Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
File: pOeg0vxXpnuyt-hcPo14GSvKDxg.mft (raw, json)
Hash identifier: Ez2x2J0Eb2aZFr0essPJZ0zH4HjtaJZkqnf8k8ACk3Y=
Subject key identifier: 41:1F:91:4D:51:7B:54:2D:36:1B:B8:D6:41:26:A0:2F:06:7F:10:F7
Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
Certificate issuer: /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Certificate serial: 01A145A9020502861CA32DAD8C02B3CEF5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
Manifest number: 0F2C
Signing time: Fri 16 Oct 2026 17:01:06 +0000
Manifest this update: Fri 16 Oct 2026 17:01:06 +0000
Manifest next update: Sat 17 Oct 2026 17:01:06 +0000
Files and hashes: 1: Bl3mQJLo6QKNL3wv2g2LT4Q-5M0.roa (hash: ff2pO6lqKtNRUUCSbOJc5+AZduH9jyQWddIlmRJigdQ=)
2: pOeg0vxXpnuyt-hcPo14GSvKDxg.crl (hash: iBfu4cPfO8dQbQTre6IXNssPRkZA+ZsQaPGP4f+Ybcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 15:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:a9:02:05:02:86:1c:a3:2d:ad:8c:02:b3:ce:f5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Validity
Not Before: Oct 16 17:01:06 2026 GMT
Not After : Oct 17 17:01:06 2026 GMT
Subject: CN=411f914d517b542d361bb8d64126a02f067f10f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1c:75:43:ac:60:e4:5d:bd:12:e7:4c:28:56:
55:1d:e4:d4:a3:bb:bd:8e:05:ee:c3:b9:e0:15:f0:
47:75:3f:b4:24:d7:a6:20:54:84:e1:b6:e8:69:5e:
23:4e:0b:0e:dc:88:27:49:62:71:ce:ad:15:53:39:
00:9b:86:0d:31:b2:da:5e:8c:a0:dc:9b:ef:f5:8b:
30:95:e1:89:ed:11:88:92:7a:b5:96:16:5b:0c:bd:
85:a3:ea:8a:ef:40:a3:b1:c7:5f:38:ac:f6:41:0b:
24:f6:e9:e0:3f:84:82:cc:29:5b:35:86:8c:21:e7:
9d:bd:c4:dd:f2:58:87:dd:07:66:94:59:b3:6b:3e:
bb:80:f5:52:a4:6f:fd:9a:7f:db:de:42:0f:24:53:
3d:be:d1:cf:bf:c7:f4:0c:f4:69:b9:27:99:c4:9d:
40:96:d5:9b:f6:6e:69:d6:ed:80:1d:88:ae:bc:6d:
af:16:9e:d3:c4:e3:e7:ba:e5:ae:3a:33:0b:54:52:
ea:c2:0b:4b:13:06:50:59:b6:79:79:6e:e1:c4:70:
64:36:d8:f1:c3:d1:07:26:d7:d3:32:19:66:99:11:
34:92:ab:5d:54:5e:ca:3d:f9:f6:86:d6:3b:50:97:
6d:05:08:75:ef:50:ea:77:0e:8a:31:72:f8:be:ac:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1F:91:4D:51:7B:54:2D:36:1B:B8:D6:41:26:A0:2F:06:7F:10:F7
X509v3 Authority Key Identifier:
keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b5:f9:f6:6e:92:47:58:48:3b:54:eb:6b:d2:c4:22:ee:1c:
61:24:df:b0:bd:a9:33:1e:9b:00:05:fc:99:71:76:ea:70:3d:
6d:72:a1:e4:c0:12:78:4d:ed:7f:a4:84:b0:73:c9:64:e8:4e:
ab:c1:b1:ed:b3:c6:dc:dc:e0:56:41:31:e2:b8:53:92:5c:50:
a3:f0:e0:8b:32:c3:90:7d:fa:08:2a:57:bc:25:9b:39:cb:81:
f6:87:5f:f2:e7:6a:c9:4c:c4:e6:20:4c:2e:aa:a3:69:12:67:
b6:13:5c:4c:47:18:39:5d:94:bd:94:a4:ba:39:d2:29:f8:9a:
8e:70:8d:f3:1d:cb:8f:fa:2d:49:73:64:fc:7e:60:ca:5b:67:
11:77:eb:3d:a6:95:c0:15:b8:f9:57:67:e0:eb:c9:87:89:97:
75:7f:e7:e7:a5:5d:c3:07:ee:7e:73:14:7f:8e:d8:6f:08:d4:
f5:53:d1:cb:b3:8a:17:48:a0:c6:46:74:c8:c2:c1:0c:6c:b9:
de:04:dd:7b:d5:0d:e6:76:0f:cc:ec:85:ef:26:e7:ab:11:ab:
80:e3:65:2e:fd:5b:b3:e5:b9:3a:3d:87:b0:61:43:30:33:ba:
d9:fc:dc:67:64:cc:de:89:2d:a7:ea:87:e5:c7:2d:19:ed:e6:
30:70:a6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 00:36:06 2026 by rpki-client