Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: zu7VKZmd9QXySD+Ax//j+TtfP+zaiQ9yp8xso8gB0sM=
Subject key identifier: 67:D0:DE:16:F5:8B:5C:65:B6:B6:DC:50:62:01:74:D6:C7:58:81:47
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 019FAB2C3D90B81534D06B76D3C1E655E0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 0FD9
Signing time: Wed 29 Jul 2026 00:00:30 +0000
Manifest this update: Wed 29 Jul 2026 00:00:30 +0000
Manifest next update: Thu 30 Jul 2026 00:00:30 +0000
Files and hashes: 1: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: NNLkk7sFJjwI0k7gsbdZXYC6/ROjP0Kh4SRD/2hdnok=)
2: bJ6xJt6ZdP1j5xV1ifbFjOZCpCg.roa (hash: CuOWPy4R5sb9VUo/TuOTu1jjmvwMnXC2ruvyuim2IiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:3d:90:b8:15:34:d0:6b:76:d3:c1:e6:55:e0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Jul 29 00:00:30 2026 GMT
Not After : Jul 30 00:00:30 2026 GMT
Subject: CN=67d0de16f58b5c65b6b6dc50620174d6c7588147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:65:3c:1f:90:dc:9b:93:78:04:01:5e:77:
49:15:65:ef:0c:ce:26:62:c0:70:ae:ff:c4:0b:71:
b4:1d:fd:ae:d1:3b:70:11:95:7e:97:bb:14:6e:e8:
fa:16:1a:ed:70:e4:90:a6:a4:97:ff:5e:09:1c:46:
f3:dd:fe:c4:e6:6c:b3:f5:1a:ef:e5:7d:1d:94:db:
61:6e:28:af:08:92:b7:d3:a3:90:8a:90:20:43:67:
fa:c1:83:57:a1:7f:98:b5:86:f5:f8:2f:a4:5f:08:
97:25:a4:4a:67:7d:2d:3a:c4:1c:e2:9b:5b:28:07:
ac:f0:e7:cc:24:17:28:30:2e:0d:9e:80:fa:f7:52:
f2:7a:69:3f:4a:f8:d5:78:83:a2:c1:70:6d:dd:e9:
5a:fb:d7:22:3b:fd:96:4f:6e:71:26:9f:6a:31:81:
40:64:61:f1:fd:0b:2f:99:61:77:c5:e7:93:e3:0e:
ab:46:e5:63:ed:60:81:25:8d:04:aa:c5:22:d0:48:
8e:57:c2:6e:16:0e:d4:17:cc:f3:b1:5b:df:8a:4b:
69:7d:81:1d:bd:93:ad:3f:6f:f0:ed:cb:a6:fe:08:
0a:a6:0c:de:01:50:e7:c9:42:56:c0:8d:60:c0:8f:
c3:d7:68:77:91:ce:89:cb:ca:d3:ec:75:89:8c:9e:
e4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D0:DE:16:F5:8B:5C:65:B6:B6:DC:50:62:01:74:D6:C7:58:81:47
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2e:2f:d7:65:11:27:a4:26:5e:2e:9b:7d:61:ae:b9:39:e8:
36:b4:66:fa:e0:2c:49:4b:01:95:8d:0c:8b:4d:f6:75:6d:73:
9a:60:2d:39:0a:0d:92:2d:00:60:b1:37:c8:91:d7:5b:88:10:
6e:4c:03:66:3a:49:50:35:ea:aa:2f:91:b4:ba:0f:d6:9c:2f:
20:94:cc:91:a0:c9:4f:fc:06:16:34:ea:8c:6e:7c:51:0e:0d:
f7:6d:93:b0:fe:6c:0c:a7:87:4d:60:a1:59:ac:25:ce:0b:fd:
5a:03:7a:82:84:f9:e0:6b:1e:85:a3:64:88:5f:17:8a:cd:fe:
1f:d9:84:2d:62:a3:b3:ae:8c:de:f2:b5:db:6e:24:da:92:3b:
95:fa:30:6a:0e:76:fc:47:0c:3e:4a:3e:ef:79:94:5d:9e:4a:
ad:7e:fd:b2:5b:31:d5:e0:2d:13:07:aa:e3:db:f7:a1:d9:f3:
32:e1:ba:4e:46:92:73:b9:08:7c:ef:60:18:7b:b8:0a:14:4a:
42:aa:37:04:20:a6:30:ba:af:51:48:84:ea:d3:3e:74:f4:db:
a1:dc:7d:97:8a:1d:ed:8a:cd:b9:a4:e8:64:33:56:dd:f2:69:
7c:e7:b6:a8:2c:a3:85:12:54:f3:06:7c:0a:12:c1:ad:85:9d:
a9:29:c9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:40:59 2026 by rpki-client