Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
File: POsgUJhzLLkIgjBF79XXQCUMayc.mft (raw, json)
Hash identifier: wTtP8dCBkUJ3fZfsN9bLE4JiyZOLQ0U7FqUWhSLdOjI=
Subject key identifier: 95:1A:CA:1F:A4:EE:91:D4:01:37:4F:7D:D8:B1:09:5F:14:C9:22:FC
Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
Certificate issuer: /CN=3ceb205098732cb908823045efd5d740250c6b27
Certificate serial: 019CAC7DDE1DC97A20CA84A8F2EEAA036ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 03:00:55 +0000
Manifest this update: Mon 02 Mar 2026 03:00:55 +0000
Manifest next update: Tue 03 Mar 2026 03:00:55 +0000
Files and hashes: 1: POsgUJhzLLkIgjBF79XXQCUMayc.crl (hash: bE/6omxDv7FDtfCX+ag2edGa5u/h1l27PNN6cI2fETs=)
2: pp4dxt_v1A7idhETx472Fe15Gfk.roa (hash: we1iOucBiqHe+rmZf6gCAUUM5mZ0MLpY0KQ1hHxgDkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:de:1d:c9:7a:20:ca:84:a8:f2:ee:aa:03:6a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27
Validity
Not Before: Mar 2 03:00:55 2026 GMT
Not After : Mar 3 03:00:55 2026 GMT
Subject: CN=951aca1fa4ee91d401374f7dd8b1095f14c922fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:45:c0:ba:7e:0e:20:43:5d:e9:54:d5:31:67:
c7:23:0a:c2:f0:a2:86:2b:7b:27:8e:f5:37:b0:52:
de:1b:8f:da:2a:3d:fc:a8:f3:67:aa:6a:5b:f7:75:
e4:d0:4a:ca:75:ea:96:0f:bd:08:58:0c:7c:1c:fa:
b6:27:3b:de:76:be:12:d1:5f:fa:14:dc:42:d6:98:
d2:b2:e6:75:0a:77:32:e9:37:c4:92:37:e9:28:4a:
07:53:1d:03:05:2a:24:d3:2d:5b:11:f9:ae:2b:5b:
ec:4a:4a:3c:af:f4:1a:3d:0e:e9:3d:fd:31:d4:5c:
10:51:43:d4:a4:1c:23:67:b6:59:37:6a:8d:8f:9b:
0b:d5:4e:3c:f5:27:36:fb:e5:24:b8:3b:e0:6c:35:
20:39:02:c6:3b:8e:f4:aa:1a:ab:d2:7f:e6:64:68:
b3:9e:aa:46:96:2f:86:8c:ec:1e:52:25:7d:fb:34:
7d:3a:02:74:2c:dd:7e:2b:35:c8:14:12:8b:4d:c8:
c7:2d:74:70:f7:78:e9:17:c9:76:b7:db:e3:a9:1a:
66:8e:06:92:2c:e9:f8:49:90:71:c1:93:ab:58:34:
5c:1d:54:07:8c:55:62:17:86:f3:4e:37:1b:db:97:
eb:15:8f:41:af:aa:b9:c4:b3:a9:d8:f6:a1:91:02:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1A:CA:1F:A4:EE:91:D4:01:37:4F:7D:D8:B1:09:5F:14:C9:22:FC
X509v3 Authority Key Identifier:
keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ec:2a:47:a8:63:9c:fd:5f:8d:75:de:a0:3d:12:82:7a:f3:
fc:5f:89:1f:c8:69:5b:42:cf:eb:9e:9b:f1:b0:82:06:b4:a0:
ba:03:b3:79:44:d0:79:ae:2b:98:08:43:6e:58:45:78:6f:f7:
4f:b0:5c:97:38:15:4d:e1:8d:7c:91:f3:b7:20:17:b6:46:de:
ab:5f:d7:ab:d4:d3:76:2a:ba:a9:a8:92:f2:7a:3b:34:14:46:
82:52:61:c7:c7:9e:d2:d8:80:50:5e:c6:b4:59:5b:17:ff:c6:
be:2d:7f:3a:18:86:c1:e2:b1:2c:11:64:ef:6f:11:0d:79:be:
0b:55:1e:40:67:b4:b6:3f:db:73:2c:67:52:33:f5:d3:89:e3:
a2:eb:ff:b4:24:4a:43:90:0c:e4:4d:eb:1c:7a:ec:00:15:c0:
8d:6f:c9:7b:59:2d:19:47:cb:87:2a:1d:7d:b4:c9:6e:d2:29:
15:0a:43:f3:da:fc:4a:fa:63:33:c9:6d:6b:0c:77:7b:35:07:
67:f0:38:a8:f5:6d:94:09:e2:86:15:ed:37:c2:5f:46:14:ea:
7f:25:99:36:47:ce:68:63:a0:a9:2d:55:3e:d0:8d:35:9b:03:
91:8a:8d:ba:98:e9:44:3b:dd:6d:e1:d6:b3:83:2e:b6:44:ee:
8d:51:3b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:43 2026 by rpki-client