Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File: pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier: /SiVHtD1Oz+oMdi5aIwR6hzUFEQBrc7r13HxWL4gCcw=
Subject key identifier: 98:0C:CB:3B:41:D7:1A:46:6C:29:00:9A:CA:03:56:0F:C4:47:4C:D3
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 019D38D2CA8D6211B26A32300F9C405797B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number: 0C80
Signing time: Sun 29 Mar 2026 09:00:31 +0000
Manifest this update: Sun 29 Mar 2026 09:00:31 +0000
Manifest next update: Mon 30 Mar 2026 09:00:31 +0000
Files and hashes: 1: nNI8cWDrdupy6QxxnpymseWXDm8.roa (hash: /qGCtHyxtyMb0gDue0+bsmpvI9xz1vBM6ikbcYD+rGo=)
2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: ChboYHCwPDchndVBX6RXb0/Dc9IVJbrvVv9JcUWQQoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ca:8d:62:11:b2:6a:32:30:0f:9c:40:57:97:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Mar 29 09:00:31 2026 GMT
Not After : Mar 30 09:00:31 2026 GMT
Subject: CN=980ccb3b41d71a466c29009aca03560fc4474cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:62:b9:41:5d:3b:5c:bd:9b:32:45:d0:b8:
e5:31:b6:32:62:f1:ac:f0:72:66:94:51:1f:8e:c5:
0e:31:e6:13:a8:2a:ba:44:a3:d1:b5:49:8e:8d:6d:
3c:fb:45:44:40:a1:4f:6b:dd:3c:de:5c:04:d8:c7:
81:9e:58:44:7c:fe:2f:69:bc:d5:82:67:28:cc:73:
cb:45:94:9e:69:1c:cd:fb:0d:df:f5:db:ff:ec:ec:
13:35:01:a0:b7:7b:51:56:cf:44:f4:d3:a2:70:07:
5f:2b:17:5b:2e:36:3d:83:41:23:ec:0d:e3:03:2d:
ac:08:e2:54:8d:ab:26:7c:bc:a8:82:c2:4d:0a:c1:
21:50:fc:ea:c8:50:65:c7:41:73:32:1f:dd:71:15:
9e:b7:8b:17:1f:5c:f2:f3:8d:66:7f:b7:dd:5b:0f:
42:dd:06:44:83:73:73:63:c3:99:ba:13:54:44:47:
74:d8:d9:fb:1a:73:c2:40:c3:1f:14:94:82:fb:ac:
76:7c:b4:5d:5c:e8:de:9f:a0:40:60:2f:79:3d:95:
fb:bc:33:bd:84:99:a3:8c:84:19:6d:75:75:78:f1:
e9:f3:7f:bb:81:2f:dd:3c:a1:7e:e0:43:0b:b2:a9:
b3:e0:fc:9d:91:9a:fd:2e:bf:8a:db:b1:fb:f1:1e:
c5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0C:CB:3B:41:D7:1A:46:6C:29:00:9A:CA:03:56:0F:C4:47:4C:D3
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:d3:7d:62:c6:32:8c:9a:01:6b:d6:cd:39:9a:3f:7d:e3:02:
b6:fa:67:88:b7:74:54:6f:8b:d2:9a:b3:45:15:95:aa:aa:52:
e7:01:83:1e:e3:b1:01:c1:26:cc:57:d3:9c:bc:c3:86:7b:1a:
44:b8:19:43:7a:df:40:e8:45:89:95:34:f9:49:54:0d:90:c8:
b6:49:1c:90:ac:f0:8b:f4:de:8b:3b:57:ea:7f:23:88:f1:bc:
b2:2e:59:4f:c0:b8:73:73:2f:de:7f:fe:4f:ea:32:49:6e:bc:
04:ce:2f:03:db:28:56:ba:4e:c4:9f:a3:c9:0b:28:cf:81:4a:
9d:fc:1d:7e:b3:60:98:e1:a3:eb:a9:ac:7b:f8:da:69:73:b4:
1f:45:dd:c0:56:63:f3:79:09:d2:1a:9a:41:30:da:77:86:35:
ae:50:b0:f8:53:cd:50:5b:4e:3e:90:3c:06:25:96:a4:89:ba:
d3:96:25:cd:2d:dd:c7:44:cb:14:51:ee:fe:86:80:7a:d6:8e:
e0:5a:93:4e:f8:c3:be:db:cc:4a:79:ef:2c:54:4f:04:81:af:
16:67:21:15:30:0d:65:7a:b4:43:27:28:44:3c:86:2c:a5:4f:
71:e7:0e:25:97:79:d6:7d:89:df:e6:e5:41:56:31:30:40:47:
d0:8a:e9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:07 2026 by rpki-client