Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: Kw7pDGkR7iUYnqyau9fO96fFGlpWlpqqyhkhLSdmXaM=
Subject key identifier: C7:05:DD:9D:21:06:97:D0:97:17:E1:DE:58:FD:AF:46:0A:03:EB:42
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 019F42ADA63D2C427C95766A1895AD2647B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 19A1
Signing time: Wed 08 Jul 2026 17:01:44 +0000
Manifest this update: Wed 08 Jul 2026 17:01:44 +0000
Manifest next update: Thu 09 Jul 2026 17:01:44 +0000
Files and hashes: 1: HvZskpw_21d-SsBdoI8uL-bUlg4.roa (hash: KmGPloyU4A9Te8//GhzETG1AxiKoerTgtl8Qk1jFdRg=)
2: cJd8S-uaABuXAFfWeDiL3NUesCo.roa (hash: 0fC3HtMmFazUCnfsakHQvupcYRxYZ5KP3wkprur/geI=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: UQVuuQQ/5ONcBzb/+eBuIsursFboBsIONutsZq7jzz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:ad:a6:3d:2c:42:7c:95:76:6a:18:95:ad:26:47:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Jul 8 17:01:44 2026 GMT
Not After : Jul 9 17:01:44 2026 GMT
Subject: CN=c705dd9d210697d09717e1de58fdaf460a03eb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:51:c2:0e:50:cb:19:f1:53:5b:c9:2f:0c:
4a:9c:e2:a2:d7:df:b8:89:dc:80:b0:22:ec:92:c0:
5f:74:be:15:eb:82:26:2b:92:b2:57:e5:8e:5b:86:
be:ae:6a:27:37:32:a6:b9:5e:a2:35:ff:75:d6:7c:
f2:fc:ad:f4:34:11:09:62:56:3b:49:6a:18:4b:d0:
e0:fa:bf:3a:ef:16:bb:ce:69:bc:5a:03:f1:22:bf:
7f:a8:78:70:99:aa:d4:a8:0c:39:84:5e:ee:6b:9e:
00:df:9b:de:90:d5:3a:9f:db:0d:f3:d2:5d:01:15:
f1:2a:e5:f8:16:b5:aa:8d:b2:9b:9e:74:69:50:52:
be:cc:2c:40:b3:66:aa:cc:0e:2f:fa:2a:de:4a:1c:
89:3d:19:23:03:6c:80:8f:08:ad:f1:99:bb:1c:5d:
55:7d:ac:37:0d:c6:aa:f8:2a:58:96:84:92:99:40:
1d:6a:6c:8d:c8:a2:01:59:3d:76:34:74:5a:c7:e2:
3d:13:06:ad:f9:f2:19:e8:4c:c6:69:69:82:33:85:
ad:9f:f7:16:89:7a:61:1d:c9:6c:17:90:96:12:49:
b8:ec:85:ac:64:74:3e:bf:ed:b7:04:35:95:b7:85:
c1:e1:94:b6:b0:66:b9:a6:b6:48:3d:12:72:24:ec:
c7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:05:DD:9D:21:06:97:D0:97:17:E1:DE:58:FD:AF:46:0A:03:EB:42
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:07:93:3d:2b:ad:26:ec:32:1f:9d:da:6a:0d:12:86:b3:c6:
3f:8c:1e:de:ff:ab:85:13:31:b2:85:7b:bc:fd:02:cc:14:80:
1f:5b:68:d7:44:65:6f:cc:63:9b:b2:19:6d:12:bd:0c:a7:99:
93:2a:aa:1b:7d:08:b8:be:1f:35:87:18:fe:8e:bf:9a:8c:85:
7e:13:0a:33:76:12:c7:eb:b6:39:ad:7a:31:c1:0f:48:79:4f:
4c:1c:70:a7:28:2f:00:5b:b8:85:e3:ef:4c:91:a7:66:ee:29:
72:65:37:4c:3c:fa:68:c0:1e:d0:cc:50:2b:f4:28:60:fd:2c:
08:44:aa:31:96:66:a6:b4:f4:f7:2f:df:9f:b5:f0:88:5a:dd:
fe:f7:20:81:35:67:77:5f:e4:75:de:94:76:35:06:94:e2:04:
fe:ff:3b:86:52:29:6f:ba:49:c3:bd:eb:33:3a:58:aa:39:15:
6d:60:9b:f1:c3:5a:0b:c3:86:1e:51:f3:fb:8e:2f:0e:07:05:
dd:63:d3:a1:36:b7:22:b3:16:8c:5d:f2:c8:82:74:b0:b0:5f:
2e:a6:f0:c6:5b:c5:0d:b7:d5:92:ee:da:15:f6:15:03:8f:af:
e1:b3:07:49:39:5c:4a:e9:5d:f8:14:b9:16:c4:57:b5:68:1b:
a9:26:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:30:49 2026 by rpki-client