
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File: pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier: jL5gZkedx1AAvlFRvG6fcEQsA7SswJHdAdVhpeckzbo=
Subject key identifier: 07:FC:9E:26:CA:63:6C:0B:F8:F4:B0:06:91:2E:B6:5C:F1:21:78:4D
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 01A084F85E2C8183FDEA76E1F111451DCA8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number: 0E36
Signing time: Wed 09 Sep 2026 07:01:04 +0000
Manifest this update: Wed 09 Sep 2026 07:01:04 +0000
Manifest next update: Thu 10 Sep 2026 07:01:04 +0000
Files and hashes: 1: RZZbXwpHPue2NW4m459EoqMZKyE.roa (hash: v17nBO3LbcF/rH9ckA2KnZ23x5seOdWkK+ByqrSeon0=)
2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: MVmR3aShtdjt109t8ph0r6Z/RrpwnDUimCE2O7cLM6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 06:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:f8:5e:2c:81:83:fd:ea:76:e1:f1:11:45:1d:ca:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Sep 9 07:01:04 2026 GMT
Not After : Sep 10 07:01:04 2026 GMT
Subject: CN=07fc9e26ca636c0bf8f4b006912eb65cf121784d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:fd:a9:91:7f:06:b5:58:b8:0d:41:6a:9a:
7a:8e:53:63:05:d2:d2:42:c1:81:c1:8c:b2:0f:da:
bd:2e:93:80:25:18:a1:50:1f:ad:a3:bc:d7:d1:ce:
a3:6c:ab:d5:ec:e3:ff:bb:b4:e7:77:f6:03:2f:7f:
ff:3c:cc:37:15:00:76:ee:ff:02:5b:97:21:af:72:
dc:fd:67:30:c3:f8:c3:40:89:cd:66:04:b0:9f:b9:
9f:e8:b5:8f:7e:e1:fb:8a:e7:c8:0b:3a:da:bd:c2:
1e:55:d5:dc:ea:8d:7c:47:bd:0c:27:05:f3:d0:d7:
d2:90:e8:87:58:32:f4:c7:3a:b1:a1:23:a3:4f:51:
ef:d8:aa:69:9c:89:4e:74:11:57:dc:ab:51:77:c3:
f4:5c:d7:cd:80:b6:e1:ae:0d:42:27:78:63:db:4c:
43:33:cc:2b:aa:88:68:3d:e4:bf:8e:48:54:53:1c:
15:30:ae:d4:82:f0:74:ff:75:26:d2:68:a6:ef:c4:
7f:1a:42:2a:ad:4d:21:f8:fd:ea:84:3a:2c:3b:9d:
72:fa:5d:ff:98:d0:92:f7:8e:46:98:07:47:16:11:
b4:0a:8b:49:f5:cb:b0:99:de:b7:f5:aa:b0:3b:7c:
b5:4e:c4:5c:ca:4b:4f:89:47:22:66:c9:c9:b4:8a:
58:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FC:9E:26:CA:63:6C:0B:F8:F4:B0:06:91:2E:B6:5C:F1:21:78:4D
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:31:88:5a:b4:37:3c:b5:84:e7:8f:bc:b5:95:3a:36:a4:ab:
f8:a3:de:0d:eb:7e:77:87:6d:69:01:2f:70:e2:b8:58:68:8d:
e4:a3:35:c0:c7:2c:93:aa:16:0d:1c:1d:9c:bf:e9:a9:b4:21:
d8:34:3d:de:dc:fd:28:38:0b:c8:83:92:29:82:92:8b:9c:66:
c0:31:66:30:73:8a:1c:d6:58:6a:93:93:35:bf:57:b1:64:62:
c3:12:7d:ce:85:dc:ad:b6:36:f1:7d:06:a9:38:4c:f3:72:7d:
14:e3:d2:3b:15:ad:89:e4:bc:fa:ec:47:25:ac:e7:37:90:5a:
ec:13:cc:53:3d:3e:ef:95:a8:d0:9c:5c:50:f3:66:e4:c9:11:
87:2d:08:61:7f:e0:d0:b2:6c:df:c9:94:10:10:95:fc:7f:45:
40:5b:62:cc:8b:02:09:ea:12:69:df:cd:90:4d:c8:93:52:21:
19:39:08:5d:7a:a9:00:3f:21:53:40:de:eb:e0:1e:b0:75:c6:
13:46:8a:3b:b3:1c:7c:ef:3b:25:04:2c:42:55:5a:23:31:a3:
74:90:6e:d8:a8:64:c7:d2:6c:73:6e:17:45:96:0c:df:fe:12:
d3:3d:00:a5:3d:84:ca:72:89:64:e9:c3:38:7e:c9:c1:9c:e0:
51:8f:f5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 08:38:44 2026 by rpki-client