Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: a76E5883qrpvgSsfTuykiWI7I3VWHcWggkdVks75LDw=
Subject key identifier: 42:19:D0:C4:90:B6:F6:09:BB:2D:DE:30:AB:54:04:76:D2:4C:AE:67
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 019D394094AF23808D3644AB7E09CF9BB406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 11:00:26 +0000
Manifest this update: Sun 29 Mar 2026 11:00:26 +0000
Manifest next update: Mon 30 Mar 2026 11:00:26 +0000
Files and hashes: 1: HvZskpw_21d-SsBdoI8uL-bUlg4.roa (hash: KmGPloyU4A9Te8//GhzETG1AxiKoerTgtl8Qk1jFdRg=)
2: cJd8S-uaABuXAFfWeDiL3NUesCo.roa (hash: 0fC3HtMmFazUCnfsakHQvupcYRxYZ5KP3wkprur/geI=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: ZL8gSspSBJ2hPpvmW3vyenpMs4rrlNhfbUzhEIO9RPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:94:af:23:80:8d:36:44:ab:7e:09:cf:9b:b4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Mar 29 11:00:26 2026 GMT
Not After : Mar 30 11:00:26 2026 GMT
Subject: CN=4219d0c490b6f609bb2dde30ab540476d24cae67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1c:0a:0a:57:8c:43:d3:01:e9:e5:da:b1:bb:
b0:9c:6e:4e:de:e9:bc:05:89:77:be:e1:0f:4e:bd:
93:0e:11:82:37:20:25:1e:6f:34:83:93:d4:59:c0:
9a:af:39:cd:5f:e0:47:98:ba:cf:fb:9b:ae:67:cf:
c0:47:da:47:ae:7f:0c:2d:9f:bc:5d:c8:3d:db:ba:
e1:78:d5:6c:27:84:56:ab:7a:17:2d:68:aa:65:5e:
da:f0:f5:4c:6b:0b:a6:49:b5:b0:59:fe:32:93:0d:
e0:53:64:a3:76:01:e8:56:8b:35:e7:91:5e:e3:3e:
5e:a2:df:a2:c9:da:06:8b:fe:40:f0:58:26:a8:22:
00:86:84:ed:bc:ae:0b:b3:b1:0d:6b:dc:00:24:f7:
05:24:c7:aa:c4:39:fd:ed:76:81:07:32:58:c2:cc:
de:97:d0:20:9e:36:2b:d8:6f:9c:ee:77:c7:f2:3f:
d4:4d:d7:21:3a:e2:ec:ee:d7:90:0c:7f:f8:c4:d2:
4c:91:e5:83:40:e7:aa:22:93:f6:a5:6f:fa:e5:7d:
0c:56:2c:e7:72:19:44:9f:6f:e3:f5:ac:50:4a:13:
f3:c3:0b:6a:08:e8:28:e7:9b:9b:30:f6:6e:47:aa:
1e:e5:d9:cd:f3:13:2e:aa:b8:75:b7:75:33:09:fa:
2b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:19:D0:C4:90:B6:F6:09:BB:2D:DE:30:AB:54:04:76:D2:4C:AE:67
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:46:56:ca:19:32:cf:ca:da:87:cc:ea:00:35:93:ed:a6:ea:
09:6c:ea:e6:73:b4:ab:8b:00:94:7d:d9:30:3e:10:b2:d9:64:
4c:14:f0:90:95:6d:70:c0:9c:4f:7f:c2:71:b4:0d:14:36:8d:
c7:b9:1f:d1:68:43:88:55:c6:0f:17:bf:cf:19:38:67:8d:47:
6f:17:3b:19:7b:d6:43:96:80:f5:32:36:c3:d2:2c:4a:39:28:
17:d3:4d:e2:1a:18:12:84:70:25:e1:53:9b:8c:58:14:44:10:
ae:3e:eb:ee:92:3c:3b:29:00:f6:8e:67:cc:7d:a1:de:ca:ae:
19:1f:9c:13:8f:5e:73:63:ea:8b:08:9f:44:6f:48:da:10:6d:
fb:c1:ae:27:da:86:2e:4c:6a:ac:1a:98:b4:0f:3f:2a:c5:62:
6a:f4:7b:78:8b:4c:f7:55:a0:0f:90:44:b4:9c:10:b1:65:56:
d6:c7:3d:61:e6:ca:bb:36:87:63:36:7f:c7:15:d1:1b:65:3c:
39:2b:ae:0e:4a:d7:4e:e8:e1:f1:3b:46:b1:a3:e9:ff:92:5d:
7c:c5:06:e4:02:8a:96:96:44:e8:97:93:32:da:5c:21:f5:77:
ae:28:9e:9e:9e:35:ec:30:3b:ab:7f:e4:de:de:61:13:86:33:
a5:d0:0a:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QJSvI4CNNkSrfgnPm7QGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OGZmOTIyOWVmZDhkMTJiNDI3M2YzNDZmOGM2NDU0ZWE1
ODdlY2MwHhcNMjYwMzI5MTEwMDI2WhcNMjYwMzMwMTEwMDI2WjAzMTEwLwYDVQQD
Eyg0MjE5ZDBjNDkwYjZmNjA5YmIyZGRlMzBhYjU0MDQ3NmQyNGNhZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxwKCleMQ9MB6eXasbuwnG5O3um8
BYl3vuEPTr2TDhGCNyAlHm80g5PUWcCarznNX+BHmLrP+5uuZ8/AR9pHrn8MLZ+8
Xcg927rheNVsJ4RWq3oXLWiqZV7a8PVMawumSbWwWf4ykw3gU2SjdgHoVos155Fe
4z5eot+iydoGi/5A8FgmqCIAhoTtvK4Ls7ENa9wAJPcFJMeqxDn97XaBBzJYwsze
l9AgnjYr2G+c7nfH8j/UTdchOuLs7teQDH/4xNJMkeWDQOeqIpP2pW/65X0MVizn
chlEn2/j9axQShPzwwtqCOgo55ubMPZuR6oe5dnN8xMuqrh1t3UzCfor0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIZ0MSQtvYJuy3eMKtUBHbSTK5nMB8GA1UdIwQY
MBaAFKaP+SKe/Y0StCc/NG+MZFTqWH7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yZmY5OGUtNmZmOS00MjMzLWI5ZjEt
MjI3ZTIxZTY5MWU3LzEvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yZmY5OGUtNmZmOS00MjMzLWI5ZjEtMjI3ZTIxZTY5MWU3
LzEvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkZWyhky
z8rah8zqADWT7abqCWzq5nO0q4sAlH3ZMD4QstlkTBTwkJVtcMCcT3/CcbQNFDaN
x7kf0WhDiFXGDxe/zxk4Z41Hbxc7GXvWQ5aA9TI2w9IsSjkoF9NN4hoYEoRwJeFT
m4xYFEQQrj7r7pI8OykA9o5nzH2h3squGR+cE49ec2PqiwifRG9I2hBt+8GuJ9qG
LkxqrBqYtA8/KsViavR7eItM91WgD5BEtJwQsWVW1sc9YebKuzaHYzZ/xxXRG2U8
OSuuDkrXTujh8TtGsaPp/5JdfMUG5AKKlpZE6JeTMtpcIfV3riienp417DA7q3/k
3t5hE4YzpdAKhg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:58 2026 by rpki-client