Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: abn8PWMAFYo7okL41izdVZ2TpDKCbv+RMYPIM9NoyCQ=
Subject key identifier: 61:77:DB:BC:8E:26:35:E7:4F:82:BC:20:A1:64:B5:85:29:A6:A9:0C
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 019F93FFA97521A67CB5D22595721BADC180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 0FCD
Signing time: Fri 24 Jul 2026 12:00:33 +0000
Manifest this update: Fri 24 Jul 2026 12:00:33 +0000
Manifest next update: Sat 25 Jul 2026 12:00:33 +0000
Files and hashes: 1: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: 2Xwe0eyb9EKWkwHOUyWXkGFkuKi+c+UVOdfTvDW6Tt4=)
2: bJ6xJt6ZdP1j5xV1ifbFjOZCpCg.roa (hash: CuOWPy4R5sb9VUo/TuOTu1jjmvwMnXC2ruvyuim2IiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:a9:75:21:a6:7c:b5:d2:25:95:72:1b:ad:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Jul 24 12:00:33 2026 GMT
Not After : Jul 25 12:00:33 2026 GMT
Subject: CN=6177dbbc8e2635e74f82bc20a164b58529a6a90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:cc:47:80:50:dd:5e:f6:d0:7e:d5:3e:57:
0e:b1:bb:03:1f:68:c8:f9:7b:9a:e0:ba:f6:c4:a5:
2c:2f:06:fd:b9:21:e5:9c:dd:42:82:61:15:be:65:
96:c8:d1:d9:cc:9f:a7:b6:04:6d:dd:ba:1e:89:41:
61:6c:88:ba:25:b5:fe:3b:7c:06:92:8d:bf:9c:9d:
0d:b8:eb:a6:55:23:24:9d:66:b1:f1:7e:a5:3b:e2:
41:a5:7c:51:f2:3b:e7:b4:b8:d5:00:03:08:11:c9:
c4:64:2e:74:f9:6d:79:99:8d:57:2c:62:bf:cc:5c:
44:e9:58:4d:45:d7:30:f4:1f:76:7e:01:e5:66:eb:
87:ea:77:54:f7:cb:17:25:72:01:dd:53:ae:99:fe:
d9:eb:1d:68:e3:3e:e6:35:52:d8:f9:16:76:8d:57:
04:13:e3:ad:1a:af:2e:57:f0:4b:04:04:92:0f:52:
c7:16:36:4f:f1:89:bf:8f:13:2a:65:bd:48:70:20:
6c:19:20:af:65:95:53:5a:71:9f:23:e8:2b:19:bc:
d8:61:93:9f:09:8e:9f:eb:84:22:e7:f5:7a:b6:43:
95:85:44:15:65:d9:14:91:a7:16:22:6a:7f:ac:e4:
85:bc:41:aa:18:ef:71:8c:7f:8e:74:d3:d8:85:13:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:77:DB:BC:8E:26:35:E7:4F:82:BC:20:A1:64:B5:85:29:A6:A9:0C
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:67:66:db:66:16:38:0f:76:5f:b8:fe:ab:86:3c:45:35:d0:
f0:eb:03:c1:4f:68:34:18:8b:67:6b:d7:51:33:15:43:92:73:
23:69:d3:4f:99:eb:7d:3b:e8:d9:d0:66:f7:9d:73:88:f7:90:
be:30:56:38:03:c9:a5:38:c2:02:53:25:3f:42:71:c1:2d:fb:
88:35:f6:7a:31:85:5c:18:17:7a:f4:f3:61:dc:37:0a:42:3e:
04:6d:d6:2a:78:46:75:ff:bb:39:8f:d4:a2:13:37:de:4e:56:
ad:b6:99:3d:c5:89:2b:ee:7e:46:d7:d0:50:ce:83:51:ae:d7:
70:87:e0:5a:0e:72:b3:c3:4d:18:d1:7e:ad:2e:34:5c:35:d7:
40:3b:09:2b:02:c0:80:9f:82:fc:ad:88:a3:bc:23:a6:d5:64:
b2:9e:8a:27:43:52:ef:29:33:bd:74:4c:83:3a:10:b0:63:22:
be:a3:11:a1:d6:f7:84:72:69:e0:fa:5c:d6:80:4f:ab:aa:f1:
9c:91:27:cd:25:e7:35:47:45:86:a2:99:66:8f:4e:44:36:1f:
46:98:6b:9d:6a:86:a8:c3:72:d8:05:45:69:a0:e9:7c:2b:55:
da:aa:9f:11:9a:b5:69:8f:63:de:c2:8a:8e:6e:69:00:a3:3c:
cd:d9:ec:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:22:34 2026 by rpki-client