Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File: pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier: Gvt0ux+3huvQIe5DY4wPh8uSvycjz7lkcddGKnVxhys=
Subject key identifier: F8:A5:51:54:73:88:60:DF:B0:1F:A4:0E:31:31:7B:4E:F5:75:E9:DB
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 01A17C28D6D87EB43E17A7CB3F04606BEF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number: 0EB6
Signing time: Tue 27 Oct 2026 07:00:13 +0000
Manifest this update: Tue 27 Oct 2026 07:00:13 +0000
Manifest next update: Wed 28 Oct 2026 07:00:13 +0000
Files and hashes: 1: RZZbXwpHPue2NW4m459EoqMZKyE.roa (hash: v17nBO3LbcF/rH9ckA2KnZ23x5seOdWkK+ByqrSeon0=)
2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: o+drWNzOhveH7cDC/q6a4scVYdBi2y8Wr38V9jBNH5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:28:d6:d8:7e:b4:3e:17:a7:cb:3f:04:60:6b:ef:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Oct 27 07:00:13 2026 GMT
Not After : Oct 28 07:00:13 2026 GMT
Subject: CN=f8a55154738860dfb01fa40e31317b4ef575e9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:48:a1:d8:bc:ae:3d:c1:61:7b:61:4b:7c:e3:
01:1e:e4:34:46:c5:be:b3:e7:a3:15:8d:63:56:3b:
2a:b6:02:0f:81:46:29:4c:f0:1a:f9:af:3d:a2:41:
f6:bd:82:e7:47:2b:ee:c1:31:cf:99:ff:3b:d3:94:
28:0a:36:83:ad:e6:ee:61:00:23:ad:7e:ec:7c:6f:
21:e9:fd:0b:91:d8:09:41:fb:a4:29:4b:18:6e:01:
6a:9e:82:88:6e:6e:2d:c6:66:16:2d:fe:9d:b8:c0:
3e:d4:9e:d4:f2:fd:f8:c2:98:16:08:ff:c2:3e:21:
12:ac:3e:10:7d:52:91:41:ae:33:aa:7f:43:70:bb:
f3:df:32:0b:0a:fc:91:b3:82:79:8a:dd:76:c6:88:
6c:42:af:b7:c1:80:b0:60:32:9d:3f:89:a1:8a:25:
80:40:e8:ab:78:b1:f7:7f:e4:62:09:bf:af:81:18:
3f:5a:7a:0e:ab:98:19:7c:8f:2c:f9:4e:87:4b:00:
8a:d3:ec:36:49:eb:f0:6f:e8:c1:04:9a:a3:33:e4:
e2:1d:67:93:ca:e4:62:0f:eb:68:5f:b8:b0:6c:e4:
e2:6f:5f:e9:c1:71:56:1c:8b:c7:df:d7:e9:a4:55:
e4:40:dd:11:aa:6e:b8:14:cb:8c:af:15:fc:75:84:
55:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A5:51:54:73:88:60:DF:B0:1F:A4:0E:31:31:7B:4E:F5:75:E9:DB
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:78:59:85:5b:46:62:fd:c7:3b:5e:24:50:64:79:b7:89:e6:
51:49:4e:81:a7:b5:c5:62:f6:41:03:16:6f:59:dd:78:c1:3c:
30:90:c2:fd:65:93:86:1c:7f:ff:93:c0:36:bf:78:9a:45:78:
48:fa:cf:09:a1:6f:a5:b2:9b:ae:32:c7:ed:0c:0f:d8:56:c7:
51:c9:6f:45:01:c8:2a:0f:53:e9:55:98:56:d7:7f:bc:17:1e:
8a:ef:b4:13:f4:df:b6:dd:7f:ae:2b:68:1b:6a:f1:a4:65:83:
66:af:f9:c7:70:79:0d:db:4d:4f:14:94:dd:37:47:fe:0c:61:
14:41:37:e6:d9:dc:b9:5f:5c:5f:cf:9b:02:13:6c:92:41:d1:
76:bd:6b:de:4a:af:0b:a6:e7:e0:72:6c:88:1b:4e:c1:ce:c1:
30:47:0a:fa:48:84:e2:73:a7:b5:14:8b:f5:de:31:4a:63:02:
1c:8e:34:9c:cd:2a:ae:d7:da:9b:bf:75:6c:16:37:35:da:d6:
d7:5d:4c:5a:09:05:45:82:bc:5d:27:8c:04:7c:72:3b:a7:2d:
70:4e:ca:28:ac:62:f2:b8:16:0a:2e:11:59:2b:75:1d:6a:23:
66:8f:ea:96:47:e1:94:e5:b3:f1:f6:c3:93:05:35:4a:48:40:
29:e2:a1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:20:29 2026 by rpki-client