Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b2e161-1512-44fa-bc52-8080bb0dc45a/1/pOdI-oL64pRirh4wH5ZftkuWxzE.mft
File: pOdI-oL64pRirh4wH5ZftkuWxzE.mft (raw, json)
Hash identifier: ECQMR+a9HPAgAFIgijz73ok5rDtwpheEAtQ9FmDnDdM=
Subject key identifier: 74:8E:0C:5A:2B:47:A6:F0:15:99:49:E7:25:F7:4C:71:12:AE:84:B1
Authority key identifier: A4:E7:48:FA:82:FA:E2:94:62:AE:1E:30:1F:96:5F:B6:4B:96:C7:31
Certificate issuer: /CN=a4e748fa82fae29462ae1e301f965fb64b96c731
Certificate serial: 019D27DF994E79178D126B187AACAFC0AD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOdI-oL64pRirh4wH5ZftkuWxzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b2e161-1512-44fa-bc52-8080bb0dc45a/1/pOdI-oL64pRirh4wH5ZftkuWxzE.mft
Manifest number: 22
Signing time: Thu 26 Mar 2026 02:00:58 +0000
Manifest this update: Thu 26 Mar 2026 02:00:58 +0000
Manifest next update: Fri 27 Mar 2026 02:00:58 +0000
Files and hashes: 1: pOdI-oL64pRirh4wH5ZftkuWxzE.crl (hash: nkR4XpIM28TAIVoGUqeLC5MKonOSl4wvvTZMd9O/C7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b2e161-1512-44fa-bc52-8080bb0dc45a/1/pOdI-oL64pRirh4wH5ZftkuWxzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b2e161-1512-44fa-bc52-8080bb0dc45a/1/pOdI-oL64pRirh4wH5ZftkuWxzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOdI-oL64pRirh4wH5ZftkuWxzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:99:4e:79:17:8d:12:6b:18:7a:ac:af:c0:ad:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e748fa82fae29462ae1e301f965fb64b96c731
Validity
Not Before: Mar 26 02:00:58 2026 GMT
Not After : Mar 27 02:00:58 2026 GMT
Subject: CN=748e0c5a2b47a6f0159949e725f74c7112ae84b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9f:a9:8d:26:1c:84:d8:43:79:37:07:4f:27:
55:c9:18:6b:2b:38:7d:7f:78:be:c4:49:98:c3:cf:
d3:e4:63:31:ca:e6:15:ea:85:ad:c0:49:9d:d6:86:
59:82:49:1e:fe:82:93:98:0b:93:bd:a2:4c:b4:2b:
a5:d2:27:2a:04:2e:18:5c:56:e6:0d:a0:67:02:f8:
0e:21:90:da:f5:fc:26:85:74:ce:30:e8:e6:c8:84:
34:2a:12:54:f4:88:ab:0d:03:36:0b:be:a3:1a:b1:
87:80:2c:ce:dc:83:22:c1:30:d4:d8:fd:36:52:82:
f5:a2:be:ae:66:b0:de:e3:d2:51:15:53:e8:eb:e6:
44:43:c2:b1:4c:92:bc:45:2f:11:c2:1a:39:ce:d6:
a8:b1:8c:5d:b3:63:11:8c:be:c1:63:72:30:b7:de:
1d:11:05:9f:12:53:fa:93:90:d7:93:34:23:01:7a:
e4:53:72:32:a4:6c:cc:d9:41:3f:76:61:17:ff:d8:
60:90:88:f3:f2:42:c5:fc:03:19:01:c8:a9:0a:3d:
a8:2f:86:69:9b:06:7d:77:6b:cb:3f:6f:55:59:f5:
66:9a:e1:44:07:4a:97:03:5e:93:fb:af:d0:f4:e2:
77:ce:9e:2b:f0:70:20:e8:c9:85:c5:78:c4:5c:2e:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8E:0C:5A:2B:47:A6:F0:15:99:49:E7:25:F7:4C:71:12:AE:84:B1
X509v3 Authority Key Identifier:
keyid:A4:E7:48:FA:82:FA:E2:94:62:AE:1E:30:1F:96:5F:B6:4B:96:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOdI-oL64pRirh4wH5ZftkuWxzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b2e161-1512-44fa-bc52-8080bb0dc45a/1/pOdI-oL64pRirh4wH5ZftkuWxzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b2e161-1512-44fa-bc52-8080bb0dc45a/1/pOdI-oL64pRirh4wH5ZftkuWxzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:44:12:fe:e4:63:f4:e9:43:18:e8:9b:51:6f:e1:84:63:16:
ea:32:35:9b:b4:d8:73:10:f9:a6:3a:71:93:16:ce:fd:3c:94:
8f:24:71:29:ae:e3:74:3b:9e:8e:8b:59:d3:7d:1b:ce:ab:07:
35:b4:1e:43:d0:f4:30:5a:a7:08:08:a9:e9:49:be:05:9b:57:
0c:a9:0e:1e:d5:c5:20:60:95:c2:0f:3c:ba:6e:32:11:35:01:
e4:5e:30:fa:cf:51:90:18:fa:08:33:fe:0b:aa:19:87:92:51:
f8:ee:5d:1e:7b:47:0f:b8:b3:b8:b2:ae:37:24:67:1b:15:14:
e4:a7:d1:67:db:0a:62:15:f0:e1:74:29:53:b5:6f:7f:72:2d:
5b:b9:1b:e9:ec:f2:f8:5c:0b:52:16:54:62:3a:93:04:3b:73:
3d:47:8e:8f:8d:a9:c9:44:b8:3a:47:5d:a4:5e:b2:ec:07:32:
8f:cc:c7:53:40:ad:b6:3f:ce:79:63:c4:67:47:bd:a4:84:8f:
24:3d:ff:fb:2b:bd:64:2a:79:9c:51:f0:77:38:25:d8:74:50:
b8:80:98:bf:6d:fc:d5:c8:2c:e2:5b:a3:c4:d0:f3:6f:38:ee:
d0:b3:c8:85:01:a2:b1:ed:b5:59:71:9e:73:c0:3b:d4:cf:33:
69:9f:82:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:44:52 2026 by rpki-client