Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: KnzwvS1qM05AxdBbaEc/3kc97y6Sr/Wr38Ehw40mtlE=
Subject key identifier: 08:70:DD:BB:76:5E:BC:91:3D:28:55:8B:40:D2:3C:01:ED:2B:33:27
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 01A125B02667D44D0921B92641F8332B6B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 109D
Signing time: Sat 10 Oct 2026 12:01:03 +0000
Manifest this update: Sat 10 Oct 2026 12:01:03 +0000
Manifest next update: Sun 11 Oct 2026 12:01:03 +0000
Files and hashes: 1: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: R05Lr7it3VB6hhuZSFSktg89CU4RBElm+N7ZZwCWcyM=)
2: bJ6xJt6ZdP1j5xV1ifbFjOZCpCg.roa (hash: CuOWPy4R5sb9VUo/TuOTu1jjmvwMnXC2ruvyuim2IiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:b0:26:67:d4:4d:09:21:b9:26:41:f8:33:2b:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Oct 10 12:01:03 2026 GMT
Not After : Oct 11 12:01:03 2026 GMT
Subject: CN=0870ddbb765ebc913d28558b40d23c01ed2b3327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:19:d9:28:be:e8:2e:48:5c:b0:71:e0:94:
61:47:32:a2:61:56:37:0b:b7:6f:cb:57:59:99:e1:
b0:a9:ad:0e:f1:5a:80:e0:ff:56:97:5c:02:2a:99:
49:d6:95:4e:9e:f6:50:51:1d:5f:6b:ea:4d:02:c7:
d8:e9:67:0a:24:f5:d2:b1:3f:95:18:28:61:63:2c:
0e:69:e3:da:ed:bf:9e:26:d1:db:0a:d5:b6:7c:cd:
5c:af:64:36:95:43:7f:26:18:6f:e3:14:8c:2d:54:
26:5e:4a:ca:0b:49:d0:97:fb:31:c8:59:63:57:32:
83:2a:d6:b2:0a:8e:aa:79:b5:56:9c:4f:ef:99:54:
48:17:41:e6:0b:91:3b:57:d0:7a:0b:17:7e:18:14:
4a:66:37:48:fc:50:74:30:5c:a9:9f:00:31:36:ad:
45:24:86:df:85:fd:7b:80:09:6e:3e:98:fb:8a:f1:
2c:1f:06:84:81:f9:2d:55:5a:c6:30:09:87:0c:93:
7d:b2:49:b3:3c:72:bf:87:fb:fc:76:c4:cc:f8:c0:
0d:74:1a:57:17:fb:8d:cb:0a:c9:4c:00:fe:ae:f9:
0e:eb:35:20:58:75:d1:7f:0d:3d:bd:25:ae:4e:ba:
2c:ba:50:b4:f4:78:47:8e:06:55:d6:ea:03:92:fa:
02:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:70:DD:BB:76:5E:BC:91:3D:28:55:8B:40:D2:3C:01:ED:2B:33:27
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:67:8b:4d:d6:69:18:b4:e6:30:50:fe:12:cf:a1:06:69:a1:
3f:57:b3:d7:93:37:20:70:2b:ad:70:8e:26:ae:c0:e3:40:0d:
0e:f4:7e:95:5f:35:7d:8d:aa:10:91:a7:35:3c:37:c8:6e:7b:
fe:36:86:2d:bc:04:f6:7e:f6:20:d1:01:bf:d4:d3:2f:42:81:
54:76:3f:dd:c9:69:a7:4c:a5:18:30:2c:c0:13:d7:c7:06:92:
a9:51:bf:04:36:5a:52:56:0d:f8:9f:a6:71:91:31:32:05:39:
45:87:46:bf:e5:7b:c3:0a:7e:84:d8:69:14:15:bc:76:c4:9f:
b8:79:46:38:ff:08:71:f1:02:2c:7d:da:22:99:ec:54:ad:8f:
22:b8:72:a6:90:c6:81:bf:c9:cb:5b:eb:e3:f9:56:73:10:bb:
6b:b3:8b:6d:43:13:83:68:13:d4:3e:c2:de:3c:0e:bf:7c:7e:
a0:41:8c:8d:42:30:72:ef:46:ed:c4:77:bc:30:f2:68:4d:cd:
af:4d:bb:08:c0:99:6c:bd:07:93:6c:d1:94:ee:b1:92:03:d3:
e9:90:f3:4c:51:a7:2c:73:5b:76:08:f1:34:36:2c:ce:77:3a:
e9:f6:2b:d6:8d:5e:de:a5:c0:b9:59:94:2e:ed:67:ae:73:26:
8f:9b:8f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:22:10 2026 by rpki-client