Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: c2qd9v5M4X3H48M+hyIkpTNtbRb+D054L9C1fqHMU9o=
Subject key identifier: C5:7F:98:44:0A:66:3A:2B:27:18:D1:9A:8A:D5:2E:26:83:98:8D:1B
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 01A109CB90232B9F287EE3074EF4E1B4ACB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0F33
Signing time: Mon 05 Oct 2026 02:01:37 +0000
Manifest this update: Mon 05 Oct 2026 02:01:37 +0000
Manifest next update: Tue 06 Oct 2026 02:01:37 +0000
Files and hashes: 1: Lz876iU0xtfcqSVTekYcUEB8rNY.roa (hash: P7Dx6/I7M7mFS8oU5u2ZG2WFIIDRuSNAyOVWgF0FkSI=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: 8FjqethlRhJ2oGLXEvcdyG8LEuX8wJpq1a1W0NQ0iQ0=)
3: QzXLtRSL_Wpb4KzFVTKsOifLvN0.roa (hash: hX/2W21N6m8TCgCCktzdp/ieCUoz0M7Pa5wx/tC+JN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:cb:90:23:2b:9f:28:7e:e3:07:4e:f4:e1:b4:ac:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Oct 5 02:01:37 2026 GMT
Not After : Oct 6 02:01:37 2026 GMT
Subject: CN=c57f98440a663a2b2718d19a8ad52e2683988d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0a:7b:3c:d8:3c:21:f5:bb:47:1f:32:b0:22:
ae:82:12:2e:54:98:65:25:bb:48:2d:80:c2:1b:37:
bd:58:2c:da:0d:cd:57:f1:6d:ba:e9:f9:e1:1b:f0:
52:33:0b:be:0c:c7:cf:83:3c:84:8b:32:27:07:8c:
dd:bf:b7:de:59:e4:6e:15:13:7a:b1:fc:d7:60:8e:
f7:ab:fb:f2:57:11:d3:8e:cf:14:db:d3:c6:b6:94:
0f:5a:ec:b8:ed:48:9e:08:02:cf:2c:41:f8:b9:f7:
24:b8:c5:bf:f6:9e:33:02:65:43:89:9b:85:e3:24:
ec:b0:a8:5e:3d:97:90:54:b2:6f:b0:12:40:02:0d:
1a:01:e7:e7:11:e7:90:b6:6d:1b:ea:0a:46:6e:ea:
7b:66:18:e8:7a:0b:01:b6:fd:03:f6:c8:03:3f:68:
85:c0:0b:ec:f2:25:21:e1:2c:1a:fe:f9:38:4d:1f:
f6:6c:cf:bc:ee:a0:4c:33:32:59:4f:a0:cd:d1:e3:
9b:35:f5:e9:ea:ac:bc:f8:b2:bf:c1:5a:53:75:3f:
b8:1d:bf:c3:23:b3:cb:1a:c5:5f:9b:31:b3:9e:cb:
41:15:ba:55:96:6b:69:47:1c:bf:83:cf:b3:68:d4:
9f:30:c4:14:22:c5:ba:41:ee:5f:d9:68:d1:8d:b3:
cf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7F:98:44:0A:66:3A:2B:27:18:D1:9A:8A:D5:2E:26:83:98:8D:1B
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d7:45:bf:b6:be:3c:af:4f:e4:10:b2:21:75:a5:90:7e:e8:
24:7e:d8:ed:af:29:3a:28:c8:57:47:4c:7d:ce:7d:b3:86:67:
f5:ab:d9:7e:3c:b2:3c:d1:64:78:95:9a:e7:7c:e7:64:72:46:
5a:7f:bf:c2:7b:d7:3b:22:51:74:ba:d3:17:4a:09:6a:e6:79:
a3:bf:83:97:bf:9a:3f:a5:40:15:41:ba:d8:c2:ab:7c:52:89:
00:12:54:75:b0:a8:08:aa:f1:c9:56:51:bd:b3:40:0e:ee:d9:
88:e5:5d:db:ae:28:74:35:ba:f7:a1:08:f2:ce:5c:81:29:54:
b5:9b:2b:cc:f6:f4:57:8c:3c:0f:3a:ce:e9:ac:31:f3:b6:64:
44:f3:48:45:ff:4d:61:88:5b:73:6a:06:e3:5a:39:3b:28:ed:
5f:a6:88:f6:b9:a5:2e:6c:63:76:99:45:71:3b:9b:cd:7f:0c:
5c:d7:c7:ce:c1:e9:17:48:1b:ed:d3:ee:5d:d1:07:97:84:a4:
bb:a4:a3:01:a2:a4:83:cc:e7:85:e6:e0:dc:da:ca:f6:64:ec:
8f:5c:30:69:a3:c3:ab:e6:74:36:2c:bf:ba:8b:b7:1e:6d:2b:
47:12:ff:98:87:6a:6c:b6:8d:0e:1b:44:45:1f:14:67:a0:36:
1d:3a:b5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:19:11 2026 by rpki-client