Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
File: pOeg0vxXpnuyt-hcPo14GSvKDxg.mft (raw, json)
Hash identifier: 8KVDGmfSCoIGVqWtbBITtXxg0ek+32IHku46kZp34cs=
Subject key identifier: 91:92:21:6C:F9:D4:79:E5:D3:94:AB:5A:EC:56:02:51:36:ED:A0:46
Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
Certificate issuer: /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Certificate serial: 019E205ADF285686192B31D60831C4ECD73A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
Manifest number: 0D8B
Signing time: Wed 13 May 2026 08:01:26 +0000
Manifest this update: Wed 13 May 2026 08:01:26 +0000
Manifest next update: Thu 14 May 2026 08:01:26 +0000
Files and hashes: 1: Bl3mQJLo6QKNL3wv2g2LT4Q-5M0.roa (hash: ff2pO6lqKtNRUUCSbOJc5+AZduH9jyQWddIlmRJigdQ=)
2: pOeg0vxXpnuyt-hcPo14GSvKDxg.crl (hash: XhJeWTOYg1Q8f519AeDzQ3QiCyiOvG5EN6EvbXw7t9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:df:28:56:86:19:2b:31:d6:08:31:c4:ec:d7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Validity
Not Before: May 13 08:01:26 2026 GMT
Not After : May 14 08:01:26 2026 GMT
Subject: CN=9192216cf9d479e5d394ab5aec56025136eda046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0b:aa:aa:6f:af:7b:a1:9b:3c:ec:2e:6c:ae:
65:ae:72:d9:61:58:87:a6:b5:13:fe:8e:15:a4:59:
c4:91:57:a5:2f:1d:9c:16:43:84:78:51:55:9f:6f:
d7:e4:89:4f:c6:5a:62:a1:ac:cf:42:39:d8:fb:2f:
0c:be:7c:83:bd:76:1a:30:71:01:89:17:5d:34:94:
24:c6:57:e2:76:67:58:7e:0d:06:cd:eb:d8:fc:22:
00:e8:91:77:48:9e:a8:26:94:22:48:ac:67:48:d6:
2c:e8:de:65:1f:69:99:c7:4c:a9:93:ab:87:6d:00:
fb:ab:de:ce:54:47:58:0f:03:18:12:dd:e4:d2:03:
1b:36:cf:db:3b:16:72:d7:ee:1a:2f:2f:e1:03:57:
84:cc:62:a0:6f:7d:06:f3:72:be:0b:a7:0b:10:2f:
f7:8e:c1:60:fd:ae:f5:31:73:4a:12:45:07:9b:3d:
d7:42:97:64:20:41:e2:65:5a:03:5b:3c:23:4b:92:
d4:14:5f:6f:7b:89:22:94:82:18:7e:e5:d7:0b:d2:
49:03:04:a8:e6:e7:f0:0c:9e:46:80:3b:2b:b2:aa:
29:59:b1:20:f8:e1:1b:c5:7e:19:dc:99:d5:26:5a:
f5:0c:28:00:01:c0:b9:55:53:36:f7:c8:cf:8c:45:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:92:21:6C:F9:D4:79:E5:D3:94:AB:5A:EC:56:02:51:36:ED:A0:46
X509v3 Authority Key Identifier:
keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:df:f8:7c:85:70:80:ee:ab:53:62:16:74:59:59:2d:44:b6:
88:b5:da:c1:5e:79:a8:f0:91:cc:66:ce:d5:1a:b1:2c:8d:65:
da:12:95:ea:74:be:76:b8:ae:d5:77:a7:69:f0:1b:52:20:5b:
18:59:99:30:72:21:f7:ab:bd:4b:70:78:f1:52:99:2b:06:37:
ce:e1:0a:77:fd:ee:dc:f1:2e:30:a2:ee:c3:d1:2d:05:7c:36:
93:47:3b:c0:d3:2a:35:e6:2f:05:ec:be:7f:77:f7:7f:77:f5:
0a:10:25:92:3b:56:8f:60:4a:dc:28:b2:49:e1:74:3a:b3:6a:
8c:50:c0:f0:25:b8:69:8d:49:ce:01:a4:8d:aa:e5:d2:89:8d:
61:be:da:eb:05:02:45:76:f1:3a:31:ae:cd:22:18:f3:7a:cc:
0f:ba:04:95:06:ab:4e:91:08:2a:2c:0b:c8:3c:bf:f2:9b:95:
e8:94:11:fe:0a:9e:c1:cb:03:b3:68:f7:cc:ca:b2:78:7e:d9:
28:50:7c:f3:5d:f2:89:a1:25:a9:cb:bc:b1:d5:54:68:32:1d:
15:c7:22:f9:f9:1e:db:0d:d7:34:57:c2:0e:3e:70:5c:76:1d:
18:c5:33:03:68:09:af:21:cb:31:a2:55:8f:3e:e5:83:3c:74:
d7:d5:dc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:33:11 2026 by rpki-client