d:3e:f3:92:4d:ae:84:f1:25:da:78:
9b:c3:49:71:93:9d:34:56:88:60:38:06:2f:dc:3a:7a:60:79:
ed:9b:65:ea:d1:48:58:bb:23:b9:b6:ba:93:0e:71:9e:3d:1c:
20:fe:2f:cc:bf:3a:00:6d:5f:26:43:0b:ed:37:0b:de:9c:22:
a2:7f:d3:02:e4:5d:96:ba:14:61:65:d9:07:ce:6c:4d:c6:fc:
af:7f:05:3b:db:26:f7:e0:b7:8a:85:c6:63:37:08:ab:3f:c7:
c0:88:fd:56:a6:2d:d7:16:a6:19:70:28:9b:08:9a:54:de:dc:
53:91:d4:28:88:f2:11:18:9c:fa:e0:9d:39:16:a5:df:b9:51:
65:34:ac:ff:d0:ec:8f:5a:8e:83:a3:a8:4a:67:b5:ee:cb:7a:
2f:43:7b:ce:9d:14:bf:0a:5c:cf:5f:e2:93:1d:3f:a9:45:ce:
2c:fa:1e:24:82:97:4e:9f:b3:87:a7:0e:33:a1:e4:00:a5:a2:
48:53:68:2e:56:26:db:69:c1:1c:fc:47:2f:4e:8a:91:a0:81:
10:6e:d5:67:1e:25:a1:0e:a3:af:6e:e5:9b:9b:04:41:90:54:
d5:7e:9e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:44 2026 by rpki-client