Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: KI6VtENyqXgxXf5OlGElFDkUvgWirzVPZnfqkHmYehw=
Subject key identifier: 29:C0:6A:FD:0C:65:68:CB:BB:25:5C:D3:2F:9F:D1:82:38:CF:06:A3
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 019D9BF5B71C530BE36AD8B79CF0DC968020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 0EC8
Signing time: Fri 17 Apr 2026 15:01:04 +0000
Manifest this update: Fri 17 Apr 2026 15:01:04 +0000
Manifest next update: Sat 18 Apr 2026 15:01:04 +0000
Files and hashes: 1: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: l0d8GZ+xEJtxDt6bY71LUwOCdt1Ax0RWwfj1dBW0yZs=)
2: bJ6xJt6ZdP1j5xV1ifbFjOZCpCg.roa (hash: CuOWPy4R5sb9VUo/TuOTu1jjmvwMnXC2ruvyuim2IiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:b7:1c:53:0b:e3:6a:d8:b7:9c:f0:dc:96:80:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Apr 17 15:01:04 2026 GMT
Not After : Apr 18 15:01:04 2026 GMT
Subject: CN=29c06afd0c6568cbbb255cd32f9fd18238cf06a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:a7:e5:a6:67:d3:da:e2:dd:99:6d:5a:74:
cc:a2:ab:43:1a:c2:fa:01:16:12:a4:c7:46:e0:30:
f1:1f:93:32:f8:81:a5:0f:4a:03:f8:01:cb:79:85:
3b:4b:76:b4:cb:9f:1f:3f:ba:19:b5:57:8a:c0:c4:
ae:94:30:88:a2:89:65:ca:7c:b7:f9:f2:f1:f3:c3:
5d:ed:61:c0:93:24:a4:5e:cf:2c:00:7f:4e:7e:4c:
03:35:26:3c:de:43:15:98:aa:da:50:c2:a8:c8:4b:
2e:ad:1e:a6:d5:cb:90:37:5d:9d:0c:bf:69:66:f4:
00:5c:e1:2e:e9:f7:6c:a6:60:4b:e4:8d:93:08:bb:
0d:f5:f2:09:6a:c9:d5:7d:9b:9d:bf:32:e1:e0:58:
7b:ad:12:99:d4:f3:36:8e:25:62:7a:4d:d7:7d:38:
a7:21:10:55:81:32:b9:a9:e6:8a:ef:a1:b4:18:4f:
64:da:0e:54:75:aa:0e:95:43:4b:36:23:23:17:9a:
d3:b0:36:df:db:5e:78:4b:11:70:6e:0e:c7:f2:cb:
96:d9:26:fb:6b:14:3a:ef:12:65:78:92:79:86:19:
8e:d1:a6:24:b7:49:24:5b:ad:10:ca:95:93:13:a4:
ba:a7:5c:0f:4a:43:d6:c0:e8:00:66:f8:56:a6:e1:
9a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C0:6A:FD:0C:65:68:CB:BB:25:5C:D3:2F:9F:D1:82:38:CF:06:A3
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c0:02:5a:ff:99:fc:5b:44:62:a9:32:4b:e6:4a:a9:81:cb:
0d:ac:65:96:59:31:d6:97:9a:5d:46:fd:09:6e:5c:eb:a0:6e:
fc:6e:13:7a:f2:e2:c7:8f:bb:20:99:ed:97:e4:2e:a4:ff:db:
d9:af:30:05:26:e6:78:2a:e3:9a:5b:12:69:7e:4a:bc:94:0d:
24:3a:7d:63:19:e3:6a:03:c2:ab:e3:3a:84:dd:97:6a:0d:ff:
f1:8f:70:93:d0:a0:41:4a:b6:4a:2c:50:8c:8b:f7:d9:1a:04:
32:35:6a:46:4d:ad:8a:a4:67:45:73:44:51:54:ef:56:fa:34:
d1:b5:21:4b:38:2a:6f:ce:3d:7f:1c:cc:17:76:36:79:fe:d7:
b7:14:bc:03:6f:38:6f:6b:6d:58:7b:b1:53:94:e0:8d:59:b5:
06:96:da:d7:e2:4f:a2:9a:fa:20:da:89:a2:9a:58:0c:a3:28:
6e:06:e6:39:2b:54:68:ca:5e:ea:d8:85:56:18:4a:c6:84:47:
46:34:36:99:5b:f5:1c:3c:c7:1b:4b:7b:e5:4b:83:ab:cb:27:
75:d0:50:da:09:ed:a6:a8:d5:fc:04:e4:1d:c8:21:9b:cd:c7:
de:1e:6a:8c:6f:af:2d:39:70:99:17:b2:d3:66:a2:01:cd:d9:
d0:17:6a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:28 2026 by rpki-client