Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: z1ER9EJihGfy7absmZXYh7SECRyNhGeAs2F5k9jKLXw=
Subject key identifier: 5E:E1:F0:76:FF:00:44:A0:83:76:A1:79:84:F8:40:65:88:53:48:19
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 019F9323F914F74A3908903B8BEBA8A12BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0E71
Signing time: Fri 24 Jul 2026 08:00:35 +0000
Manifest this update: Fri 24 Jul 2026 08:00:35 +0000
Manifest next update: Sat 25 Jul 2026 08:00:35 +0000
Files and hashes: 1: Lz876iU0xtfcqSVTekYcUEB8rNY.roa (hash: P7Dx6/I7M7mFS8oU5u2ZG2WFIIDRuSNAyOVWgF0FkSI=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: oGSd5H+o0zvmpDNgfds5MJgBoFXjhv81ubfWj0+GbdU=)
3: QzXLtRSL_Wpb4KzFVTKsOifLvN0.roa (hash: hX/2W21N6m8TCgCCktzdp/ieCUoz0M7Pa5wx/tC+JN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:f9:14:f7:4a:39:08:90:3b:8b:eb:a8:a1:2b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Jul 24 08:00:35 2026 GMT
Not After : Jul 25 08:00:35 2026 GMT
Subject: CN=5ee1f076ff0044a08376a17984f8406588534819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:b0:4e:5c:6b:b9:e5:68:1a:71:d3:2c:b9:
30:4f:26:2e:e2:a7:96:ec:b1:2e:c6:1c:17:53:53:
09:d6:ba:79:0a:10:09:f2:30:f3:68:fb:fa:40:8a:
35:b3:61:24:1b:fe:64:ef:96:7b:d6:a6:e9:5f:b0:
8b:4e:e4:65:51:37:b8:f8:da:f9:fa:76:ce:a0:be:
a9:c3:e4:3f:05:af:f5:38:ec:4f:56:6f:10:54:f7:
1e:2c:50:a5:49:4b:ab:86:6e:c2:f7:1f:f9:0a:9a:
34:4a:6f:03:ff:aa:84:ba:f4:ad:c9:35:7f:0d:03:
71:19:f5:fd:b1:b7:b0:8d:a3:db:f2:d7:1b:bf:7c:
a6:4a:2c:f3:29:00:51:de:32:19:1b:10:04:a2:4a:
3e:62:5d:d0:cf:9a:8e:e5:01:e7:3b:6a:d0:72:e2:
4d:42:a5:35:09:ea:35:6c:59:e9:9b:3c:19:2d:1f:
b7:73:7e:41:ba:e1:24:e7:51:2c:05:69:60:84:b2:
ec:15:c8:65:07:15:f0:25:f0:d9:e2:07:0f:96:6d:
3f:57:ce:df:44:17:e7:72:39:53:f9:eb:0d:d0:47:
02:39:3f:72:d6:99:58:f5:20:74:a0:d0:f0:c8:d8:
0f:d0:a6:9d:c3:bf:dc:b1:48:73:e2:e2:10:44:f9:
22:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E1:F0:76:FF:00:44:A0:83:76:A1:79:84:F8:40:65:88:53:48:19
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7f:18:26:4a:2a:4d:94:c1:59:47:b3:a3:13:62:c4:aa:01:
f9:ae:c4:df:70:89:50:04:63:6a:11:96:9e:ae:27:f3:85:96:
ed:97:3d:66:6f:96:ac:14:25:a4:a2:dd:b6:ae:b4:71:83:90:
c0:a9:3d:3a:47:98:4e:39:c9:94:a5:ff:73:68:94:ac:8c:e4:
51:28:44:e8:a8:df:ba:b5:51:c7:b0:f3:4c:97:d6:ee:dd:76:
98:e0:98:44:f3:92:28:d1:fc:bd:2d:d8:4b:3d:da:a1:82:bc:
82:0c:07:1a:1b:09:55:47:de:31:eb:bf:fa:33:eb:e5:34:2d:
18:80:a5:89:5a:74:61:24:5f:61:92:09:13:1a:4c:37:b5:3f:
e7:e9:0f:13:c0:f0:03:d5:24:95:a5:70:83:9c:c8:cb:52:47:
de:fe:6a:5e:14:f8:67:f9:f5:8d:ff:f1:cf:b2:8a:d2:24:b7:
41:46:17:1e:46:97:4a:74:72:86:b5:9d:69:92:fb:ad:cb:37:
9b:ae:3b:98:10:df:86:11:7c:3f:64:30:51:c0:47:09:f9:bc:
1e:ac:60:ed:a4:70:88:be:f4:40:ed:0a:b3:54:94:5c:b2:8d:
38:67:17:e2:d8:14:96:df:e8:64:91:87:e9:a5:2b:05:6d:f8:
7a:c3:94:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI/kU90o5CJA7i+uooSu3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZWExZWE4ODdkY2VmZWU2MTM2MTU1YjhiZDgzMzkyOTM3
YzE2NzEwHhcNMjYwNzI0MDgwMDM1WhcNMjYwNzI1MDgwMDM1WjAzMTEwLwYDVQQD
Eyg1ZWUxZjA3NmZmMDA0NGEwODM3NmExNzk4NGY4NDA2NTg4NTM0ODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDSwTlxrueVoGnHTLLkwTyYu4qeW
7LEuxhwXU1MJ1rp5ChAJ8jDzaPv6QIo1s2EkG/5k75Z71qbpX7CLTuRlUTe4+Nr5
+nbOoL6pw+Q/Ba/1OOxPVm8QVPceLFClSUurhm7C9x/5Cpo0Sm8D/6qEuvStyTV/
DQNxGfX9sbewjaPb8tcbv3ymSizzKQBR3jIZGxAEoko+Yl3Qz5qO5QHnO2rQcuJN
QqU1Ceo1bFnpmzwZLR+3c35BuuEk51EsBWlghLLsFchlBxXwJfDZ4gcPlm0/V87f
RBfncjlT+esN0EcCOT9y1plY9SB0oNDwyNgP0Kadw7/csUhz4uIQRPkiawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7h8Hb/AESgg3aheYT4QGWIU0gZMB8GA1UdIwQY
MBaAFDzqHqiH3O/uYTYVW4vYM5KTfBZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgt
YjY0Y2FiNGJiZGZmLzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgtYjY0Y2FiNGJiZGZm
LzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiH8YJkoq
TZTBWUezoxNixKoB+a7E33CJUARjahGWnq4n84WW7Zc9Zm+WrBQlpKLdtq60cYOQ
wKk9OkeYTjnJlKX/c2iUrIzkUShE6KjfurVRx7DzTJfW7t12mOCYRPOSKNH8vS3Y
Sz3aoYK8ggwHGhsJVUfeMeu/+jPr5TQtGICliVp0YSRfYZIJExpMN7U/5+kPE8Dw
A9UklaVwg5zIy1JH3v5qXhT4Z/n1jf/xz7KK0iS3QUYXHkaXSnRyhrWdaZL7rcs3
m647mBDfhhF8P2QwUcBHCfm8Hqxg7aRwiL70QO0Ks1SUXLKNOGcX4tgUlt/oZJGH
6aUrBW34esOUWg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:13:56 2026 by rpki-client