Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: wiSZgxQHUA7bxZwkUv63IAHQ9HLhe6NGh6JT7hThjUk=
Subject key identifier: 7B:E7:61:FC:CD:15:B4:17:96:8F:AE:FF:70:41:A5:F4:38:E8:E9:D7
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 019D9B19AF99F82BF58A9A18A9348FE57A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0D6C
Signing time: Fri 17 Apr 2026 11:00:44 +0000
Manifest this update: Fri 17 Apr 2026 11:00:44 +0000
Manifest next update: Sat 18 Apr 2026 11:00:44 +0000
Files and hashes: 1: Lz876iU0xtfcqSVTekYcUEB8rNY.roa (hash: P7Dx6/I7M7mFS8oU5u2ZG2WFIIDRuSNAyOVWgF0FkSI=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: bg/5DXBANnTtfqMrvJ9i1NKoVW1gp94QyePw5VES/rE=)
3: QzXLtRSL_Wpb4KzFVTKsOifLvN0.roa (hash: hX/2W21N6m8TCgCCktzdp/ieCUoz0M7Pa5wx/tC+JN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:af:99:f8:2b:f5:8a:9a:18:a9:34:8f:e5:7a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Apr 17 11:00:44 2026 GMT
Not After : Apr 18 11:00:44 2026 GMT
Subject: CN=7be761fccd15b417968faeff7041a5f438e8e9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:15:38:38:31:4b:16:4b:85:81:fc:3c:c8:60:
23:c0:e5:a5:5e:99:25:18:82:c5:e1:a4:83:8f:17:
53:9f:da:d5:c4:2b:a2:c9:01:85:15:ad:08:2e:01:
04:ca:e6:19:1f:13:28:a0:47:c8:dd:21:84:db:2b:
c1:57:f8:15:35:0f:e4:5b:5d:e0:cf:d5:bb:c3:19:
6b:35:ed:05:97:15:0b:e8:95:1e:74:57:7f:d3:3e:
ad:73:64:c0:cf:74:68:ca:d5:7e:82:4e:1f:61:02:
7b:82:7e:34:dd:88:1b:20:0a:db:be:5f:e6:30:8b:
2d:cf:fe:ea:63:3e:28:26:a0:b7:1f:e9:6b:78:4d:
91:19:7f:82:f2:3a:87:77:18:f9:3c:99:fd:20:a2:
73:22:3a:fc:b3:ca:70:62:cb:4f:ee:bb:93:98:0c:
ae:30:fe:8d:c4:0e:66:9a:49:e1:ce:2b:37:14:cc:
3d:fb:a4:99:53:cc:65:66:6e:58:c7:65:b1:93:73:
ea:41:c6:b5:87:4a:f8:20:6a:c6:7e:92:aa:ee:6c:
93:18:3c:5d:d3:47:2e:49:0e:47:e5:8e:c5:83:ad:
73:5e:1b:e5:10:e8:bf:b4:9e:4d:49:f1:ec:54:92:
e9:df:38:2c:a4:ec:cb:0c:b5:56:4b:e1:df:33:df:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E7:61:FC:CD:15:B4:17:96:8F:AE:FF:70:41:A5:F4:38:E8:E9:D7
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:db:ae:9d:22:58:e5:a7:83:2f:ad:a9:bc:c2:2d:49:c8:16:
d1:67:5c:d5:11:50:ba:03:57:e6:6d:0f:42:65:b5:2f:9d:22:
07:9b:da:d8:bd:fa:54:2b:9c:96:66:2d:4b:f9:3d:01:e7:50:
80:78:5b:90:30:48:0b:0c:0d:7a:d9:ab:19:d7:bf:7b:a3:90:
93:ff:b0:47:44:7d:d8:02:9c:3c:af:ba:6e:f5:91:fb:ef:b0:
1a:77:c1:a5:4a:4f:42:08:9a:d1:c7:42:52:b6:d0:1a:89:e0:
39:7c:0f:4a:5c:93:28:4f:93:57:c4:7e:77:b6:e4:a9:52:30:
82:50:72:2b:98:fd:05:6f:68:1a:24:9a:b0:1e:bc:1d:67:da:
df:26:bb:d7:73:3f:97:a4:98:6f:1d:9d:ec:41:66:1b:32:65:
04:65:dc:a6:58:76:36:0b:b5:87:7d:1e:a6:5c:f9:49:f2:65:
be:3b:10:54:c1:fb:88:cc:00:f5:4c:bc:49:38:8e:12:9c:65:
70:ec:56:79:a1:e9:3e:d1:08:d8:c7:28:2a:74:c4:6b:e7:56:
f8:eb:ca:63:7b:1a:04:1b:e9:5f:53:ab:b4:25:e7:b0:25:bc:
c3:ce:9a:d9:02:51:0f:07:6e:45:2a:e9:64:13:64:b3:98:82:
92:f7:85:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGa+Z+Cv1ipoYqTSP5XqGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZWExZWE4ODdkY2VmZWU2MTM2MTU1YjhiZDgzMzkyOTM3
YzE2NzEwHhcNMjYwNDE3MTEwMDQ0WhcNMjYwNDE4MTEwMDQ0WjAzMTEwLwYDVQQD
Eyg3YmU3NjFmY2NkMTViNDE3OTY4ZmFlZmY3MDQxYTVmNDM4ZThlOWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBU4ODFLFkuFgfw8yGAjwOWlXpkl
GILF4aSDjxdTn9rVxCuiyQGFFa0ILgEEyuYZHxMooEfI3SGE2yvBV/gVNQ/kW13g
z9W7wxlrNe0FlxUL6JUedFd/0z6tc2TAz3RoytV+gk4fYQJ7gn403YgbIArbvl/m
MIstz/7qYz4oJqC3H+lreE2RGX+C8jqHdxj5PJn9IKJzIjr8s8pwYstP7ruTmAyu
MP6NxA5mmknhzis3FMw9+6SZU8xlZm5Yx2Wxk3PqQca1h0r4IGrGfpKq7myTGDxd
00cuSQ5H5Y7Fg61zXhvlEOi/tJ5NSfHsVJLp3zgspOzLDLVWS+HfM99wcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvnYfzNFbQXlo+u/3BBpfQ46OnXMB8GA1UdIwQY
MBaAFDzqHqiH3O/uYTYVW4vYM5KTfBZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgt
YjY0Y2FiNGJiZGZmLzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgtYjY0Y2FiNGJiZGZm
LzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltuunSJY
5aeDL62pvMItScgW0Wdc1RFQugNX5m0PQmW1L50iB5va2L36VCuclmYtS/k9AedQ
gHhbkDBICwwNetmrGde/e6OQk/+wR0R92AKcPK+6bvWR+++wGnfBpUpPQgia0cdC
UrbQGongOXwPSlyTKE+TV8R+d7bkqVIwglByK5j9BW9oGiSasB68HWfa3ya713M/
l6SYbx2d7EFmGzJlBGXcplh2Ngu1h30eplz5SfJlvjsQVMH7iMwA9Uy8STiOEpxl
cOxWeaHpPtEI2McoKnTEa+dW+OvKY3saBBvpX1OrtCXnsCW8w86a2QJRDwduRSrp
ZBNks5iCkveFDQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:14 2026 by rpki-client