Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.mft
File: POFsA48YrjpjX3C7X1cpHRnC_Wg.mft (raw, json)
Hash identifier: YqNwSb5vDROJ1aQL8dter+YsryBaAbPx9HCdK+gQT5I=
Subject key identifier: 77:F3:1A:2C:C2:5B:49:2C:47:1D:B8:26:A9:CB:7A:E4:F5:14:45:25
Authority key identifier: 3C:E1:6C:03:8F:18:AE:3A:63:5F:70:BB:5F:57:29:1D:19:C2:FD:68
Certificate issuer: /CN=3ce16c038f18ae3a635f70bb5f57291d19c2fd68
Certificate serial: 019FAA88A970B76D6CFE99BB039E03035C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POFsA48YrjpjX3C7X1cpHRnC_Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:50 +0000
Manifest this update: Tue 28 Jul 2026 21:01:50 +0000
Manifest next update: Wed 29 Jul 2026 21:01:50 +0000
Files and hashes: 1: 5IV12lakLjQprnJbcxcyiQamHtA.roa (hash: GZi6paQkvtZZMZ1EN5RWiQ6i/+Ni0PcRMjzr4OYZpu8=)
2: NTjaKlCxZP_2vMR0Igs6BRPLMBg.roa (hash: yCrErrFnv++SOw7EizZUOX9PNdlIeawFAL8bS5PpO8M=)
3: POFsA48YrjpjX3C7X1cpHRnC_Wg.crl (hash: bGzcJ3GDTFDN34kmKNNsNUr7wXQHeU+JwatwddUTllg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/POFsA48YrjpjX3C7X1cpHRnC_Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:a9:70:b7:6d:6c:fe:99:bb:03:9e:03:03:5c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce16c038f18ae3a635f70bb5f57291d19c2fd68
Validity
Not Before: Jul 28 21:01:50 2026 GMT
Not After : Jul 29 21:01:50 2026 GMT
Subject: CN=77f31a2cc25b492c471db826a9cb7ae4f5144525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:9d:f1:a9:1a:5f:b3:e4:e1:e4:8e:cd:03:
2f:f7:6b:b4:d8:97:29:a1:c9:4b:91:e1:c7:80:6d:
4a:43:ca:eb:d4:e0:3a:db:43:92:41:9d:4b:3b:6b:
4a:45:7f:2b:aa:8e:42:e5:d0:71:3e:83:19:82:7a:
78:57:98:dc:a2:8a:9f:41:ea:a1:88:0f:d6:e9:ed:
3f:88:83:cd:6b:b1:71:65:f4:74:69:22:e6:19:a1:
47:a7:e9:a8:c7:7d:bc:76:17:f7:4d:4a:21:5b:ef:
69:37:c2:7b:fe:a9:e2:6a:58:51:a0:98:c6:62:50:
ab:52:8c:4f:44:00:9e:18:da:76:cc:6c:4f:f4:53:
2c:b1:8b:95:9c:b9:82:43:e5:a2:52:17:d2:49:7b:
f6:2b:22:81:ee:2e:e4:8b:73:36:01:a6:7d:7b:1b:
e9:35:b2:e0:d3:c1:b2:73:69:1a:f5:ca:93:00:0a:
e4:35:0e:e9:d0:a5:d7:a6:5a:8c:30:f5:87:77:3f:
30:be:7d:fd:28:b3:11:61:7d:38:6f:20:b7:fb:8e:
62:a7:cf:30:50:1a:a9:dc:f3:89:09:58:fc:64:18:
65:7f:eb:7a:c8:28:78:19:29:d8:81:e4:d2:b1:e6:
ae:62:27:dc:45:71:e8:39:f1:77:4b:b5:e0:ea:bd:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F3:1A:2C:C2:5B:49:2C:47:1D:B8:26:A9:CB:7A:E4:F5:14:45:25
X509v3 Authority Key Identifier:
keyid:3C:E1:6C:03:8F:18:AE:3A:63:5F:70:BB:5F:57:29:1D:19:C2:FD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POFsA48YrjpjX3C7X1cpHRnC_Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f6:e4:aa:6b:e8:a2:61:e6:1e:60:e4:4d:c5:a2:b2:9f:56:
35:fe:1c:39:a8:dd:5d:8c:34:55:2f:2e:33:13:9f:0b:46:21:
5d:33:4f:e4:9f:bc:6e:b0:b1:13:29:e2:4f:1b:c2:fd:0c:b4:
12:e0:d1:9a:9b:3a:5d:d6:08:8a:b9:ad:2f:61:8b:8e:d6:be:
60:79:2d:10:4a:4e:17:e6:b3:fb:d8:04:e5:44:4b:6c:f1:d2:
1f:94:69:85:5f:b1:03:1e:82:69:f4:fd:f3:7f:cf:25:ff:a8:
fc:55:9e:a5:79:bb:89:c4:3b:74:a0:51:b4:80:58:8d:ba:7c:
01:fd:2b:73:82:91:37:a2:fd:59:aa:62:9d:78:bb:3c:ab:c5:
19:14:58:69:db:6e:73:b6:4a:80:57:08:d4:12:ec:fe:d2:54:
bc:5d:35:13:31:f0:86:01:66:46:ba:9a:b1:92:6d:56:7f:44:
98:fe:29:dd:7d:3e:18:3c:9b:df:29:27:12:f3:a1:d3:f4:82:
14:19:29:53:6f:12:31:50:6f:ee:22:ff:a4:05:7f:c2:0b:8e:
e4:ec:49:a9:d4:02:ee:0e:3f:18:1c:a5:98:9a:7a:e8:6f:67:
3c:42:44:6b:7e:ae:62:08:63:a2:c4:fc:2d:e8:2c:08:e5:a2:
54:97:d6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:06 2026 by rpki-client