Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft
File: POwGHF7VbcoHdT_ktbjAkNl60OE.mft (raw, json)
Hash identifier: bMZnWYe4gXo3N7wVc+ncK2OJtsFRyhPYgjFHvE6Qqew=
Subject key identifier: 09:0C:4B:19:49:7D:63:3C:0D:FE:20:87:17:D4:F6:00:7A:5A:76:CA
Authority key identifier: 3C:EC:06:1C:5E:D5:6D:CA:07:75:3F:E4:B5:B8:C0:90:D9:7A:D0:E1
Certificate issuer: /CN=3cec061c5ed56dca07753fe4b5b8c090d97ad0e1
Certificate serial: 019CAFB68DEF490EDD4901F8ED672C47ED26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft
Manifest number: 07EB
Signing time: Mon 02 Mar 2026 18:01:42 +0000
Manifest this update: Mon 02 Mar 2026 18:01:42 +0000
Manifest next update: Tue 03 Mar 2026 18:01:42 +0000
Files and hashes: 1: POwGHF7VbcoHdT_ktbjAkNl60OE.crl (hash: PhO6DRULW77XaosIdEnPYqEHwQqC9FdXGd9DhrE9SJk=)
2: cLRoM7XLCk4C31zvG0Wgt7yjUMo.roa (hash: u4HrWzSOjheYxRy02gM2rX531WbutVdizyrj+q6Vb4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 18:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b6:8d:ef:49:0e:dd:49:01:f8:ed:67:2c:47:ed:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cec061c5ed56dca07753fe4b5b8c090d97ad0e1
Validity
Not Before: Mar 2 18:01:42 2026 GMT
Not After : Mar 3 18:01:42 2026 GMT
Subject: CN=090c4b19497d633c0dfe208717d4f6007a5a76ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c4:99:d6:3f:c6:67:b3:44:60:fb:a0:f6:3b:
46:80:54:c8:9b:56:d0:67:29:d5:a7:9b:b6:b7:2a:
14:8e:7e:1c:8f:73:af:fd:06:23:af:ab:43:f4:de:
b0:50:c7:06:14:49:8b:b9:62:0f:ad:f7:19:66:0c:
29:a6:94:9b:71:cc:9a:6c:84:70:18:ca:e7:de:7b:
ee:dd:a9:86:3d:d9:09:8b:27:72:a6:31:5e:93:bc:
d5:b5:1b:b8:10:e4:11:8a:cd:14:26:64:ca:76:e0:
72:1c:70:b2:40:7a:60:53:98:79:b3:7a:07:0a:f3:
e9:9f:92:65:5c:90:52:98:a6:1b:f7:5b:c2:4b:59:
c5:f1:e6:fe:f5:ef:31:26:06:bb:af:8a:17:3d:d2:
9e:c5:a1:d6:35:5b:8a:6b:84:d4:d5:76:85:1d:82:
e1:72:ae:e0:82:cc:80:2d:37:1e:a7:25:28:61:25:
65:c1:97:fb:93:41:2f:fb:20:9e:d8:73:fa:56:85:
92:49:e4:09:9b:09:4a:4b:4b:34:10:f2:2a:58:91:
e2:bb:c0:8e:58:f7:65:f8:b8:59:84:94:ec:a8:7d:
16:b8:c9:7d:8d:45:58:95:82:9f:53:50:dd:0c:db:
60:13:1e:aa:6f:bf:a9:06:40:de:e9:f8:4b:7d:6c:
b2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0C:4B:19:49:7D:63:3C:0D:FE:20:87:17:D4:F6:00:7A:5A:76:CA
X509v3 Authority Key Identifier:
keyid:3C:EC:06:1C:5E:D5:6D:CA:07:75:3F:E4:B5:B8:C0:90:D9:7A:D0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3f:45:2c:af:e6:9c:30:04:b9:7b:27:9c:c6:b0:60:3d:82:
2c:bd:92:1f:41:ee:1d:d1:74:37:9f:0e:de:15:81:fe:26:5b:
8e:3a:3f:9d:a5:a6:4a:64:a7:e2:a0:f1:2c:4c:e3:3d:66:ba:
e5:c3:6e:1f:56:cf:e0:ba:40:8f:7f:43:37:ff:22:c6:74:a4:
ed:bc:a0:60:9e:c2:3a:76:6c:9c:5e:e0:18:7f:a4:81:fe:80:
22:02:33:32:81:02:40:36:a9:36:d3:67:84:5f:67:4e:00:a0:
1f:9b:de:04:5b:2f:19:e4:34:f4:5f:73:57:11:ce:29:f0:16:
9c:db:8c:40:17:59:8a:25:34:2f:87:05:9c:96:48:7a:3c:48:
1d:1a:a2:e0:8d:4a:6d:5f:8f:48:1d:a6:10:29:b5:f8:c9:38:
0d:f3:7a:f8:f0:59:5f:1d:56:22:c6:72:9d:3a:65:22:36:95:
18:5f:93:00:ff:e6:93:3a:bc:fe:55:b7:b6:ea:07:71:f9:66:
7c:5b:c8:5a:8c:58:7c:45:cb:cc:70:96:e8:98:ff:a4:25:69:
a1:e7:9b:3c:a0:c7:5c:23:f5:f9:2c:ef:1b:6a:1e:d0:5c:ac:
d3:9a:e5:4f:5c:d8:af:17:b8:4f:28:e5:3b:31:70:c2:36:68:
71:33:be:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:02:16 2026 by rpki-client