Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: 9v9vOGEcYKkuk8dwj/yTmReAidg3n2WPXeV4WUAGM1U=
Subject key identifier: 27:E0:67:C0:89:31:C7:19:C9:45:14:FE:C5:77:4C:3A:7D:21:2B:99
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 019CABA1BEC48C187D135175283444A2039A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0CF0
Signing time: Sun 01 Mar 2026 23:00:29 +0000
Manifest this update: Sun 01 Mar 2026 23:00:29 +0000
Manifest next update: Mon 02 Mar 2026 23:00:29 +0000
Files and hashes: 1: Lz876iU0xtfcqSVTekYcUEB8rNY.roa (hash: P7Dx6/I7M7mFS8oU5u2ZG2WFIIDRuSNAyOVWgF0FkSI=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: Bqeg4auy5rfWr06pomNLbzkD2C0oL33Slf33i9hBx1c=)
3: QzXLtRSL_Wpb4KzFVTKsOifLvN0.roa (hash: hX/2W21N6m8TCgCCktzdp/ieCUoz0M7Pa5wx/tC+JN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:be:c4:8c:18:7d:13:51:75:28:34:44:a2:03:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Mar 1 23:00:29 2026 GMT
Not After : Mar 2 23:00:29 2026 GMT
Subject: CN=27e067c08931c719c94514fec5774c3a7d212b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:38:ff:86:f9:63:49:82:4b:ef:91:90:ab:
73:28:31:4b:ac:1c:60:d3:36:23:53:77:54:a1:84:
6f:db:7c:52:b6:56:e4:4d:09:23:06:f8:e9:76:49:
43:87:e5:95:dc:54:77:e2:73:19:ca:04:20:3a:91:
6b:17:30:cf:34:8e:98:cc:0d:fd:28:1d:e2:d6:37:
81:f1:32:9b:3c:bd:2c:2a:eb:47:91:20:01:79:9d:
74:08:d8:99:ea:5a:b6:11:13:63:bb:6f:d8:7d:c1:
bb:4b:fa:61:55:af:98:c5:b1:58:ce:f8:b2:ac:1c:
3e:f7:84:6e:b1:87:1a:b3:8b:fc:be:06:d4:c8:96:
7d:1e:72:1d:c4:62:7b:f8:0c:4e:c4:27:ff:19:06:
f5:03:69:1d:4b:e8:07:57:82:0b:d3:70:5d:ba:12:
31:8b:e1:04:c1:c2:19:10:3f:5a:d4:8c:7d:eb:7b:
f0:90:ce:c0:62:82:4b:ad:b9:af:32:d1:30:39:0b:
e1:f0:fa:e8:24:14:04:29:57:f4:a6:f9:20:fb:3f:
4f:2f:50:6f:ca:e2:38:63:92:ee:a3:18:48:78:b2:
67:d4:b7:5d:ff:09:41:04:d6:e5:61:2a:a9:f3:cb:
98:b0:6c:2f:dd:6a:a9:2b:06:84:1a:d6:e2:ce:77:
66:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E0:67:C0:89:31:C7:19:C9:45:14:FE:C5:77:4C:3A:7D:21:2B:99
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c0:64:c4:e5:9d:62:ce:ce:05:7d:c8:0b:1d:ec:7f:07:6d:
9f:aa:cb:b3:d4:91:f9:0b:5a:ca:7c:b3:d4:4a:55:65:6f:52:
d5:39:4e:af:06:8d:81:4d:d3:43:05:9b:62:e1:75:13:8c:f3:
c4:07:8a:29:b0:6f:34:74:df:76:82:25:30:69:3d:30:19:c5:
04:e2:e2:e8:f0:a2:e9:c9:a5:47:32:80:b2:72:d0:a4:90:c4:
a5:d6:5d:74:2a:c5:cc:28:05:f2:15:8c:31:5f:cd:ee:2e:1f:
bf:cf:b4:8d:ea:dd:50:83:2c:12:9d:a5:e5:da:81:40:ac:08:
db:6c:86:0d:47:a6:8b:87:54:93:78:93:22:5b:60:d5:7a:04:
c4:7f:7c:ad:f8:5e:8b:6a:77:c9:c9:28:1b:04:7c:e5:7e:1d:
19:2f:c7:3d:08:79:d8:ee:17:69:18:ad:14:d5:99:ec:18:e0:
1e:39:49:cb:5e:69:e9:7b:3e:31:cb:4e:28:43:d2:76:7d:d0:
18:7d:20:4b:10:6a:1b:22:05:be:67:e2:63:e1:1d:d4:71:f1:
95:08:eb:fd:9c:b6:10:81:76:85:66:d8:57:58:13:d5:1d:78:
00:3f:13:5d:c2:2a:e7:c0:4c:8e:5d:80:ee:30:3c:29:65:e9:
ca:15:a2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:17 2026 by rpki-client