Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
File: pOeg0vxXpnuyt-hcPo14GSvKDxg.mft (raw, json)
Hash identifier: 7mdErD0Pxd19+HDLpyaWdN8XS0PlLZx8PHFSuD2E+r0=
Subject key identifier: FC:03:44:6B:AA:DD:CB:CA:24:AD:8A:22:9D:F7:D1:5B:FD:FB:6D:E2
Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
Certificate issuer: /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Certificate serial: 019D2928ECECDA4B61DA43C6FEB17AD19F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
Manifest number: 0D0B
Signing time: Thu 26 Mar 2026 08:00:41 +0000
Manifest this update: Thu 26 Mar 2026 08:00:41 +0000
Manifest next update: Fri 27 Mar 2026 08:00:41 +0000
Files and hashes: 1: Bl3mQJLo6QKNL3wv2g2LT4Q-5M0.roa (hash: ff2pO6lqKtNRUUCSbOJc5+AZduH9jyQWddIlmRJigdQ=)
2: pOeg0vxXpnuyt-hcPo14GSvKDxg.crl (hash: EM8gMZhRvLwn7LRw5WBUafR4TOe8tCNLzPyrmTNB0FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:ec:ec:da:4b:61:da:43:c6:fe:b1:7a:d1:9f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Validity
Not Before: Mar 26 08:00:41 2026 GMT
Not After : Mar 27 08:00:41 2026 GMT
Subject: CN=fc03446baaddcbca24ad8a229df7d15bfdfb6de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:eb:0a:a6:99:9c:ad:b5:af:83:e5:06:50:7b:
09:fd:e3:42:bf:5f:2e:53:83:ce:3a:74:46:fe:e1:
14:eb:b4:bd:80:b2:8f:51:e1:c1:b9:a3:87:d0:00:
de:0a:1c:91:5c:f7:4f:71:d9:be:67:fd:21:72:6a:
a4:5b:8e:59:8f:bd:ab:ef:13:f6:0d:f4:12:2a:ad:
e6:3c:dd:80:02:2c:6d:2c:4b:3b:18:9f:6a:25:b4:
5a:91:f6:84:07:28:5d:83:72:21:b2:23:32:a3:23:
23:59:7d:68:c3:4a:0b:11:65:9e:33:9e:08:13:60:
e2:82:02:8f:d2:b4:da:f6:49:3e:02:c9:00:b1:08:
e6:ac:f2:77:22:63:d6:fd:63:c0:8f:55:81:0b:1a:
05:1c:02:dd:46:9d:2d:14:33:61:59:fe:d3:45:55:
ec:8f:d9:24:56:50:ee:ea:74:eb:9e:33:c3:c5:b7:
b7:6a:b2:e7:e8:90:f1:d6:1e:20:39:a5:65:eb:04:
53:cc:8d:6e:76:e3:2b:51:22:2a:26:fd:af:b8:37:
46:26:2b:a3:b8:7e:d4:5f:b0:fc:90:74:00:a9:d0:
4c:04:f9:2e:18:33:b8:da:93:1d:ea:b4:e9:58:df:
c5:9e:ea:2a:e7:c4:2a:a8:62:88:ce:cb:02:5e:32:
2d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:03:44:6B:AA:DD:CB:CA:24:AD:8A:22:9D:F7:D1:5B:FD:FB:6D:E2
X509v3 Authority Key Identifier:
keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b0:60:b8:ba:90:51:4b:71:a3:14:32:98:34:cf:ee:c4:0a:
7e:b5:58:3c:76:b6:12:45:6b:93:2b:8a:b6:d0:5b:3f:fc:0b:
ea:4f:92:06:a4:1c:8a:ab:2f:43:71:ff:f4:90:da:a6:e5:8b:
80:4f:cf:d4:fc:5f:1e:a4:fe:94:51:2c:f0:23:f6:a4:5b:b1:
73:a0:b9:fc:cd:1b:cc:b0:d0:b5:1f:55:c4:19:68:30:29:73:
28:34:91:08:f3:19:8f:84:a7:f2:e1:1a:df:c5:98:34:19:b0:
db:b4:66:d7:90:6c:e8:3c:58:95:3e:45:8c:17:60:5c:a0:39:
5d:82:8e:ba:fd:1a:03:cc:f9:a1:53:d2:0c:c5:83:9a:a5:52:
8c:50:b3:7a:1a:3e:86:d4:1a:11:c4:d0:7e:de:f9:96:16:70:
1f:0f:11:dd:67:29:7f:9d:16:f2:0c:e6:36:60:bd:1e:40:4f:
12:f0:96:f6:3d:d6:54:f5:15:bf:b3:51:68:44:2c:64:61:5a:
7b:a4:b9:4b:eb:6a:dc:78:6f:b3:52:fa:cb:7b:12:2b:21:78:
6c:61:b2:80:99:75:1a:b7:29:8a:22:76:cd:2e:58:64:f1:03:
f4:8d:0a:f6:48:50:48:63:08:21:8d:fc:6a:7b:e2:a1:ee:c3:
a6:22:69:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:54:24 2026 by rpki-client