Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: xp2WgiAYx3wOok/o8v2gbvkwq7cKQ/ZSVKRz+JJTpUc=
Subject key identifier: 68:0D:41:2D:D1:3D:27:0C:37:E3:A1:9F:B1:FD:FE:99:62:3F:97:56
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 019D27DF65D52574344D0A3533A8AFA5C92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 02:00:45 +0000
Manifest this update: Thu 26 Mar 2026 02:00:45 +0000
Manifest next update: Fri 27 Mar 2026 02:00:45 +0000
Files and hashes: 1: HvZskpw_21d-SsBdoI8uL-bUlg4.roa (hash: KmGPloyU4A9Te8//GhzETG1AxiKoerTgtl8Qk1jFdRg=)
2: cJd8S-uaABuXAFfWeDiL3NUesCo.roa (hash: 0fC3HtMmFazUCnfsakHQvupcYRxYZ5KP3wkprur/geI=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: Z5csISjo1Gmo3SgCg6jdBehYf9oAWrtK/A+OGSTevJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:65:d5:25:74:34:4d:0a:35:33:a8:af:a5:c9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Mar 26 02:00:45 2026 GMT
Not After : Mar 27 02:00:45 2026 GMT
Subject: CN=680d412dd13d270c37e3a19fb1fdfe99623f9756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:d6:80:86:16:b3:8d:29:3b:db:14:36:0b:
1f:86:b0:5d:68:38:c8:17:c9:ea:75:a4:20:d8:c1:
22:f5:c8:ae:fe:d6:a3:c5:15:1f:49:84:1f:bf:50:
e8:fa:ea:b3:b8:59:ef:af:be:73:52:45:42:4a:1e:
09:e1:b0:59:11:e8:a9:b5:91:53:19:69:d1:2b:f7:
18:47:16:93:ef:36:cb:3c:68:6a:45:5a:4d:c1:d4:
75:54:ec:ad:63:97:22:c9:79:81:b3:6c:e5:73:d5:
5a:1e:5c:e4:ce:e1:17:d3:5c:6f:e2:3c:56:10:ba:
59:da:28:72:05:07:23:9b:4e:a1:31:b1:49:4e:47:
48:d0:9e:e6:82:23:4d:cb:c6:d5:35:8d:07:9a:ec:
da:57:d1:0d:24:a3:55:5d:6a:fa:12:22:78:ab:23:
3f:9c:ba:af:87:32:8e:df:86:a0:7a:4a:4a:31:63:
24:6a:5c:3b:c2:f0:fc:c2:ec:7b:12:75:c9:11:a1:
95:b8:4d:18:dd:d2:7a:a2:47:e9:b6:db:46:f0:27:
87:21:4e:f0:f9:49:d2:48:21:17:58:67:69:2b:82:
bf:32:9d:9b:2a:57:4a:6f:08:f8:7e:b7:58:ba:e9:
28:83:74:f3:f9:45:fd:40:95:ca:60:11:5f:a4:dd:
37:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0D:41:2D:D1:3D:27:0C:37:E3:A1:9F:B1:FD:FE:99:62:3F:97:56
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a1:01:bd:e5:93:72:b0:5c:72:23:2c:03:9c:ce:a9:a1:bd:
e1:60:bb:0f:0d:16:19:6b:c3:a4:d3:62:6f:e2:a2:c2:83:aa:
b7:23:67:15:6c:37:a7:96:fd:f2:b4:43:2f:00:32:83:99:e6:
9d:da:62:b0:66:b7:be:2e:91:2b:34:3f:c7:25:23:7f:79:09:
c1:1d:4a:3d:fe:82:82:d5:cf:b9:ea:29:89:12:13:cf:67:75:
47:d3:48:b8:85:f9:71:a8:38:57:61:3d:06:e5:08:03:a5:70:
3e:3b:22:de:4c:e0:47:ae:a1:13:07:84:17:e7:f9:c2:6b:70:
a0:9d:1b:d1:94:2a:ec:f2:f7:2b:90:dd:40:3c:57:7f:91:d4:
91:df:01:a3:e8:49:e0:71:51:15:a6:87:dc:0f:91:68:38:66:
56:4b:8a:b3:54:3e:57:77:05:97:e1:53:e9:c0:bd:b2:89:84:
18:19:83:2b:11:40:27:df:9d:2f:23:7c:31:5c:9b:a9:8b:9a:
5a:99:81:fb:71:d6:c4:13:d2:ca:5d:c6:b5:a3:08:df:3e:0f:
d9:67:06:8b:27:b0:d3:ce:cf:0f:d3:79:8e:09:90:5a:6e:46:
c1:24:3c:76:49:7c:61:69:2c:56:3f:86:3c:2a:17:d0:ed:d1:
da:b1:6d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:01 2026 by rpki-client