Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
File: pOeg0vxXpnuyt-hcPo14GSvKDxg.mft (raw, json)
Hash identifier: LRwudSTptnhGmit5Odg2ZDWVtoVo8eXv/kNyFyIwrsA=
Subject key identifier: 47:1F:58:03:95:7C:67:DA:34:F1:C8:23:A6:37:AC:BD:4F:F0:E0:9D
Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
Certificate issuer: /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Certificate serial: 019F3E2BCF9DA66EE97E12B3B00BB6A8C49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
Manifest number: 0E1F
Signing time: Tue 07 Jul 2026 20:01:26 +0000
Manifest this update: Tue 07 Jul 2026 20:01:26 +0000
Manifest next update: Wed 08 Jul 2026 20:01:26 +0000
Files and hashes: 1: Bl3mQJLo6QKNL3wv2g2LT4Q-5M0.roa (hash: ff2pO6lqKtNRUUCSbOJc5+AZduH9jyQWddIlmRJigdQ=)
2: pOeg0vxXpnuyt-hcPo14GSvKDxg.crl (hash: ma/YapWU5GRGHreHcWS52FyVduOpChPCFSLlvHXJHBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3e:2b:cf:9d:a6:6e:e9:7e:12:b3:b0:0b:b6:a8:c4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Validity
Not Before: Jul 7 20:01:26 2026 GMT
Not After : Jul 8 20:01:26 2026 GMT
Subject: CN=471f5803957c67da34f1c823a637acbd4ff0e09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:78:c7:6a:ae:fe:3f:af:85:a1:ec:ef:b7:
0b:57:91:c3:9e:59:d2:d7:fa:83:98:75:7c:e2:d3:
a4:aa:a5:bc:e4:aa:01:f0:15:29:b3:65:e9:08:12:
84:eb:87:c6:5d:d1:70:8d:8a:a5:77:10:29:39:c6:
25:c3:fb:7d:45:b9:11:e9:67:ba:e5:ea:b3:a3:b9:
cf:6d:c5:76:1b:48:80:72:c6:df:c4:a6:bf:5e:76:
41:51:d9:90:8a:9c:e4:50:8d:bc:f9:0c:cf:b9:40:
c6:73:d5:ce:cc:35:cc:60:89:14:42:54:3e:88:32:
1c:3b:74:5a:6f:a8:4f:05:22:eb:7f:46:0c:fc:ee:
c0:da:ea:1b:1e:31:be:78:81:3f:97:44:3c:fa:ba:
d8:49:de:73:27:60:16:7f:17:1e:f1:21:2e:c6:dc:
cd:02:09:c8:49:61:72:6a:0e:16:ec:94:5c:e7:03:
0d:0f:cf:29:9d:59:a6:25:b4:21:aa:4a:89:d7:df:
a3:d7:81:87:68:51:ed:10:c9:f3:6c:af:9b:11:e2:
f7:28:86:b7:f6:71:62:a3:03:81:96:89:10:3a:10:
91:1e:4d:e4:55:3a:a3:c7:be:40:11:7d:70:ee:d8:
a3:d8:cf:41:1c:ad:f7:c0:c4:7d:67:60:50:19:f4:
ae:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1F:58:03:95:7C:67:DA:34:F1:C8:23:A6:37:AC:BD:4F:F0:E0:9D
X509v3 Authority Key Identifier:
keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:df:07:56:94:54:b1:83:60:62:d9:ef:35:03:50:5d:a6:99:
3f:01:82:dc:4f:31:40:ee:1b:bd:66:73:26:de:fb:ff:82:2f:
ec:c1:50:1a:52:80:6c:61:e0:1f:e6:49:c8:55:4a:4c:92:90:
ac:bf:25:59:c0:ee:b0:17:97:82:4c:ec:79:18:26:7a:36:0b:
09:7f:00:56:24:e7:5c:1e:0e:0c:5f:75:01:1c:03:81:ce:3e:
1b:15:38:d2:96:c4:c3:47:ea:94:9b:e5:65:0b:97:d3:14:6d:
d5:fc:fe:97:76:3b:96:b0:b3:76:05:c8:8f:08:21:fe:c3:2d:
ff:aa:68:bc:9a:b3:19:68:6c:ce:bb:4f:27:f9:8b:1e:a5:85:
ef:f1:e3:c5:6d:e2:bb:82:9e:8f:47:1d:9e:e0:e9:6d:4c:db:
6f:50:3a:ff:9f:51:9c:37:28:14:5f:1f:6c:fd:13:93:9c:94:
e5:a2:42:7f:56:3d:92:02:d5:ec:74:34:d2:6f:57:11:82:9b:
48:13:f8:ac:1f:33:77:85:d0:4d:11:b8:be:bb:23:40:db:cf:
b6:79:1f:c4:60:1b:91:f2:f7:ba:8f:14:d0:38:25:73:81:8b:
d1:b1:7d:8f:16:21:f6:d8:a3:9a:38:9b:46:04:88:70:de:90:
7c:0d:9a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 23:14:17 2026 by rpki-client