Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
File: pOuOt7S2LtElTwBWTgPEBnq_v8k.mft (raw, json)
Hash identifier: CAr6+/9xUx4vOxEauSYmC85oAzr0pKPpnuTbWPtsA5s=
Subject key identifier: 26:7C:49:89:E5:78:07:8B:DC:AB:08:53:BD:34:20:8E:5B:2E:F1:F7
Authority key identifier: A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
Certificate issuer: /CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Certificate serial: 019D265FDEDA0AD6EAE772CDF956D11ACD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
Manifest number: 05D7
Signing time: Wed 25 Mar 2026 19:01:50 +0000
Manifest this update: Wed 25 Mar 2026 19:01:50 +0000
Manifest next update: Thu 26 Mar 2026 19:01:50 +0000
Files and hashes: 1: I8rso1XHHs_G2n3Bf0ez8yM6EOo.roa (hash: hlyEsK6AFvAxueY2ITDcDncXLHyD3I173M2xknmBdkA=)
2: pOuOt7S2LtElTwBWTgPEBnq_v8k.crl (hash: SGVz1YBhCObUEHZdTOUEemOF3eQYmWd++2kud8j3EqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:de:da:0a:d6:ea:e7:72:cd:f9:56:d1:1a:cd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Validity
Not Before: Mar 25 19:01:50 2026 GMT
Not After : Mar 26 19:01:50 2026 GMT
Subject: CN=267c4989e578078bdcab0853bd34208e5b2ef1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:01:50:00:0f:24:c0:fc:a7:c2:ea:2a:ec:
14:39:34:a0:64:57:10:54:fa:e4:5b:3a:88:17:f8:
13:8b:8b:5c:23:4a:76:36:7c:3a:0d:ef:09:6b:c3:
40:e8:5e:d9:ee:c4:7b:fb:a8:2a:7c:80:44:22:ab:
2d:a1:9c:e6:85:e7:22:45:0f:f3:c7:24:2c:80:c2:
42:54:bc:dd:3f:a4:ad:5e:a7:e3:78:27:dd:91:09:
f8:9f:45:26:60:90:07:92:c7:8a:3b:f5:64:1e:9a:
5a:07:e9:c5:7a:f4:2b:4e:2e:c4:99:fa:60:5b:8f:
66:60:f7:7e:8d:49:24:e4:b2:d0:c4:0c:21:e6:98:
ec:0b:59:58:e2:33:76:2d:bd:af:30:b4:89:a1:89:
27:d9:da:42:52:9d:ad:1b:2e:83:1f:ca:c6:ca:b7:
b8:b6:4e:23:1e:5c:86:64:47:69:ed:e8:7d:26:67:
a9:bc:b1:a2:6e:28:5b:74:37:6a:1a:92:07:f9:13:
d8:04:df:c4:50:91:12:71:a7:eb:0e:97:a8:57:c0:
6b:d7:d9:fd:f2:50:44:9d:c3:02:6a:55:43:9d:f5:
be:64:14:62:b6:aa:b4:8f:ba:5d:73:4a:89:f7:2f:
5c:c4:4a:98:3d:64:15:c1:73:9d:7c:9c:70:ef:90:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7C:49:89:E5:78:07:8B:DC:AB:08:53:BD:34:20:8E:5B:2E:F1:F7
X509v3 Authority Key Identifier:
keyid:A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8e:b0:d2:58:57:a0:f8:60:d2:98:c9:42:15:95:9f:a0:46:
7c:13:5d:71:2d:ee:26:80:e0:cf:97:9c:fd:f6:ef:0d:f9:5c:
f6:5f:b0:63:87:1a:f7:90:45:25:1e:33:f5:c6:17:73:13:b1:
72:6b:00:2e:57:09:3b:07:d4:a1:1d:2d:cf:ac:5b:af:84:fc:
90:e1:df:43:1a:10:49:9a:c2:01:50:e0:c8:f7:9d:78:f1:27:
48:83:93:cb:00:69:7f:13:d5:9f:7c:43:22:75:06:55:ea:58:
7e:86:2d:07:65:a3:e7:bd:91:0f:1c:8b:ca:35:a1:ec:8e:7f:
1e:20:44:12:17:b9:86:fb:ff:b4:b7:1b:d0:67:80:49:6a:9c:
b3:a7:5b:9f:d4:ec:9d:fb:01:17:eb:05:d6:cf:2c:4f:61:2c:
2c:b8:cf:fb:95:78:e0:d1:f8:4b:7e:70:88:0f:13:19:f0:f8:
61:f7:4d:53:63:d5:80:0d:05:1b:1c:5e:95:da:da:af:09:c6:
03:1e:80:e2:a2:3a:c9:9c:7a:8b:6a:40:30:56:32:1f:ea:e8:
58:33:cc:cc:88:97:28:7b:70:6c:c7:e7:64:1f:09:8e:f9:4e:
71:eb:da:b5:28:f2:d1:9b:cf:f7:69:89:ed:f4:69:d2:ac:f9:
72:99:2a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:36 2026 by rpki-client