Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File: pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier: PG937UqQDpx0FUIhrolDdwJ7Pcw8TNwbxpBgw0gi78A=
Subject key identifier: 2E:0C:7A:FA:97:C8:AC:CA:57:D1:3C:89:43:6D:A3:D7:61:BE:7A:56
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 01A1291F33C5AD4E9C8B188B3A006034230A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number: 0E8B
Signing time: Sun 11 Oct 2026 04:01:12 +0000
Manifest this update: Sun 11 Oct 2026 04:01:12 +0000
Manifest next update: Mon 12 Oct 2026 04:01:12 +0000
Files and hashes: 1: RZZbXwpHPue2NW4m459EoqMZKyE.roa (hash: v17nBO3LbcF/rH9ckA2KnZ23x5seOdWkK+ByqrSeon0=)
2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: 7x7rfCmbuzQoEH2IjTZUvHifmiYcx5KVlHk8T4RF89U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1f:33:c5:ad:4e:9c:8b:18:8b:3a:00:60:34:23:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Oct 11 04:01:12 2026 GMT
Not After : Oct 12 04:01:12 2026 GMT
Subject: CN=2e0c7afa97c8acca57d13c89436da3d761be7a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:80:51:51:ab:c1:0a:57:1c:de:5a:44:58:
13:18:95:00:7c:0e:7a:12:46:68:b3:d1:76:a2:69:
d1:d1:03:9b:bf:1a:73:d3:84:3f:7a:7e:09:64:34:
0d:1f:14:0b:36:5c:15:89:51:f4:56:9a:3a:a7:9c:
31:9c:6a:17:0b:8f:d1:c3:42:06:ac:bb:f6:50:0c:
e5:2d:ed:a3:54:dc:4c:bf:c0:fd:50:04:94:8b:43:
4d:dc:37:bc:fd:03:d8:8b:21:2e:57:6e:22:c8:b3:
3b:16:1e:0d:72:59:67:e8:d6:79:21:30:87:80:19:
9e:30:22:dc:ca:c1:52:d2:80:94:5d:1d:22:29:34:
7c:8e:27:68:0c:94:50:7d:13:f9:54:86:2a:eb:84:
cf:be:47:c5:be:f1:fa:3e:6f:4f:bd:c3:30:33:b8:
a0:e8:18:d1:1d:f4:1a:8d:e7:a8:93:47:bd:cf:7b:
1c:ec:4f:00:ac:ca:d4:5d:da:6d:94:83:74:c8:eb:
cf:99:85:b5:2b:4d:43:2c:ca:ff:f1:f8:24:f9:67:
6c:21:ef:f9:3d:c4:5d:24:53:b4:02:d0:1c:ba:60:
d1:51:5b:aa:e2:ae:a3:af:ae:5c:85:0d:f7:11:c9:
1e:c1:14:aa:da:dd:da:48:46:31:84:11:45:31:e8:
b6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0C:7A:FA:97:C8:AC:CA:57:D1:3C:89:43:6D:A3:D7:61:BE:7A:56
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:2d:93:ae:2e:7e:90:5f:42:8f:97:ab:a9:42:5b:a8:08:a5:
4f:d7:1c:dd:0b:02:82:ef:0f:fb:cc:00:4c:89:65:f8:93:25:
dc:55:39:40:ff:b2:ce:6b:76:38:ac:27:0e:1c:e1:b2:66:71:
dd:a1:ae:d8:1a:94:b2:57:66:98:2b:61:74:26:a8:44:05:d2:
52:f1:bc:12:f5:a5:de:70:4e:5c:d0:d9:73:98:82:0b:8c:f9:
d3:10:8f:58:5e:c6:43:e9:5f:3c:67:2d:d9:ed:26:e5:cb:d5:
0a:f6:8d:3e:98:5a:0e:f4:92:7b:0c:1d:0e:1f:a4:ca:45:c9:
96:29:1c:92:eb:48:5f:cd:90:4f:86:05:0e:d9:c6:01:58:2c:
00:ad:09:e1:d5:06:e2:7c:8b:45:db:d7:82:e1:21:8f:b0:38:
cb:8c:9f:bb:81:95:52:ee:f3:8b:31:e3:06:30:d7:86:c4:6b:
08:e9:27:c6:a3:06:ad:2a:8f:cf:b8:3b:db:48:2d:dd:43:4c:
5d:70:0f:9f:95:e6:fa:7f:c5:3d:0c:92:43:b2:f5:50:94:5c:
45:6e:1f:e7:ad:f3:22:10:d6:2f:d1:71:17:ad:2b:d1:36:b1:
fd:88:dc:cd:a7:c1:18:73:e5:38:27:7f:59:00:01:64:6b:7a:
83:02:d3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:53:50 2026 by rpki-client