Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: 6fbeoCepWGwSf/eXYEO/dfo5QU5TCzCCGUhmPq7w3+o=
Subject key identifier: 72:3B:C4:1B:8C:75:87:04:D1:02:16:67:34:4F:9B:1C:A5:7D:1A:46
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 019E1E6C5BBC0FC5496BBF7FE182764C3528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0DB0
Signing time: Tue 12 May 2026 23:01:18 +0000
Manifest this update: Tue 12 May 2026 23:01:18 +0000
Manifest next update: Wed 13 May 2026 23:01:18 +0000
Files and hashes: 1: Lz876iU0xtfcqSVTekYcUEB8rNY.roa (hash: P7Dx6/I7M7mFS8oU5u2ZG2WFIIDRuSNAyOVWgF0FkSI=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: A9geaWVHDaawjQYjoXXEaEOlPvquHYUkAwkLYVP7fGo=)
3: QzXLtRSL_Wpb4KzFVTKsOifLvN0.roa (hash: hX/2W21N6m8TCgCCktzdp/ieCUoz0M7Pa5wx/tC+JN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:5b:bc:0f:c5:49:6b:bf:7f:e1:82:76:4c:35:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: May 12 23:01:18 2026 GMT
Not After : May 13 23:01:18 2026 GMT
Subject: CN=723bc41b8c758704d1021667344f9b1ca57d1a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a8:ec:91:07:9b:c4:2d:16:d6:67:40:e8:b5:
7b:62:f3:00:85:5b:8e:6d:83:dc:58:ac:d5:16:9a:
35:ce:fd:46:51:38:fa:e3:e0:12:ac:dd:72:4f:8d:
58:b8:cd:e7:23:be:a8:98:4f:b0:3c:90:f4:9a:8d:
e1:9f:d3:37:25:a3:a7:56:f4:15:79:6c:45:58:de:
4b:25:90:33:33:84:bb:3f:de:52:27:71:a6:74:31:
a9:eb:2d:e3:d8:98:3c:90:29:bb:f3:f8:0c:4d:23:
02:99:54:fb:85:66:5d:f0:bb:2b:5b:50:e7:2f:46:
33:b9:fa:f9:5c:e1:0e:ad:af:91:77:af:63:71:70:
c1:97:8d:bc:bd:bf:d8:49:25:ed:55:55:62:4a:d4:
c6:5f:58:e2:5d:01:ee:22:60:66:61:46:08:c0:3c:
98:ed:77:da:3e:59:d0:17:f9:e1:eb:5b:f2:b2:68:
6b:d8:ba:f0:e3:76:b4:65:26:7b:04:5b:db:3c:a7:
0e:19:70:98:8a:76:92:c2:82:12:4c:f4:71:5d:65:
18:19:2f:e3:45:ac:51:f0:b8:b3:11:b9:93:f5:22:
54:ab:be:0c:d9:34:0a:45:ec:4a:5c:1f:28:8e:71:
bc:61:a7:9a:8d:88:7e:a5:49:63:7c:40:5d:46:23:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3B:C4:1B:8C:75:87:04:D1:02:16:67:34:4F:9B:1C:A5:7D:1A:46
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:54:98:a0:35:32:76:9d:5f:36:6c:7a:0c:b7:6f:1b:03:5c:
86:5d:42:9d:ec:3e:94:2c:e5:95:e1:40:68:a7:42:84:5a:eb:
b9:01:e7:d1:68:30:d0:c6:8d:50:41:dd:7e:ea:07:58:ca:90:
59:d7:7b:ff:16:fc:91:55:ef:17:91:da:d8:59:0d:77:58:45:
38:e9:a0:88:e9:c3:e0:af:2d:cf:bc:75:ca:14:82:ff:8e:91:
4e:04:1c:68:04:4b:92:ce:83:6e:f0:3e:51:c0:0d:ca:f1:4a:
cb:01:d4:a0:10:a6:da:f9:17:71:22:f2:09:8f:af:3f:81:0a:
49:a4:3f:54:99:b7:5f:4d:0c:ae:cf:3a:a9:36:17:1c:91:0c:
77:97:d5:9a:f6:bd:22:9f:6c:19:32:81:3f:2e:dc:9e:c1:8d:
0d:89:a7:8c:b4:09:16:6d:85:cf:67:e0:4c:86:aa:2d:66:df:
fa:4b:84:fe:22:f0:b7:5d:81:b5:32:54:c3:02:85:26:50:86:
c4:e6:b4:3e:a1:89:d5:81:fe:2d:20:da:6a:a2:09:1d:05:68:
b4:b0:e7:7c:e9:3e:88:13:48:5c:ca:71:0a:c4:7f:b6:d6:5c:
dd:c0:de:41:e1:64:08:6c:41:07:62:0d:88:67:1f:35:d9:a1:
f9:02:26:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:28:01 2026 by rpki-client