Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: 4VdTlwI2lOJPdjpyZdE7K624DQxE6BTHX3rKDIOONIk=
Subject key identifier: 37:B3:13:72:CE:1B:07:00:B7:94:3A:27:C6:23:75:85:BE:74:71:B1
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 019FAA509ADFA6010A95DE6CD01CE67D86D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0E7D
Signing time: Tue 28 Jul 2026 20:00:36 +0000
Manifest this update: Tue 28 Jul 2026 20:00:36 +0000
Manifest next update: Wed 29 Jul 2026 20:00:36 +0000
Files and hashes: 1: Lz876iU0xtfcqSVTekYcUEB8rNY.roa (hash: P7Dx6/I7M7mFS8oU5u2ZG2WFIIDRuSNAyOVWgF0FkSI=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: SFHU1owEDGJI3hFLWiUr2NSszkt4h0dyYLw/C6M5nAs=)
3: QzXLtRSL_Wpb4KzFVTKsOifLvN0.roa (hash: hX/2W21N6m8TCgCCktzdp/ieCUoz0M7Pa5wx/tC+JN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:9a:df:a6:01:0a:95:de:6c:d0:1c:e6:7d:86:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Jul 28 20:00:36 2026 GMT
Not After : Jul 29 20:00:36 2026 GMT
Subject: CN=37b31372ce1b0700b7943a27c6237585be7471b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9e:01:3f:e2:2f:49:58:18:2c:84:4a:65:f1:
0e:08:e2:75:16:88:e2:6d:f1:2c:66:0c:7a:6f:95:
37:d2:39:12:55:60:e3:ae:56:20:b8:b1:a7:78:0b:
84:0f:22:86:94:ca:c8:56:9a:9e:fe:12:c3:f4:38:
2a:1a:56:ea:91:42:e1:02:f5:b0:ce:d0:cc:4a:e2:
db:e8:f9:6e:5d:ce:7e:4c:9b:63:54:55:e2:a5:0f:
73:ab:30:7e:4f:21:33:e2:40:05:17:9f:62:aa:b9:
92:4e:3a:69:b9:7d:c4:be:c5:4e:07:36:5c:22:16:
e4:1f:c4:cf:43:49:3a:42:95:c4:af:f4:8a:ec:2b:
8d:db:20:cc:9c:15:c8:d4:8d:9b:55:80:00:d9:30:
b4:85:d5:7f:38:a2:23:34:0e:30:67:fc:f6:4e:16:
e9:36:c6:ee:02:48:44:cf:88:fe:9f:ef:a9:bf:bc:
c7:37:b9:2f:2b:41:43:af:e4:77:df:3b:31:95:e8:
c2:e9:3c:7d:57:f0:f9:b6:dd:09:57:9d:00:26:6f:
ae:ff:8c:e8:12:e1:79:45:bf:e9:27:74:73:f9:1b:
7f:d9:65:3e:33:f6:85:e0:bc:f9:b7:c6:35:96:f4:
20:77:e9:f6:26:10:42:97:c3:12:cc:ae:b7:cc:7e:
7d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B3:13:72:CE:1B:07:00:B7:94:3A:27:C6:23:75:85:BE:74:71:B1
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ca:62:c7:78:fe:43:61:72:85:2f:e9:b1:46:b2:fd:fb:9d:
01:ad:7e:c4:c5:2b:9a:a0:97:18:23:fc:81:ad:30:7c:5b:2f:
fe:83:ac:91:93:5f:ad:db:3d:0e:80:2d:6c:8c:ce:a2:f0:a6:
9d:fb:2d:a9:00:4c:61:73:83:2d:76:6e:00:9d:b7:3c:d7:38:
b8:6e:2d:8e:04:6f:ad:f6:0b:01:a6:27:c0:82:b0:5e:10:e3:
52:cb:29:9d:58:79:cf:2d:eb:d1:fa:75:04:8c:01:0f:13:3c:
8b:a9:d8:b2:5a:14:0d:7e:3f:27:5a:14:36:a4:d5:0b:cc:7f:
0e:59:c3:e6:8d:a6:f5:31:ed:a7:e4:35:10:b8:78:72:6d:e0:
27:78:a0:c5:51:ce:c8:bb:db:db:ca:03:d3:df:c5:9e:05:40:
fb:00:65:aa:14:6c:8c:b0:9f:df:e3:c6:2d:77:2e:a8:e0:51:
51:2c:26:ea:54:99:f0:f6:95:53:3c:57:f8:56:e0:60:6a:7f:
05:f3:3b:7a:29:52:3f:af:e3:92:e6:74:96:b3:55:0a:a2:99:
c4:43:58:31:58:8d:1f:d5:e1:d3:ba:e3:c9:5b:3d:10:f3:29:
67:e9:47:49:89:4f:6f:cd:a4:eb:5f:a7:4f:21:ef:64:44:ec:
c7:ef:bb:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUJrfpgEKld5s0BzmfYbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZWExZWE4ODdkY2VmZWU2MTM2MTU1YjhiZDgzMzkyOTM3
YzE2NzEwHhcNMjYwNzI4MjAwMDM2WhcNMjYwNzI5MjAwMDM2WjAzMTEwLwYDVQQD
EygzN2IzMTM3MmNlMWIwNzAwYjc5NDNhMjdjNjIzNzU4NWJlNzQ3MWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp4BP+IvSVgYLIRKZfEOCOJ1Foji
bfEsZgx6b5U30jkSVWDjrlYguLGneAuEDyKGlMrIVpqe/hLD9DgqGlbqkULhAvWw
ztDMSuLb6PluXc5+TJtjVFXipQ9zqzB+TyEz4kAFF59iqrmSTjppuX3EvsVOBzZc
IhbkH8TPQ0k6QpXEr/SK7CuN2yDMnBXI1I2bVYAA2TC0hdV/OKIjNA4wZ/z2Thbp
NsbuAkhEz4j+n++pv7zHN7kvK0FDr+R33zsxlejC6Tx9V/D5tt0JV50AJm+u/4zo
EuF5Rb/pJ3Rz+Rt/2WU+M/aF4Lz5t8Y1lvQgd+n2JhBCl8MSzK63zH59FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDezE3LOGwcAt5Q6J8YjdYW+dHGxMB8GA1UdIwQY
MBaAFDzqHqiH3O/uYTYVW4vYM5KTfBZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgt
YjY0Y2FiNGJiZGZmLzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgtYjY0Y2FiNGJiZGZm
LzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMpix3j+
Q2FyhS/psUay/fudAa1+xMUrmqCXGCP8ga0wfFsv/oOskZNfrds9DoAtbIzOovCm
nfstqQBMYXODLXZuAJ23PNc4uG4tjgRvrfYLAaYnwIKwXhDjUsspnVh5zy3r0fp1
BIwBDxM8i6nYsloUDX4/J1oUNqTVC8x/DlnD5o2m9THtp+Q1ELh4cm3gJ3igxVHO
yLvb28oD09/FngVA+wBlqhRsjLCf3+PGLXcuqOBRUSwm6lSZ8PaVUzxX+FbgYGp/
BfM7eilSP6/jkuZ0lrNVCqKZxENYMViNH9Xh07rjyVs9EPMpZ+lHSYlPb82k61+n
TyHvZETsx++7Fw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:17:10 2026 by rpki-client