Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File: pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier: U2IBsp7PmrKrBRElJGZQLQ9u8ERBsscjzj+h3HbKjuY=
Subject key identifier: D4:5C:03:B7:A5:DB:D3:99:CE:65:65:4C:7E:A7:DA:BB:8F:F1:C7:2F
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 019F9392076BA5E64C328B199D9B4A410D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number: 0DB9
Signing time: Fri 24 Jul 2026 10:00:48 +0000
Manifest this update: Fri 24 Jul 2026 10:00:48 +0000
Manifest next update: Sat 25 Jul 2026 10:00:48 +0000
Files and hashes: 1: RZZbXwpHPue2NW4m459EoqMZKyE.roa (hash: v17nBO3LbcF/rH9ckA2KnZ23x5seOdWkK+ByqrSeon0=)
2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: y95fWbeDARmIJ+0gwDMzGzYnRmyoe2S/xSMXaHMRQvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:07:6b:a5:e6:4c:32:8b:19:9d:9b:4a:41:0d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Jul 24 10:00:48 2026 GMT
Not After : Jul 25 10:00:48 2026 GMT
Subject: CN=d45c03b7a5dbd399ce65654c7ea7dabb8ff1c72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:28:16:c8:2a:e7:9d:0e:00:92:99:a9:27:
d0:3c:f4:0c:00:bd:c5:84:5e:a5:2d:bf:bc:d5:4f:
ca:1c:e6:58:ac:38:99:8e:9d:1b:1c:bb:b3:27:9e:
94:06:ea:b5:88:5d:70:b6:3e:50:00:41:21:15:7c:
6f:56:d1:8b:d5:13:6d:5f:bf:48:c8:5b:95:f9:24:
ba:e2:7b:f8:27:5c:7f:de:0e:21:b8:58:63:c5:10:
55:ef:20:a1:c6:67:cb:bd:b0:7a:9c:3c:9c:9e:22:
d0:cc:db:52:76:d2:ad:99:fa:66:9e:64:ee:6a:0b:
09:48:ce:58:0a:24:20:5c:10:8a:79:11:37:8e:40:
59:13:47:80:d4:b0:c0:3c:9d:ae:d8:c9:7d:b6:fe:
86:32:f1:a6:72:b8:71:88:f5:7d:96:6a:c9:ce:07:
ee:52:e5:f0:c5:60:66:c1:6f:fb:a0:66:98:23:dd:
7a:61:13:a0:3c:38:f9:5d:9a:64:0f:25:cc:83:eb:
1b:98:b6:57:fa:46:90:fc:77:f9:2b:55:f6:40:fa:
f9:a7:39:c7:cc:8c:a6:6b:4b:88:d1:c8:c2:42:93:
ec:6c:3f:da:b4:74:55:49:9a:8a:d7:91:2c:72:4d:
1e:c7:f1:c7:0e:77:3d:24:45:4e:0c:81:f6:f8:84:
e3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5C:03:B7:A5:DB:D3:99:CE:65:65:4C:7E:A7:DA:BB:8F:F1:C7:2F
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e8:77:80:ea:45:6b:16:f7:7b:ea:01:ba:fc:f9:4c:cc:32:
80:0c:24:cf:93:d9:ff:a2:1e:d0:d3:6c:66:08:54:fd:73:a6:
d1:84:3f:2f:bd:e7:74:7b:41:86:ff:0f:3e:06:da:eb:f1:a7:
93:c9:f0:fd:ad:b9:2e:66:ee:2a:8e:5c:07:d8:9a:3f:54:fd:
c3:b6:c1:77:b1:9a:c2:82:b9:a7:e3:c3:99:ef:16:77:eb:45:
ea:36:dd:d7:8d:b3:0c:c0:e8:b5:1c:81:fe:29:90:1c:10:68:
d4:b5:9c:b9:ed:83:66:46:a3:c6:6c:eb:ef:d1:80:a9:cc:33:
bc:26:3a:85:23:73:f0:6a:7d:49:95:2c:ee:53:c5:9e:87:fb:
c6:ab:b5:f2:97:ab:e9:db:97:80:9d:80:5b:53:0a:6e:f7:47:
ff:22:32:25:91:58:49:a2:d2:f6:56:65:74:a5:9c:fd:3d:1c:
c8:f2:85:48:b4:e6:3d:7e:da:96:2e:b3:12:cc:b4:bc:6e:76:
bd:87:3d:f9:1a:70:72:7b:e6:a2:0f:76:8e:b1:5a:3b:eb:fb:
ad:3e:19:70:ff:fe:52:41:28:09:c6:ec:00:76:61:a4:9e:4b:
e0:64:55:d5:c6:24:88:03:cd:e5:65:35:83:ba:79:cb:c2:18:
ad:73:f0:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkgdrpeZMMosZnZtKQQ1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZWI5ZWI1NTQ3YzdmNWYxYWFmYzBhZGExNDA4MDU0MTk2
MTg3MjYwHhcNMjYwNzI0MTAwMDQ4WhcNMjYwNzI1MTAwMDQ4WjAzMTEwLwYDVQQD
EyhkNDVjMDNiN2E1ZGJkMzk5Y2U2NTY1NGM3ZWE3ZGFiYjhmZjFjNzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRgoFsgq550OAJKZqSfQPPQMAL3F
hF6lLb+81U/KHOZYrDiZjp0bHLuzJ56UBuq1iF1wtj5QAEEhFXxvVtGL1RNtX79I
yFuV+SS64nv4J1x/3g4huFhjxRBV7yChxmfLvbB6nDycniLQzNtSdtKtmfpmnmTu
agsJSM5YCiQgXBCKeRE3jkBZE0eA1LDAPJ2u2Ml9tv6GMvGmcrhxiPV9lmrJzgfu
UuXwxWBmwW/7oGaYI916YROgPDj5XZpkDyXMg+sbmLZX+kaQ/Hf5K1X2QPr5pznH
zIyma0uI0cjCQpPsbD/atHRVSZqK15Esck0ex/HHDnc9JEVODIH2+ITjRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRcA7el29OZzmVlTH6n2ruP8ccvMB8GA1UdIwQY
MBaAFKTrnrVUfH9fGq/AraFAgFQZYYcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE91ZXRWUjhmMThhcjhDdG9VQ0FWQmxoaHlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80Y2Q3MmQtZDhhNS00NmNlLTg2NzQt
MGQyMjIzMmMzNGEwLzEvcE91ZXRWUjhmMThhcjhDdG9VQ0FWQmxoaHlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80Y2Q3MmQtZDhhNS00NmNlLTg2NzQtMGQyMjIzMmMzNGEw
LzEvcE91ZXRWUjhmMThhcjhDdG9VQ0FWQmxoaHlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOh3gOpF
axb3e+oBuvz5TMwygAwkz5PZ/6Ie0NNsZghU/XOm0YQ/L73ndHtBhv8PPgba6/Gn
k8nw/a25LmbuKo5cB9iaP1T9w7bBd7GawoK5p+PDme8Wd+tF6jbd142zDMDotRyB
/imQHBBo1LWcue2DZkajxmzr79GAqcwzvCY6hSNz8Gp9SZUs7lPFnof7xqu18per
6duXgJ2AW1MKbvdH/yIyJZFYSaLS9lZldKWc/T0cyPKFSLTmPX7ali6zEsy0vG52
vYc9+Rpwcnvmog92jrFaO+v7rT4ZcP/+UkEoCcbsAHZhpJ5L4GRV1cYkiAPN5WU1
g7p5y8IYrXPwXw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:56 2026 by rpki-client