Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
File: PowYl2JPV7404PdguX8RCtW12jo.mft (raw, json)
Hash identifier: OXLMtsXnxb87erWLchp/xPB0WE3wU/IYplitxjbaDNM=
Subject key identifier: 19:33:F4:B5:14:D0:77:6C:ED:1E:30:B7:45:BD:A4:F5:D5:79:60:70
Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
Certificate issuer: /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Certificate serial: 019D29292FCD8AB714A99ADA72492B05A93A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 08:00:58 +0000
Manifest this update: Thu 26 Mar 2026 08:00:58 +0000
Manifest next update: Fri 27 Mar 2026 08:00:58 +0000
Files and hashes: 1: 2DMY4OZ-P0l7XFAVrcnoNtnZ_r8.roa (hash: 2FMBwvvINGY4tE8pGOzhgn9w8zBO7Q7KUVGJLpWK5M4=)
2: PowYl2JPV7404PdguX8RCtW12jo.crl (hash: ocKNK9jo3f5iB/7bzZImMJLhdqIOt5KiV2M1QH7kkhE=)
3: ztIzxf93QWsYAnlPRmW4J8mPKU8.roa (hash: 1lDUE3T/JTJqUXqe8vPaaGkCY1xNEzM3Qzz5NIUDqZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:2f:cd:8a:b7:14:a9:9a:da:72:49:2b:05:a9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Validity
Not Before: Mar 26 08:00:58 2026 GMT
Not After : Mar 27 08:00:58 2026 GMT
Subject: CN=1933f4b514d0776ced1e30b745bda4f5d5796070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:fc:51:8f:00:33:7d:99:11:ea:5c:b2:fc:
24:a3:98:e6:e9:a3:b6:43:31:b2:8b:55:c2:23:35:
df:18:62:a6:dc:e2:8d:90:f3:99:6a:47:69:b1:7a:
13:77:8a:30:5f:e4:d7:be:b3:d3:bc:35:51:43:72:
de:50:e4:81:97:f8:80:62:2b:bd:1d:92:01:9a:62:
45:c1:2d:9a:5a:fe:7a:7f:e4:d2:44:85:31:0c:5b:
c0:b3:51:c3:ab:77:2a:02:15:c0:b0:ed:a6:4f:df:
6a:dc:74:d0:be:fc:07:2b:7b:b6:07:a1:9e:c6:8a:
00:16:18:4f:0a:a9:dd:56:e8:9b:0d:36:d2:c2:f6:
c5:99:b9:b1:71:44:2a:f2:0e:98:fe:93:ca:eb:e9:
2b:31:68:e6:dd:da:a7:5e:34:de:17:02:2b:35:e5:
84:69:b9:45:9a:eb:24:f3:5d:23:ec:cb:8f:24:c8:
95:20:c2:0c:6d:9c:f4:32:52:15:0a:3d:a7:73:e4:
aa:65:a1:59:3f:25:25:b6:80:fd:33:fb:63:6f:29:
5b:19:8d:14:8d:f6:48:d4:31:ad:5c:3a:28:48:e2:
71:af:34:0f:0d:8d:d5:12:71:35:b5:15:5b:7b:88:
09:c7:83:e2:9c:d0:31:fd:4c:fa:8a:60:75:2d:ec:
32:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:33:F4:B5:14:D0:77:6C:ED:1E:30:B7:45:BD:A4:F5:D5:79:60:70
X509v3 Authority Key Identifier:
keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:30:27:5c:8c:67:08:06:4b:d0:78:1d:b7:1b:13:5c:2f:0c:
a0:82:9a:34:48:81:59:61:d1:13:33:af:a2:33:47:41:df:bd:
ac:05:34:b6:0d:03:57:ea:81:3d:77:d0:aa:51:ac:55:5a:37:
8b:93:87:9c:ea:f2:21:d8:f6:64:0e:c5:d8:20:ca:f8:43:14:
4c:d2:b6:ce:8c:1c:6a:5e:98:e6:9f:1a:fa:11:ff:1c:95:a9:
c8:28:2d:86:3d:95:c2:52:d5:27:14:fa:69:8d:22:85:0f:f9:
58:80:6a:34:f6:02:14:6f:7a:59:9f:68:88:a3:81:e4:94:ad:
b9:94:83:e1:29:ff:3a:97:c9:70:2d:ef:3e:72:29:11:c7:3c:
5a:c5:e8:55:1c:3f:d7:96:95:a9:84:8a:9a:78:76:8c:f0:fd:
1c:a3:b3:37:2a:76:34:82:85:d9:34:02:b2:4e:bf:85:21:35:
6d:c9:89:bd:3a:7f:94:31:ec:6d:7f:ef:8a:34:5a:a6:c4:a0:
8f:0e:be:c2:d1:ea:6b:e4:a5:32:c5:1f:66:74:37:aa:93:78:
30:b9:1f:0c:28:c2:cf:15:57:6e:bc:61:a6:7b:f5:8c:f7:c6:
d9:fa:af:bf:c4:56:0c:20:b4:b1:27:48:a9:72:9e:53:01:70:
19:be:05:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:49 2026 by rpki-client