Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: KO4ta617fiL8MH4lZS9ubNwBrX03tIVN/06A2wGdCd4=
Subject key identifier: 3B:35:AF:41:1C:4E:3E:29:A9:7B:A2:04:B7:C6:A4:F0:D0:BF:26:62
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 019FAD1AB193E9EF562A0C3878244832FEBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 0FDA
Signing time: Wed 29 Jul 2026 09:00:35 +0000
Manifest this update: Wed 29 Jul 2026 09:00:35 +0000
Manifest next update: Thu 30 Jul 2026 09:00:35 +0000
Files and hashes: 1: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: cu4DK6mCjaOKXSrs7VYUADvXihFnuZxjPWcRw9Ds960=)
2: bJ6xJt6ZdP1j5xV1ifbFjOZCpCg.roa (hash: CuOWPy4R5sb9VUo/TuOTu1jjmvwMnXC2ruvyuim2IiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:b1:93:e9:ef:56:2a:0c:38:78:24:48:32:fe:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Jul 29 09:00:35 2026 GMT
Not After : Jul 30 09:00:35 2026 GMT
Subject: CN=3b35af411c4e3e29a97ba204b7c6a4f0d0bf2662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:65:12:6c:08:85:2e:04:a6:d8:90:a2:61:37:
b7:7e:02:62:cf:91:ac:04:39:7e:fa:22:fa:da:fc:
d2:bc:99:83:42:ce:34:71:93:02:e8:ff:a8:79:fc:
ca:2a:08:cc:80:b3:7a:03:99:65:c2:c4:e3:33:e6:
14:06:75:58:b3:1f:3c:b7:43:49:0e:d0:33:c8:b1:
c8:ff:0d:71:42:03:dd:63:be:84:ab:ea:5f:05:49:
3a:bd:1f:d7:60:58:7e:74:59:b1:4b:12:9d:eb:6f:
d7:1f:83:9e:4a:db:a0:e0:3a:3b:c7:00:bd:67:74:
01:f6:35:af:a1:15:f7:97:8d:f7:f9:06:ca:71:ed:
78:8a:27:3f:75:7a:7c:35:69:f3:c7:be:4a:96:61:
9e:6e:af:47:71:2d:5b:08:a3:c7:e3:36:13:f8:86:
23:c3:5a:97:98:2d:f6:0e:27:54:0a:a8:5b:0c:17:
59:1e:c0:eb:68:5f:ac:fd:2d:a8:f2:be:e3:c8:05:
75:22:ae:5a:13:cf:aa:b9:9f:1f:b8:cf:e6:48:1e:
8c:a6:61:c1:be:77:b5:e7:c4:89:72:64:fb:b8:34:
cd:a6:ea:33:52:56:7e:24:6c:35:c2:c8:97:3d:ea:
c2:41:6a:2a:b7:ac:1d:7a:1c:b8:6e:e5:11:f9:38:
bb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:35:AF:41:1C:4E:3E:29:A9:7B:A2:04:B7:C6:A4:F0:D0:BF:26:62
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cc:9c:77:55:ea:c6:4b:86:db:e6:ed:15:e9:75:38:ca:7e:
dd:5d:fa:4f:83:4c:45:c8:a8:a6:ef:5a:0b:a9:ee:b1:d6:1b:
e4:ce:c6:7e:6a:e3:2e:f9:6d:68:db:07:27:75:2c:00:83:9b:
9c:c7:4f:71:38:ee:ef:69:c6:c5:57:13:4e:87:6b:f6:10:a6:
59:f5:3c:33:fd:f9:0f:7b:e5:38:a8:05:d9:f9:f9:3a:aa:ea:
78:61:4b:23:b4:d9:3e:73:83:d1:00:93:3e:14:29:db:c3:01:
5c:aa:93:b9:65:29:4a:0a:77:36:da:21:bb:99:4a:ff:f4:fb:
ef:ed:12:60:88:54:a0:ea:2f:90:82:34:f0:45:c9:e1:a6:af:
13:4b:ab:14:5e:cf:bd:b9:e8:c8:a3:42:3e:63:9e:80:c3:fd:
51:1a:49:e1:25:34:c8:6a:9d:10:54:f1:a7:fd:96:26:93:71:
35:c2:84:78:ea:ee:7d:71:61:6b:20:6a:3b:f6:ec:a0:31:c2:
90:17:42:c7:a2:24:22:f5:38:b3:b4:83:51:00:ac:7c:5a:d5:
f9:16:f2:32:61:eb:4a:25:45:69:14:80:0c:ab:e5:0c:4a:e6:
a4:b1:78:cf:6b:f3:89:2f:f5:43:20:57:e8:ca:1d:d1:31:21:
18:80:d7:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGrGT6e9WKgw4eCRIMv66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlOGM2Y2M0NDhmOTYzNWM1NmZmMjJiMTFjZDgwYzFhYTlj
NTJkNGYwHhcNMjYwNzI5MDkwMDM1WhcNMjYwNzMwMDkwMDM1WjAzMTEwLwYDVQQD
EygzYjM1YWY0MTFjNGUzZTI5YTk3YmEyMDRiN2M2YTRmMGQwYmYyNjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72USbAiFLgSm2JCiYTe3fgJiz5Gs
BDl++iL62vzSvJmDQs40cZMC6P+oefzKKgjMgLN6A5llwsTjM+YUBnVYsx88t0NJ
DtAzyLHI/w1xQgPdY76Eq+pfBUk6vR/XYFh+dFmxSxKd62/XH4OeStug4Do7xwC9
Z3QB9jWvoRX3l433+QbKce14iic/dXp8NWnzx75KlmGebq9HcS1bCKPH4zYT+IYj
w1qXmC32DidUCqhbDBdZHsDraF+s/S2o8r7jyAV1Iq5aE8+quZ8fuM/mSB6MpmHB
vne158SJcmT7uDTNpuozUlZ+JGw1wsiXPerCQWoqt6wdehy4buUR+Ti7DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs1r0EcTj4pqXuiBLfGpPDQvyZiMB8GA1UdIwQY
MBaAFD6MbMRI+WNcVv8isRzYDBqpxS1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTct
ZDI4MTA1ZTNmMzgwLzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTctZDI4MTA1ZTNmMzgw
LzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcycd1Xq
xkuG2+btFel1OMp+3V36T4NMRciopu9aC6nusdYb5M7GfmrjLvltaNsHJ3UsAIOb
nMdPcTju72nGxVcTTodr9hCmWfU8M/35D3vlOKgF2fn5OqrqeGFLI7TZPnOD0QCT
PhQp28MBXKqTuWUpSgp3Ntohu5lK//T77+0SYIhUoOovkII08EXJ4aavE0urFF7P
vbnoyKNCPmOegMP9URpJ4SU0yGqdEFTxp/2WJpNxNcKEeOrufXFhayBqO/bsoDHC
kBdCx6IkIvU4s7SDUQCsfFrV+RbyMmHrSiVFaRSADKvlDErmpLF4z2vziS/1QyBX
6Mod0TEhGIDXlg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:48:17 2026 by rpki-client