Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: 8o80QkVpR5HBJMebL53bN63gE82ksxJqF3u8C8x9JoM=
Subject key identifier: C2:85:70:80:FF:45:EB:2C:92:82:10:F3:98:45:DD:77:4E:D2:9E:41
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 019E2135E2FA5DEBC0DBECA007C7C8D0B775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 0F0D
Signing time: Wed 13 May 2026 12:00:39 +0000
Manifest this update: Wed 13 May 2026 12:00:39 +0000
Manifest next update: Thu 14 May 2026 12:00:39 +0000
Files and hashes: 1: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: 86AKRx4nh1TgdRZ36rEJc08jjJLCgXeJFGhPWEXDvT0=)
2: bJ6xJt6ZdP1j5xV1ifbFjOZCpCg.roa (hash: CuOWPy4R5sb9VUo/TuOTu1jjmvwMnXC2ruvyuim2IiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:35:e2:fa:5d:eb:c0:db:ec:a0:07:c7:c8:d0:b7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: May 13 12:00:39 2026 GMT
Not After : May 14 12:00:39 2026 GMT
Subject: CN=c2857080ff45eb2c928210f39845dd774ed29e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:3d:72:27:46:42:de:2e:14:66:84:1b:74:
4a:6f:a6:3f:ff:ab:75:fa:a5:3b:ee:02:9f:c9:dd:
88:02:08:5b:db:0f:8f:f3:12:82:a4:4c:35:ab:84:
2b:1e:42:0d:5a:ba:f6:5f:ea:22:46:f1:97:cf:70:
50:c9:af:bc:fd:c0:80:3a:80:e5:7c:3c:a7:b2:23:
42:38:58:76:1f:71:50:f2:4d:24:7d:f6:ff:c1:cc:
5e:5c:0c:e5:58:92:7d:cf:31:31:dc:6a:05:ec:4e:
6e:70:15:85:80:c4:55:37:cd:89:26:cb:40:24:fb:
90:14:23:9f:01:5a:c2:77:4b:9d:44:7e:ba:58:60:
8c:d2:0a:db:74:d8:3c:0f:28:a3:58:8f:3c:75:2c:
cb:3a:61:16:1b:40:55:1d:12:6a:04:fe:06:e2:2f:
85:06:ed:28:dd:db:33:8c:79:60:f2:7c:16:da:81:
c1:2e:cc:7d:f4:16:1b:12:63:c9:09:22:10:16:43:
2b:fb:c7:e6:9a:a9:47:18:a3:24:ce:12:bf:89:0e:
16:58:57:80:55:bf:8e:29:34:11:da:d2:02:54:a2:
ab:fe:a5:e3:89:e8:64:0c:9c:95:19:97:66:b5:c0:
6b:23:0d:c9:79:9a:92:e7:08:57:81:55:8b:aa:a9:
f5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:85:70:80:FF:45:EB:2C:92:82:10:F3:98:45:DD:77:4E:D2:9E:41
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:81:a1:82:38:fe:07:c3:f0:72:55:88:ae:4b:d0:40:66:e7:
ed:bb:d1:57:ae:1c:f6:2b:3a:a6:c0:d2:7f:7d:5a:f1:02:1d:
17:b9:03:ee:0f:64:c0:55:5c:a2:1e:04:0f:6c:04:bd:24:04:
2e:b7:13:de:fb:90:9c:a3:51:c5:b5:df:6a:e7:69:08:e5:d8:
55:32:0a:fb:91:ef:0c:f2:5f:dd:97:f2:5e:4d:5f:04:0f:f1:
ce:cc:44:07:03:e6:40:10:71:8c:70:f3:a6:5a:23:04:5f:90:
cc:f1:ea:39:cf:ee:58:6d:2b:32:99:f6:79:ce:29:15:f8:77:
55:72:73:c9:70:77:78:b5:0d:76:c9:93:60:74:24:2f:78:2b:
32:62:df:b7:b9:de:1d:be:5c:71:74:e8:58:9f:86:b2:fc:91:
05:eb:bc:98:ba:ff:9b:9f:34:3c:d4:6f:65:06:21:28:f3:9d:
4f:12:1c:a0:2c:a7:9d:68:38:73:f7:45:aa:fc:bd:5d:4e:ad:
6d:96:d6:6f:f8:c5:d3:5b:b2:3b:80:7f:43:db:13:27:dc:ac:
9f:c8:86:aa:63:e9:4c:e6:8f:9f:98:c4:fd:d9:43:ac:4d:58:
b1:c9:4a:ad:62:3d:11:30:ea:da:df:2b:c2:97:95:90:d2:f3:
09:0e:eb:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hNeL6XevA2+ygB8fI0Ld1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlOGM2Y2M0NDhmOTYzNWM1NmZmMjJiMTFjZDgwYzFhYTlj
NTJkNGYwHhcNMjYwNTEzMTIwMDM5WhcNMjYwNTE0MTIwMDM5WjAzMTEwLwYDVQQD
EyhjMjg1NzA4MGZmNDVlYjJjOTI4MjEwZjM5ODQ1ZGQ3NzRlZDI5ZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMI9cidGQt4uFGaEG3RKb6Y//6t1
+qU77gKfyd2IAghb2w+P8xKCpEw1q4QrHkINWrr2X+oiRvGXz3BQya+8/cCAOoDl
fDynsiNCOFh2H3FQ8k0kffb/wcxeXAzlWJJ9zzEx3GoF7E5ucBWFgMRVN82JJstA
JPuQFCOfAVrCd0udRH66WGCM0grbdNg8DyijWI88dSzLOmEWG0BVHRJqBP4G4i+F
Bu0o3dszjHlg8nwW2oHBLsx99BYbEmPJCSIQFkMr+8fmmqlHGKMkzhK/iQ4WWFeA
Vb+OKTQR2tICVKKr/qXjiehkDJyVGZdmtcBrIw3JeZqS5whXgVWLqqn1vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKFcID/ResskoIQ85hF3XdO0p5BMB8GA1UdIwQY
MBaAFD6MbMRI+WNcVv8isRzYDBqpxS1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTct
ZDI4MTA1ZTNmMzgwLzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTctZDI4MTA1ZTNmMzgw
LzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4Ghgjj+
B8PwclWIrkvQQGbn7bvRV64c9is6psDSf31a8QIdF7kD7g9kwFVcoh4ED2wEvSQE
LrcT3vuQnKNRxbXfaudpCOXYVTIK+5HvDPJf3ZfyXk1fBA/xzsxEBwPmQBBxjHDz
plojBF+QzPHqOc/uWG0rMpn2ec4pFfh3VXJzyXB3eLUNdsmTYHQkL3grMmLft7ne
Hb5ccXToWJ+GsvyRBeu8mLr/m580PNRvZQYhKPOdTxIcoCynnWg4c/dFqvy9XU6t
bZbWb/jF01uyO4B/Q9sTJ9ysn8iGqmPpTOaPn5jE/dlDrE1YsclKrWI9ETDq2t8r
wpeVkNLzCQ7rJw==
-----END CERTIFICATE-----
Generated at Wed May 13 15:31:13 2026 by rpki-client