Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: NKuXfI2EVMbT2QT8grR5WBxHdNIvADR0eXf/VW2TMpY=
Subject key identifier: BD:84:F8:3E:89:70:36:B0:C7:05:12:E8:02:59:F2:5B:B4:2C:25:E6
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 019E1F11B0154D40FA432CCA5881E1F068F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 02:01:53 +0000
Manifest this update: Wed 13 May 2026 02:01:53 +0000
Manifest next update: Thu 14 May 2026 02:01:53 +0000
Files and hashes: 1: HvZskpw_21d-SsBdoI8uL-bUlg4.roa (hash: KmGPloyU4A9Te8//GhzETG1AxiKoerTgtl8Qk1jFdRg=)
2: cJd8S-uaABuXAFfWeDiL3NUesCo.roa (hash: 0fC3HtMmFazUCnfsakHQvupcYRxYZ5KP3wkprur/geI=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: c6+tcwYjQxPKfo2laondoS3bBHd0fWYwbJaxja1pi+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:b0:15:4d:40:fa:43:2c:ca:58:81:e1:f0:68:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: May 13 02:01:53 2026 GMT
Not After : May 14 02:01:53 2026 GMT
Subject: CN=bd84f83e897036b0c70512e80259f25bb42c25e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:b8:f2:a3:dd:a5:96:5b:db:fc:b2:c1:83:
a4:7f:c3:e2:9c:19:17:b9:db:2b:b1:0d:ea:24:ba:
ce:65:a7:93:84:44:58:6e:a3:d9:c2:41:50:7a:bf:
c4:64:33:fd:4e:9f:5b:f3:dd:a3:d1:7e:0d:5f:d7:
39:10:6c:45:0d:97:5b:28:d4:3f:52:ae:23:7e:8b:
07:46:76:cd:54:87:82:32:e9:d2:6e:08:19:92:64:
c7:7a:b9:fd:80:36:63:d4:40:2c:3b:ef:1d:91:ee:
f4:95:8f:08:44:3d:f8:25:2c:7d:17:6f:83:16:5b:
5c:9d:be:5f:74:d6:9a:59:5b:50:70:2f:c6:3b:32:
ab:72:11:6c:74:96:ad:c5:a4:ff:6e:83:09:e3:f3:
4b:de:25:34:bb:92:45:f1:e7:22:9b:7d:f4:ce:d7:
c6:44:8a:aa:a5:e5:6d:bc:65:8d:1e:15:74:1f:f1:
3b:5f:51:20:83:39:ef:41:86:1c:18:4e:e0:85:a2:
d5:c8:84:e3:1f:a0:c2:f3:d9:17:bd:34:1d:82:bc:
5e:86:0f:9a:a0:cd:20:56:83:88:d6:f0:81:28:fe:
9a:fc:02:74:f6:84:0f:ac:b2:3d:bf:0a:4f:4c:ec:
11:9c:ae:26:5d:c8:5a:14:51:f5:38:fc:cc:e2:72:
cb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:84:F8:3E:89:70:36:B0:C7:05:12:E8:02:59:F2:5B:B4:2C:25:E6
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:56:5f:aa:d1:fc:f7:8c:e4:34:b7:f0:12:1c:0b:5c:5e:e6:
0b:f6:e4:93:ba:e1:46:15:09:24:e8:c1:02:f5:b8:d2:a1:1c:
01:f8:6a:35:57:d5:2f:a4:c5:05:13:c9:ee:90:ef:eb:10:f2:
ef:ed:68:8f:2e:ef:5a:91:99:89:93:09:45:27:a2:4f:a8:cd:
bb:ea:ab:d8:a6:98:21:cd:b2:eb:5a:9c:76:f7:54:b5:39:0c:
42:6a:19:ff:53:b3:da:92:09:bd:3e:19:8c:66:db:e8:b6:87:
78:60:29:89:50:30:0a:ef:14:a4:f8:a0:8c:ee:bf:43:95:c5:
1d:a9:78:93:75:3d:e6:27:a3:0e:3e:d4:13:99:17:2b:2f:77:
ce:a4:21:6c:b4:b4:f7:37:98:db:a3:44:46:e6:0b:d9:ff:e6:
c6:75:fb:b7:a2:bd:76:fd:2b:a5:e8:f6:6b:dd:e1:07:4b:00:
e7:ee:fd:5a:ad:97:af:89:14:a9:ca:ea:fc:e2:59:6c:3d:30:
db:72:19:61:8b:50:68:ed:e1:b9:a5:0e:28:8f:ad:5f:37:46:
14:aa:61:07:af:41:80:2f:a5:f0:6e:fb:d0:f8:1a:8b:89:f8:
a5:89:99:1f:87:21:ff:6f:85:be:af:31:d8:c2:a8:12:c1:07:
5b:53:24:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:09 2026 by rpki-client