Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b51ec4-0be7-40ff-96a5-632e826ddfc6/1/pOAhVPJf6O9wNihteq6arnOg1yA.mft
File: pOAhVPJf6O9wNihteq6arnOg1yA.mft (raw, json)
Hash identifier: Lt7p2jo9xb+ozyqLh4dnz1UpYlNt9MLlXOyHvxzosK0=
Subject key identifier: 03:90:EA:69:37:56:9C:59:13:72:8F:B6:4F:F5:BC:12:16:B8:30:26
Authority key identifier: A4:E0:21:54:F2:5F:E8:EF:70:36:28:6D:7A:AE:9A:AE:73:A0:D7:20
Certificate issuer: /CN=a4e02154f25fe8ef7036286d7aae9aae73a0d720
Certificate serial: 019D2816F6CC1E68CB403B357020897406D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOAhVPJf6O9wNihteq6arnOg1yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b51ec4-0be7-40ff-96a5-632e826ddfc6/1/pOAhVPJf6O9wNihteq6arnOg1yA.mft
Manifest number: B0
Signing time: Thu 26 Mar 2026 03:01:26 +0000
Manifest this update: Thu 26 Mar 2026 03:01:26 +0000
Manifest next update: Fri 27 Mar 2026 03:01:26 +0000
Files and hashes: 1: pOAhVPJf6O9wNihteq6arnOg1yA.crl (hash: kQaGRcJypNjAP6oVos+Vis99gBHrj6qLEgFNWBxjv2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b51ec4-0be7-40ff-96a5-632e826ddfc6/1/pOAhVPJf6O9wNihteq6arnOg1yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b51ec4-0be7-40ff-96a5-632e826ddfc6/1/pOAhVPJf6O9wNihteq6arnOg1yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOAhVPJf6O9wNihteq6arnOg1yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f6:cc:1e:68:cb:40:3b:35:70:20:89:74:06:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e02154f25fe8ef7036286d7aae9aae73a0d720
Validity
Not Before: Mar 26 03:01:26 2026 GMT
Not After : Mar 27 03:01:26 2026 GMT
Subject: CN=0390ea6937569c5913728fb64ff5bc1216b83026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:3f:20:00:15:72:41:a6:09:32:0e:c9:03:
ea:fb:ab:6a:55:1e:0f:82:85:8c:ba:ab:e9:ec:c1:
49:eb:08:c7:06:fc:30:50:87:95:ce:b3:64:6e:17:
8c:61:2f:b6:ae:da:76:61:41:21:cb:b5:28:d4:b4:
b2:9d:12:9c:d0:54:3c:de:dd:61:d3:19:86:cf:a1:
44:f1:b3:e2:f9:33:32:c1:37:e5:ec:ed:8c:8a:52:
03:aa:8c:a8:8b:34:e8:5b:94:fb:56:47:21:d9:1a:
71:4d:b6:0e:2e:72:13:19:c4:45:79:61:73:f3:93:
c7:2e:a5:6d:80:81:d0:ae:fc:1f:ae:c6:5f:70:dc:
cc:5f:0e:1c:d5:46:ce:87:08:8f:b1:66:ec:24:29:
82:c2:bc:e0:ac:e5:67:41:ca:ce:e5:57:03:ec:58:
14:a8:18:f2:0d:5e:09:08:f2:b7:76:78:a1:1e:17:
e8:ea:09:fb:70:e4:60:37:0c:4d:83:89:8b:d9:d8:
1e:cc:c5:9a:bd:9b:21:cd:89:27:f3:a9:50:8e:0b:
9f:e4:4c:75:2d:55:d9:72:0d:0b:11:c2:23:0e:61:
66:b3:dd:12:8b:25:60:7a:ad:3c:64:41:ab:7a:79:
e7:1b:b3:97:f7:4e:1c:89:85:64:ff:eb:cb:29:33:
de:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:90:EA:69:37:56:9C:59:13:72:8F:B6:4F:F5:BC:12:16:B8:30:26
X509v3 Authority Key Identifier:
keyid:A4:E0:21:54:F2:5F:E8:EF:70:36:28:6D:7A:AE:9A:AE:73:A0:D7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOAhVPJf6O9wNihteq6arnOg1yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b51ec4-0be7-40ff-96a5-632e826ddfc6/1/pOAhVPJf6O9wNihteq6arnOg1yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b51ec4-0be7-40ff-96a5-632e826ddfc6/1/pOAhVPJf6O9wNihteq6arnOg1yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:dd:8d:10:33:98:a9:14:31:5a:aa:a2:fb:d8:65:eb:8f:8d:
73:61:0f:d8:06:d8:46:09:5e:96:bb:ff:7c:e6:82:98:30:2c:
af:ee:d0:26:f0:0c:58:f7:e0:4a:a0:d4:a9:00:0e:cb:a6:64:
87:78:b8:a2:82:fc:04:24:a0:ee:e5:3b:2c:ec:30:8f:98:7d:
8d:9f:f8:48:2d:df:6f:cd:ee:62:c3:90:87:06:2f:0a:41:71:
7d:1d:69:54:88:b0:cf:f3:71:4d:d6:b3:9f:02:26:9b:ce:62:
77:1b:36:31:f7:9d:cd:6a:16:d7:f0:7c:e4:13:6a:a6:f6:3a:
48:7c:16:e9:0c:21:d1:76:57:91:cb:06:d2:13:dd:94:76:c7:
fb:51:cc:6b:82:9f:a3:60:1c:51:a8:bc:ba:e2:c4:62:4c:d3:
ec:56:3d:c6:a8:10:0a:a9:37:f9:7f:2c:dd:a1:36:c5:7f:5c:
d4:77:de:d0:eb:b8:3f:85:98:32:bd:f9:ee:1b:62:29:82:ca:
ff:4a:68:c1:0c:cd:d6:88:6a:96:36:5a:64:fa:23:82:20:9d:
80:76:d7:8c:5f:6b:71:47:74:d8:11:fc:6b:f9:1a:2f:46:1c:
0e:0b:ef:5e:de:b3:00:3d:94:bf:54:ed:b6:0a:36:86:59:45:
67:e8:eb:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFvbMHmjLQDs1cCCJdAbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZTAyMTU0ZjI1ZmU4ZWY3MDM2Mjg2ZDdhYWU5YWFlNzNh
MGQ3MjAwHhcNMjYwMzI2MDMwMTI2WhcNMjYwMzI3MDMwMTI2WjAzMTEwLwYDVQQD
EygwMzkwZWE2OTM3NTY5YzU5MTM3MjhmYjY0ZmY1YmMxMjE2YjgzMDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwok/IAAVckGmCTIOyQPq+6tqVR4P
goWMuqvp7MFJ6wjHBvwwUIeVzrNkbheMYS+2rtp2YUEhy7Uo1LSynRKc0FQ83t1h
0xmGz6FE8bPi+TMywTfl7O2MilIDqoyoizToW5T7Vkch2RpxTbYOLnITGcRFeWFz
85PHLqVtgIHQrvwfrsZfcNzMXw4c1UbOhwiPsWbsJCmCwrzgrOVnQcrO5VcD7FgU
qBjyDV4JCPK3dnihHhfo6gn7cORgNwxNg4mL2dgezMWavZshzYkn86lQjguf5Ex1
LVXZcg0LEcIjDmFms90SiyVgeq08ZEGrennnG7OX904ciYVk/+vLKTPekwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOQ6mk3VpxZE3KPtk/1vBIWuDAmMB8GA1UdIwQY
MBaAFKTgIVTyX+jvcDYobXqumq5zoNcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE9BaFZQSmY2Tzl3TmlodGVxNmFybk9nMXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iNTFlYzQtMGJlNy00MGZmLTk2YTUt
NjMyZTgyNmRkZmM2LzEvcE9BaFZQSmY2Tzl3TmlodGVxNmFybk9nMXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9iNTFlYzQtMGJlNy00MGZmLTk2YTUtNjMyZTgyNmRkZmM2
LzEvcE9BaFZQSmY2Tzl3TmlodGVxNmFybk9nMXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACt2NEDOY
qRQxWqqi+9hl64+Nc2EP2AbYRglelrv/fOaCmDAsr+7QJvAMWPfgSqDUqQAOy6Zk
h3i4ooL8BCSg7uU7LOwwj5h9jZ/4SC3fb83uYsOQhwYvCkFxfR1pVIiwz/NxTdaz
nwImm85idxs2MfedzWoW1/B85BNqpvY6SHwW6Qwh0XZXkcsG0hPdlHbH+1HMa4Kf
o2AcUai8uuLEYkzT7FY9xqgQCqk3+X8s3aE2xX9c1Hfe0Ou4P4WYMr357htiKYLK
/0powQzN1ohqljZaZPojgiCdgHbXjF9rcUd02BH8a/kaL0YcDgvvXt6zAD2Uv1Tt
tgo2hllFZ+jrPw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:40 2026 by rpki-client