Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File: pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier: NLRDItYwlYUPCMiDX5S/pofWUZfneS4ZqnVITJ1SM+g=
Subject key identifier: DF:C3:C2:DE:2F:E1:DB:B4:C8:E6:F2:F8:98:02:6D:8E:A1:D8:8A:8B
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 019F976F09D1FC4FF48A0A0A1815415B0790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number: 0DBB
Signing time: Sat 25 Jul 2026 04:01:04 +0000
Manifest this update: Sat 25 Jul 2026 04:01:04 +0000
Manifest next update: Sun 26 Jul 2026 04:01:04 +0000
Files and hashes: 1: RZZbXwpHPue2NW4m459EoqMZKyE.roa (hash: v17nBO3LbcF/rH9ckA2KnZ23x5seOdWkK+ByqrSeon0=)
2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: 33A00o/DjfvARCKxYcs5Ma6yUQgP3NziUgKTgYmFfJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:6f:09:d1:fc:4f:f4:8a:0a:0a:18:15:41:5b:07:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Jul 25 04:01:04 2026 GMT
Not After : Jul 26 04:01:04 2026 GMT
Subject: CN=dfc3c2de2fe1dbb4c8e6f2f898026d8ea1d88a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:d7:80:a5:c2:59:da:07:9e:9a:e1:62:81:
2b:71:f4:19:ea:86:8a:27:b7:7c:a6:58:75:f9:9a:
8e:97:49:15:c2:51:49:08:e8:a1:ff:98:41:b5:2e:
54:98:9e:d5:fb:df:10:9c:58:ac:6f:98:61:a2:9d:
91:16:fe:78:bc:33:2a:af:f5:2b:9a:f7:96:1c:ad:
05:2b:d0:d3:f5:09:63:39:f8:07:b8:03:96:b3:7c:
ba:1d:f0:3c:c0:ab:0b:6d:b6:ce:a5:df:ac:6e:12:
29:4f:fe:1f:09:01:55:be:d8:30:d7:be:3b:1a:9e:
66:88:12:2a:d0:53:2d:40:a7:64:1c:bd:d1:9b:97:
78:0e:76:c3:7d:78:0a:c6:58:64:b1:ec:89:60:d3:
c5:5f:71:80:fe:b4:39:b7:fc:99:f4:41:dd:05:f8:
b6:0a:e6:a9:99:c1:f2:9c:c2:c8:fc:bd:75:83:a7:
c5:84:86:a2:2c:47:b7:fb:7e:72:ba:43:6f:be:57:
49:87:09:17:3f:ec:ce:71:d7:b0:a2:88:fb:f6:d3:
5e:7d:14:15:d4:70:b3:52:74:c0:f4:89:36:1a:07:
78:74:18:e0:58:3a:08:fc:f6:2f:9d:48:ae:18:9e:
87:ca:f0:84:41:99:af:0e:a3:85:c5:1a:d5:d7:64:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C3:C2:DE:2F:E1:DB:B4:C8:E6:F2:F8:98:02:6D:8E:A1:D8:8A:8B
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:29:f4:f3:94:45:a5:ef:1a:e8:e3:a3:3d:eb:09:4e:b1:48:
ba:08:9a:04:d8:b8:20:59:14:15:63:ee:e2:92:e1:81:b6:bb:
f9:3c:65:0a:cb:85:00:c0:44:75:be:9f:d7:3d:d7:76:0c:5a:
1a:b7:c7:91:aa:21:e7:3b:31:03:2e:30:59:10:2a:e4:ee:7a:
6e:4b:34:c1:94:4e:73:7a:77:2f:e4:4d:e9:33:82:5c:b0:d1:
d8:b0:5f:21:22:99:dd:ad:4c:d1:c0:6c:b9:65:48:fb:e0:e8:
f6:3e:18:b3:dd:57:5f:01:25:34:7f:2c:e5:c2:14:fc:cb:a5:
97:13:8c:25:6c:4f:c0:a3:12:55:4d:07:15:ca:14:5a:64:30:
79:ae:be:2c:28:64:4c:a4:c7:c1:18:41:cb:26:22:5c:7c:35:
58:95:03:fd:3e:cb:88:35:a8:ae:47:07:20:e2:41:5b:e6:3b:
ae:00:5e:5d:e4:0c:34:e8:f3:41:9e:f3:c9:05:3e:7c:d3:71:
47:f6:52:6e:80:d4:59:4f:51:58:ef:5f:44:b3:75:33:c3:31:
6b:1b:64:9e:80:d0:6c:ee:94:50:11:85:6e:07:56:e3:92:f5:
22:2d:7f:a6:b2:fb:a1:8f:ee:08:78:41:de:00:de:8e:77:72:
0c:1a:dc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 10:25:44 2026 by rpki-client