Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: xgPRDB829fgEjjLb+7vnsHeJ4mIjmdvkLZQ0q8W7+jw=
Subject key identifier: 65:F1:93:83:5D:50:89:80:66:A8:36:DE:37:96:BC:D6:A8:5E:BB:E8
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 019F95EDFFA1528FB65095B8AD4DF159CEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 0FCE
Signing time: Fri 24 Jul 2026 21:00:30 +0000
Manifest this update: Fri 24 Jul 2026 21:00:30 +0000
Manifest next update: Sat 25 Jul 2026 21:00:30 +0000
Files and hashes: 1: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: Ugsj0NER0TI82MyBWxQtA5onAE/7tJB7r2SlkvvaQnU=)
2: bJ6xJt6ZdP1j5xV1ifbFjOZCpCg.roa (hash: CuOWPy4R5sb9VUo/TuOTu1jjmvwMnXC2ruvyuim2IiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ed:ff:a1:52:8f:b6:50:95:b8:ad:4d:f1:59:ce:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Jul 24 21:00:30 2026 GMT
Not After : Jul 25 21:00:30 2026 GMT
Subject: CN=65f193835d50898066a836de3796bcd6a85ebbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:97:da:13:36:2e:d7:2c:2e:32:5c:19:91:
f5:bc:0c:f2:b7:c8:43:2f:8a:9f:ed:97:47:c2:d1:
e9:67:3f:99:db:9f:b7:e6:27:9f:9a:69:bb:ee:a5:
8b:3b:c4:fe:a3:49:f2:03:fb:b4:cf:d7:63:f0:2c:
d2:2f:1b:3f:80:e3:87:c2:7b:19:ad:2c:52:60:1d:
56:3d:35:df:e5:7d:fe:9a:48:80:59:e3:8f:95:68:
5d:f9:c4:51:94:db:af:51:50:7c:e6:c0:ad:9d:3e:
b0:0c:10:35:d5:54:51:50:6b:e1:3b:da:e3:f0:8b:
e7:d9:af:4a:c2:02:fe:f1:ea:b6:57:97:61:31:92:
ff:ad:78:9d:af:4f:07:c3:9a:c4:37:ec:77:27:48:
3e:be:c9:a2:33:92:c8:75:1d:c2:9d:25:5e:db:db:
51:5e:8d:48:29:0f:87:71:9e:01:76:c9:8c:0f:09:
d0:81:3f:7e:0a:ab:05:b4:a9:13:11:78:37:58:f8:
e3:02:99:49:0d:41:23:d2:ad:f3:5b:8e:0f:6e:ad:
f6:9c:97:0e:cb:43:c6:6b:e9:d4:57:ca:91:22:57:
e9:78:1c:4a:db:ff:71:05:50:94:10:7d:c5:d8:eb:
ac:2a:af:49:09:94:19:23:f1:21:13:2e:73:6c:5c:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F1:93:83:5D:50:89:80:66:A8:36:DE:37:96:BC:D6:A8:5E:BB:E8
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a9:d7:77:51:b1:a9:1b:69:aa:af:c6:71:b7:67:2c:59:d8:
89:1a:2a:f1:cf:51:27:05:45:8e:66:29:4d:93:f6:9a:6a:c0:
e7:89:8f:9e:78:7a:cb:55:f2:36:c5:58:1b:fe:cf:d3:fe:d9:
51:5a:d9:59:25:1d:51:9d:e3:75:ce:1c:b7:ad:28:ef:42:7b:
7f:da:9c:fd:cf:ce:0d:fa:41:cc:c7:09:2d:75:27:b0:96:9e:
ae:ff:23:fc:55:de:fc:28:d1:81:89:90:f7:ba:95:9c:24:66:
c7:bf:ba:db:6a:85:9e:1d:c2:e8:a2:e0:da:f4:e1:12:56:6f:
f6:17:24:ff:ac:b4:d8:8b:f8:99:6f:03:b1:84:30:52:89:b7:
25:b4:a6:00:c7:b2:59:4c:a6:a0:72:1f:54:9c:88:84:fb:81:
e7:ce:90:97:4d:38:76:52:d3:f7:f2:e8:93:bf:2e:86:55:c3:
99:c0:25:f1:91:eb:ec:6d:4a:a7:f5:d5:9b:7c:3b:78:3d:d9:
f3:db:4d:de:97:8e:7f:95:ea:5b:1c:89:df:4b:a5:80:03:64:
dc:f0:fd:c9:15:f3:0e:dc:ab:7c:6b:ba:6b:10:ea:db:fb:72:
3d:ca:f3:26:1f:9f:1a:0f:f6:46:18:99:09:06:09:16:40:da:
0b:ce:94:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+V7f+hUo+2UJW4rU3xWc7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlOGM2Y2M0NDhmOTYzNWM1NmZmMjJiMTFjZDgwYzFhYTlj
NTJkNGYwHhcNMjYwNzI0MjEwMDMwWhcNMjYwNzI1MjEwMDMwWjAzMTEwLwYDVQQD
Eyg2NWYxOTM4MzVkNTA4OTgwNjZhODM2ZGUzNzk2YmNkNmE4NWViYmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ2X2hM2LtcsLjJcGZH1vAzyt8hD
L4qf7ZdHwtHpZz+Z25+35iefmmm77qWLO8T+o0nyA/u0z9dj8CzSLxs/gOOHwnsZ
rSxSYB1WPTXf5X3+mkiAWeOPlWhd+cRRlNuvUVB85sCtnT6wDBA11VRRUGvhO9rj
8Ivn2a9KwgL+8eq2V5dhMZL/rXidr08Hw5rEN+x3J0g+vsmiM5LIdR3CnSVe29tR
Xo1IKQ+HcZ4BdsmMDwnQgT9+CqsFtKkTEXg3WPjjAplJDUEj0q3zW44Pbq32nJcO
y0PGa+nUV8qRIlfpeBxK2/9xBVCUEH3F2OusKq9JCZQZI/EhEy5zbFzQkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXxk4NdUImAZqg23jeWvNaoXrvoMB8GA1UdIwQY
MBaAFD6MbMRI+WNcVv8isRzYDBqpxS1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTct
ZDI4MTA1ZTNmMzgwLzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTctZDI4MTA1ZTNmMzgw
LzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKnXd1Gx
qRtpqq/GcbdnLFnYiRoq8c9RJwVFjmYpTZP2mmrA54mPnnh6y1XyNsVYG/7P0/7Z
UVrZWSUdUZ3jdc4ct60o70J7f9qc/c/ODfpBzMcJLXUnsJaerv8j/FXe/CjRgYmQ
97qVnCRmx7+622qFnh3C6KLg2vThElZv9hck/6y02Iv4mW8DsYQwUom3JbSmAMey
WUymoHIfVJyIhPuB586Ql004dlLT9/Lok78uhlXDmcAl8ZHr7G1Kp/XVm3w7eD3Z
89tN3peOf5XqWxyJ30ulgANk3PD9yRXzDtyrfGu6axDq2/tyPcrzJh+fGg/2RhiZ
CQYJFkDaC86URQ==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:27:20 2026 by rpki-client