Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: aRK8dqFm3ZDQcE2Jv17rok549Oqcm51f+ZjcsuXIgYI=
Subject key identifier: D3:E8:54:D5:6C:19:1C:2E:90:A3:02:D8:2A:D3:94:1F:32:C9:B6:2F
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 019EC17F95DF13782F26484ED9367E6A9511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 0F60
Signing time: Sat 13 Jun 2026 15:00:24 +0000
Manifest this update: Sat 13 Jun 2026 15:00:24 +0000
Manifest next update: Sun 14 Jun 2026 15:00:24 +0000
Files and hashes: 1: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: 3C2NSvK8HGrUokJpCDdavP0rw0/a+8CCaYcgh5/k9j4=)
2: bJ6xJt6ZdP1j5xV1ifbFjOZCpCg.roa (hash: CuOWPy4R5sb9VUo/TuOTu1jjmvwMnXC2ruvyuim2IiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:95:df:13:78:2f:26:48:4e:d9:36:7e:6a:95:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Jun 13 15:00:24 2026 GMT
Not After : Jun 14 15:00:24 2026 GMT
Subject: CN=d3e854d56c191c2e90a302d82ad3941f32c9b62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:64:73:0a:06:e2:bb:66:55:b0:58:b2:c2:4f:
f6:cd:0b:a1:ed:c0:86:38:67:27:c3:ad:cf:0e:ee:
b2:7d:a4:a1:03:2c:33:1b:a8:72:88:43:ee:60:db:
03:8b:e0:4a:f2:fc:00:dc:3c:04:59:54:b6:f6:49:
42:86:3a:d0:fe:20:51:8c:e0:ae:17:97:41:bb:0f:
9b:10:f5:2d:26:3f:93:83:3f:93:7f:4d:63:6e:a6:
5f:ce:fc:dd:56:74:50:dd:d6:15:1d:34:49:69:de:
87:17:15:a7:4f:0c:c8:50:3b:1a:ee:15:87:51:98:
11:3b:da:e7:74:4e:eb:f0:26:9b:f2:27:7a:ef:ba:
c3:7d:a9:aa:89:a6:22:90:b2:19:6e:b8:52:e3:60:
10:74:9a:c1:b8:76:aa:81:05:91:2a:32:78:37:3e:
4c:e0:16:dc:eb:20:6c:7f:65:79:e3:b9:a3:57:88:
ae:f6:e8:bf:a2:43:97:3c:54:50:e8:7d:e0:95:ee:
d4:13:ba:51:3c:42:80:ee:30:85:78:ae:8d:7f:7a:
f7:11:21:cc:cf:b9:31:22:db:9f:94:d3:74:ba:1d:
e0:4b:ff:d0:a9:99:31:d4:0b:44:4f:45:55:e1:57:
62:1c:83:ac:03:35:bd:54:c3:6c:ba:85:39:8a:60:
8e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E8:54:D5:6C:19:1C:2E:90:A3:02:D8:2A:D3:94:1F:32:C9:B6:2F
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b8:a1:e9:0b:cc:02:19:1e:9a:44:88:a6:2b:5e:63:70:77:
00:88:a6:b7:7a:31:02:d6:4b:78:8d:dd:06:07:9b:7a:88:ae:
d0:a4:62:28:40:dc:f3:36:6e:62:60:82:23:d8:a8:9a:4c:38:
0d:d3:07:90:71:6b:bc:e1:57:4a:78:c5:0b:58:19:64:4c:d9:
ea:ed:4e:cf:ed:f7:25:9a:ec:47:56:8c:82:f9:16:e3:4b:2f:
96:92:37:77:4d:b5:bb:e6:a9:ba:b9:72:ff:cd:15:58:7f:2c:
e0:74:c0:23:53:34:01:22:ec:53:8a:2b:fb:36:f1:c6:df:e4:
52:eb:5f:d8:64:0e:d9:e7:1b:85:f0:e9:6e:3c:61:0b:c0:7a:
b3:8e:c9:ca:d1:ba:58:99:eb:5a:e8:51:66:2a:67:f3:93:cd:
d9:d9:4a:15:c9:3d:66:1f:02:e0:39:57:c0:76:b6:8c:65:13:
09:ba:78:37:a5:ea:07:ad:d4:6d:e9:f7:67:97:d4:99:76:49:
b5:7e:59:64:59:1f:b7:e6:6b:05:0f:a7:1a:b7:e4:9f:47:4d:
dd:6f:ae:aa:5b:fd:b1:c2:1e:94:b9:12:bb:04:46:54:ef:38:
77:07:ff:c0:f1:56:00:4c:b0:0e:77:ed:e3:53:08:fb:99:8d:
10:94:4d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:57:51 2026 by rpki-client