Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File: pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier: 1x4uvtVRhawxRt44vecan/3YQE0LWZ9bEsA30URUNac=
Subject key identifier: EC:D3:1F:80:00:AB:CE:93:DD:67:92:14:E3:48:FE:26:4F:17:A1:0E
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 019EA9E5BBB5DEE1678806EBAF5109F05D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number: 0D40
Signing time: Tue 09 Jun 2026 01:01:05 +0000
Manifest this update: Tue 09 Jun 2026 01:01:05 +0000
Manifest next update: Wed 10 Jun 2026 01:01:05 +0000
Files and hashes: 1: RZZbXwpHPue2NW4m459EoqMZKyE.roa (hash: v17nBO3LbcF/rH9ckA2KnZ23x5seOdWkK+ByqrSeon0=)
2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: aWABEgHZbpiWlHORjVSQiZTMg5xSJegDDFhjQFSvQ/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 19:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a9:e5:bb:b5:de:e1:67:88:06:eb:af:51:09:f0:5d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Jun 9 01:01:05 2026 GMT
Not After : Jun 10 01:01:05 2026 GMT
Subject: CN=ecd31f8000abce93dd679214e348fe264f17a10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:a3:1d:9e:d7:60:fe:89:d4:4f:73:65:a4:
b8:5a:c1:d9:14:5a:54:20:64:96:36:48:bd:c7:46:
f9:a9:7d:0a:d3:2c:c7:b1:08:9d:ab:9d:fe:b3:7b:
51:49:60:87:ac:7f:9f:7f:de:b2:8b:de:b9:fd:1d:
af:2d:20:03:11:9e:1f:be:65:6b:1c:18:75:2b:64:
08:be:f1:1c:62:f1:35:1e:42:a1:70:86:26:8c:ea:
7d:e3:3d:46:27:ff:cf:de:a9:41:f4:26:7c:22:07:
63:de:16:ad:f5:1c:05:8f:f6:28:90:7e:79:ea:ca:
28:95:d3:4c:ce:27:57:57:0c:33:d5:3a:cf:bc:6e:
2e:53:0b:b2:08:84:a8:d0:cf:fe:24:fb:e0:f0:7e:
e1:0a:31:8f:07:5c:83:49:c4:c6:9f:1e:9d:ad:92:
a7:32:df:bd:58:24:7c:f4:d9:f2:2b:86:14:79:0a:
9c:6b:52:d4:72:21:3c:af:1b:9c:15:a8:6b:af:a6:
11:e5:5d:ef:f5:3d:e4:e1:da:03:35:c1:f0:36:96:
7a:90:bc:c1:30:56:25:0f:95:cc:16:2e:a7:2c:f2:
bb:9e:f4:66:2e:c0:24:9e:be:76:86:20:f3:53:e7:
d4:13:aa:bd:ec:4d:56:61:10:6f:43:bf:b4:c3:0c:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D3:1F:80:00:AB:CE:93:DD:67:92:14:E3:48:FE:26:4F:17:A1:0E
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:89:3d:f3:e2:38:57:d0:a4:bf:61:bc:9b:6e:6e:02:3f:43:
fe:41:59:4b:8f:bb:bf:1c:56:1b:76:f6:84:6c:10:cf:70:3b:
d9:64:8f:c1:e2:37:af:76:75:fb:2f:2b:f2:c3:70:cc:57:14:
34:6e:3e:d3:90:06:76:4e:ee:04:cc:ad:db:c7:2f:b8:8a:25:
e0:57:5e:f1:a3:d9:f2:96:47:dc:28:02:bb:c8:53:a5:13:b2:
b8:53:3e:c2:2d:6c:6d:ac:16:2e:62:2f:9e:e2:6f:ec:d7:a2:
99:7c:87:38:97:b0:32:65:e2:11:93:05:13:88:5d:5f:d4:f3:
bc:f4:f7:bd:b5:f6:fc:95:91:30:20:cb:42:6f:f2:86:01:9a:
88:d6:a3:e8:ed:f1:db:c4:b5:16:f3:b7:9b:4e:42:9e:46:06:
e4:dd:43:c5:81:1a:b4:a4:b0:a0:59:32:14:e6:d4:9b:94:4c:
ad:6c:65:22:e8:ec:ba:40:15:6f:af:17:51:61:f7:93:b9:91:
26:e4:f6:28:d6:1f:de:f3:fc:15:3f:ed:f1:a7:a1:fa:9e:b0:
52:46:98:c9:af:df:d7:0d:13:e0:d6:8c:88:5f:46:3c:fd:20:
67:95:88:ee:76:f1:ca:66:df:86:0e:05:fa:da:5e:46:4b:cd:
63:ef:fc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 03:27:14 2026 by rpki-client