Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: exISxHRtvUWH9jItaiPkHB5K4U0olHTZ3lGM4mcNE50=
Subject key identifier: 76:03:0E:BD:18:DF:6B:BA:5C:00:4C:7C:04:0B:4A:2D:90:BF:34:52
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 01A0D9837F139DE5BBA875DFC3C0505CFECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0F1A
Signing time: Fri 25 Sep 2026 17:01:08 +0000
Manifest this update: Fri 25 Sep 2026 17:01:08 +0000
Manifest next update: Sat 26 Sep 2026 17:01:08 +0000
Files and hashes: 1: Lz876iU0xtfcqSVTekYcUEB8rNY.roa (hash: P7Dx6/I7M7mFS8oU5u2ZG2WFIIDRuSNAyOVWgF0FkSI=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: juxUnPahYFj5szkP44t9dhsT/CIrOGrf8oNFh19cKiI=)
3: QzXLtRSL_Wpb4KzFVTKsOifLvN0.roa (hash: hX/2W21N6m8TCgCCktzdp/ieCUoz0M7Pa5wx/tC+JN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:7f:13:9d:e5:bb:a8:75:df:c3:c0:50:5c:fe:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Sep 25 17:01:08 2026 GMT
Not After : Sep 26 17:01:08 2026 GMT
Subject: CN=76030ebd18df6bba5c004c7c040b4a2d90bf3452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:04:40:31:3b:41:a4:a7:18:c7:8f:a1:35:
29:db:70:0c:fa:d5:30:ec:5d:9a:cd:4d:28:50:09:
0d:2f:cd:33:4b:74:de:13:65:a3:4c:bb:3c:b3:85:
4c:c7:b9:a1:c7:2a:d9:98:8c:2e:e5:5b:0c:6a:ff:
e1:78:24:7a:16:c5:34:97:51:53:ac:70:9a:1d:3c:
56:98:53:f3:7a:c8:83:13:83:60:a8:d9:3b:03:31:
f8:fa:01:48:e0:19:12:32:49:b6:5a:9d:e8:94:13:
2f:c5:b5:d3:75:53:01:41:39:22:8c:5f:54:82:79:
5c:68:78:04:7c:dd:48:78:3f:81:e2:9c:60:6c:d6:
ee:44:08:0b:f6:2b:2e:26:09:ed:8f:2b:56:d2:aa:
13:e0:c8:67:f4:f3:b9:f1:e9:56:c9:98:ef:87:ab:
1b:ac:67:74:0d:ec:89:0e:2f:d8:9c:18:c1:d4:5d:
d6:f2:6f:21:1d:24:7f:f0:1a:c6:7d:20:98:a6:2a:
79:0d:c3:ee:7e:e2:89:bb:46:0a:b3:3c:42:c1:97:
df:00:78:53:c4:27:a5:5b:da:92:e1:3f:8b:10:74:
d9:c8:fa:ef:de:23:cd:58:47:da:a9:ad:a3:53:48:
02:4c:16:ce:dc:20:cb:72:8b:71:d5:ce:42:0a:96:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:03:0E:BD:18:DF:6B:BA:5C:00:4C:7C:04:0B:4A:2D:90:BF:34:52
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:87:db:be:51:9e:13:00:5c:71:ed:fe:e4:7b:04:50:42:37:
6a:85:89:cf:50:2c:61:56:de:48:91:c0:56:88:ca:2c:dd:91:
fc:b9:ad:36:32:14:0c:2c:dd:3a:d6:30:cb:0c:94:cf:42:cc:
31:e4:4f:3f:e0:ee:64:f7:4a:e8:87:59:19:92:a9:cc:63:17:
2b:8e:62:39:c6:d8:5e:8c:b2:17:6d:a6:06:23:79:ba:7f:33:
92:07:da:ee:d1:67:b5:09:e3:56:f9:f0:84:1c:e2:40:5b:bf:
98:33:ff:0a:a4:39:64:67:7e:11:5e:cc:f0:65:db:e7:83:2d:
52:c4:b8:04:e5:f7:81:72:51:ee:e6:27:b1:be:04:fc:81:2e:
cf:f9:dd:0c:e5:68:55:38:26:36:ff:ec:57:f2:27:61:fe:90:
0a:5c:ba:b5:1a:ce:97:19:ec:40:06:84:4e:8b:b8:70:8a:fd:
f9:95:bf:ea:9c:ac:6d:a3:03:97:4b:69:ff:d6:02:f7:1f:0d:
e4:87:a1:73:88:6e:d6:6b:8f:af:90:f1:bd:49:b6:2b:7e:88:
cd:f9:f9:25:ba:5e:30:2c:47:85:bd:ea:01:bd:f0:6e:62:a5:
19:88:0f:9a:db:bc:4a:56:ea:d2:38:56:e8:01:72:35:8f:49:
32:b1:d9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:20:52 2026 by rpki-client