Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: R6BIUuk1q6QbRt0xePcn7YJmja8GsYsnbN/4EXoEuW0=
Subject key identifier: 41:70:17:5F:C8:9B:79:E7:63:EA:D5:29:E8:35:26:BB:48:EA:A4:AA
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 01A0D64BD1DF51BA216657F5B9CB446FFDDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 02:01:28 +0000
Manifest this update: Fri 25 Sep 2026 02:01:28 +0000
Manifest next update: Sat 26 Sep 2026 02:01:28 +0000
Files and hashes: 1: HvZskpw_21d-SsBdoI8uL-bUlg4.roa (hash: KmGPloyU4A9Te8//GhzETG1AxiKoerTgtl8Qk1jFdRg=)
2: cJd8S-uaABuXAFfWeDiL3NUesCo.roa (hash: 0fC3HtMmFazUCnfsakHQvupcYRxYZ5KP3wkprur/geI=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: YWCJx77DN3j3wpSXoZAWESjraauEzbQyF/xXVCfW7lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:d1:df:51:ba:21:66:57:f5:b9:cb:44:6f:fd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Sep 25 02:01:28 2026 GMT
Not After : Sep 26 02:01:28 2026 GMT
Subject: CN=4170175fc89b79e763ead529e83526bb48eaa4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e1:78:c4:95:f7:15:3f:02:48:4b:f5:bd:1c:
67:c2:67:2e:7e:d4:77:40:51:b4:86:b7:14:79:8c:
36:88:23:3b:56:1a:98:18:9c:0e:07:8d:76:db:40:
b2:9e:e7:98:90:58:33:ce:ea:6f:c7:aa:9b:6b:22:
c7:95:e7:31:cd:d2:99:dc:c2:46:9f:d9:0c:30:ad:
c0:e0:49:72:4f:4e:8d:d7:42:3c:ea:dd:b0:a1:17:
ae:b3:ed:0c:ff:2b:1c:8f:ee:bb:81:cb:e9:13:c3:
98:d0:0f:f1:77:10:e8:4f:25:6f:aa:d2:6a:ec:9e:
c5:50:95:45:41:83:24:b2:d3:c9:a0:88:96:cf:08:
7d:96:7b:ed:63:42:e8:40:7d:e0:91:6e:51:aa:88:
47:52:f3:43:64:29:62:d6:35:65:aa:65:e3:dd:77:
2e:a7:c4:34:c1:e1:71:d2:79:7b:c7:5a:92:67:dd:
56:4a:ad:91:cb:23:68:72:2e:e7:db:d0:1d:34:a8:
84:d2:2e:a6:89:17:eb:38:f3:71:39:9d:53:c1:9c:
6c:c8:52:72:0b:4f:19:e7:a0:36:40:0b:93:a7:30:
8f:8e:7c:1d:69:5f:99:e1:f0:c5:7c:e4:6c:40:bb:
01:62:49:e3:a5:02:f8:0d:9d:44:a3:6f:c0:b3:eb:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:70:17:5F:C8:9B:79:E7:63:EA:D5:29:E8:35:26:BB:48:EA:A4:AA
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:73:48:7b:30:49:52:3f:7a:a9:c9:39:7b:f7:ff:eb:e8:d5:
9b:5c:e3:f2:7e:84:00:40:3d:d3:e6:17:29:c1:30:b9:fa:a4:
17:cf:34:dd:bd:f5:b1:ac:dd:79:2f:e9:4a:5e:d2:bc:a4:19:
b8:cb:af:40:63:be:23:d0:8d:23:3f:59:06:12:e4:9e:91:b0:
2d:09:23:52:44:28:82:41:25:0a:53:d5:86:d7:90:86:cf:e7:
1c:da:8c:5c:60:7b:ad:97:c2:4b:31:b1:42:a1:18:0f:e5:ff:
bb:8a:ca:45:d3:fe:7a:b3:c1:23:87:85:de:46:57:0d:63:3b:
4d:f4:9f:29:64:20:da:74:df:0e:20:7a:56:5b:79:ea:99:df:
8b:98:4e:16:0e:26:ea:c8:51:fb:a5:c4:33:92:6a:80:62:d4:
67:5b:02:c4:13:4c:7c:c9:71:d0:04:6d:83:31:4d:ba:8d:cb:
dd:c7:f6:f2:36:c9:61:e6:db:0a:a4:ac:b3:94:11:bd:40:6b:
82:d8:af:f7:f6:e3:4a:7d:df:87:f4:fa:15:da:46:3f:f5:74:
aa:cf:5f:4e:a0:fd:22:9e:e8:77:b9:b7:45:fe:5c:c2:70:a0:
c8:dc:af:fa:72:76:04:db:bf:6c:95:ba:6d:58:1b:ab:7a:ee:
de:f5:d1:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWS9HfUbohZlf1uctEb/3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OGZmOTIyOWVmZDhkMTJiNDI3M2YzNDZmOGM2NDU0ZWE1
ODdlY2MwHhcNMjYwOTI1MDIwMTI4WhcNMjYwOTI2MDIwMTI4WjAzMTEwLwYDVQQD
Eyg0MTcwMTc1ZmM4OWI3OWU3NjNlYWQ1MjllODM1MjZiYjQ4ZWFhNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OF4xJX3FT8CSEv1vRxnwmcuftR3
QFG0hrcUeYw2iCM7VhqYGJwOB41220CynueYkFgzzupvx6qbayLHlecxzdKZ3MJG
n9kMMK3A4ElyT06N10I86t2woReus+0M/yscj+67gcvpE8OY0A/xdxDoTyVvqtJq
7J7FUJVFQYMkstPJoIiWzwh9lnvtY0LoQH3gkW5RqohHUvNDZCli1jVlqmXj3Xcu
p8Q0weFx0nl7x1qSZ91WSq2RyyNoci7n29AdNKiE0i6miRfrOPNxOZ1TwZxsyFJy
C08Z56A2QAuTpzCPjnwdaV+Z4fDFfORsQLsBYknjpQL4DZ1Eo2/As+trJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFwF1/Im3nnY+rVKeg1JrtI6qSqMB8GA1UdIwQY
MBaAFKaP+SKe/Y0StCc/NG+MZFTqWH7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yZmY5OGUtNmZmOS00MjMzLWI5ZjEt
MjI3ZTIxZTY5MWU3LzEvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yZmY5OGUtNmZmOS00MjMzLWI5ZjEtMjI3ZTIxZTY5MWU3
LzEvcG9fNUlwNzlqUkswSno4MGI0eGtWT3BZZnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3NIezBJ
Uj96qck5e/f/6+jVm1zj8n6EAEA90+YXKcEwufqkF8803b31sazdeS/pSl7SvKQZ
uMuvQGO+I9CNIz9ZBhLknpGwLQkjUkQogkElClPVhteQhs/nHNqMXGB7rZfCSzGx
QqEYD+X/u4rKRdP+erPBI4eF3kZXDWM7TfSfKWQg2nTfDiB6Vlt56pnfi5hOFg4m
6shR+6XEM5JqgGLUZ1sCxBNMfMlx0ARtgzFNuo3L3cf28jbJYebbCqSss5QRvUBr
gtiv9/bjSn3fh/T6FdpGP/V0qs9fTqD9Ip7od7m3Rf5cwnCgyNyv+nJ2BNu/bJW6
bVgbq3ru3vXRnQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:29:34 2026 by rpki-client