Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
File: poXxkUzrGSIcVjGTAn1FNFAzrV8.mft (raw, json)
Hash identifier: 1/1cTeSpNb6GPzcytWU0LSNFsUMU6ePpOBYhVAwYxBg=
Subject key identifier: F4:95:D6:2B:98:26:2E:0D:74:4D:D9:A4:41:A8:AD:7E:99:AF:60:1D
Authority key identifier: A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
Certificate issuer: /CN=a685f1914ceb19221c563193027d45345033ad5f
Certificate serial: 019D284E306C855B10263C24F4710620CE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
Manifest number: 04CA
Signing time: Thu 26 Mar 2026 04:01:45 +0000
Manifest this update: Thu 26 Mar 2026 04:01:45 +0000
Manifest next update: Fri 27 Mar 2026 04:01:45 +0000
Files and hashes: 1: L7xswkZOYtWZFKKAqV29uL6KrTo.roa (hash: 7HxTzwEYY9RT2odFm0ohwxx/sbrU6yVxKLryEnSr9X4=)
2: poXxkUzrGSIcVjGTAn1FNFAzrV8.crl (hash: FM6B64hDpYsFOxSSQVLPwEIEhHoxP88UGGXR50lKPkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:30:6c:85:5b:10:26:3c:24:f4:71:06:20:ce:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a685f1914ceb19221c563193027d45345033ad5f
Validity
Not Before: Mar 26 04:01:45 2026 GMT
Not After : Mar 27 04:01:45 2026 GMT
Subject: CN=f495d62b98262e0d744dd9a441a8ad7e99af601d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:0f:f4:49:02:7a:53:4c:d0:49:5a:84:ad:
37:a0:88:7a:83:46:63:69:9c:ec:f1:21:24:1a:76:
21:03:26:49:03:01:99:2b:98:eb:91:7c:27:c8:7e:
96:5d:ea:75:03:a1:7b:93:7f:4b:42:59:5f:95:cb:
2b:39:7d:f0:da:98:b2:34:d3:47:5f:c2:9d:11:3f:
6a:5c:6d:49:ba:6e:c1:c7:a8:a7:91:a4:c3:62:4f:
92:29:e8:44:78:9d:9d:95:ce:3a:5b:78:9f:e8:ab:
4a:ea:50:ab:bd:d2:20:e3:74:bc:8b:ab:35:d2:81:
a8:d1:22:22:5b:c9:09:8c:1a:fe:6d:f6:a0:2e:e9:
8a:47:0a:b5:50:3d:c2:fa:7b:08:ba:7a:66:0a:73:
53:8f:4a:b1:4a:ae:2f:0c:82:58:a2:af:a4:31:07:
da:4e:af:f3:bc:50:66:3e:15:f6:07:e9:92:ac:71:
91:6e:48:89:f4:61:38:c4:13:db:d7:5a:96:54:a5:
99:52:5c:9d:64:22:53:da:fd:37:e2:ef:d6:94:bf:
5a:21:94:9a:3a:33:ac:2c:90:21:44:e6:df:a4:fd:
1b:4a:95:14:a8:b8:97:be:a3:a2:f0:c2:59:d4:3b:
34:2d:e7:02:ca:30:9d:f5:13:9c:5f:50:ca:d7:64:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:95:D6:2B:98:26:2E:0D:74:4D:D9:A4:41:A8:AD:7E:99:AF:60:1D
X509v3 Authority Key Identifier:
keyid:A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:26:86:d4:ec:9d:50:44:ce:81:f4:52:22:4f:5e:b5:30:5f:
e5:36:9f:c4:4f:12:4b:22:33:c6:98:14:51:e2:11:da:a4:fd:
58:c7:e4:f7:17:79:1b:b3:74:8a:11:c2:81:e1:45:ab:9b:3b:
55:6d:de:eb:59:57:bb:ca:5d:89:a3:11:0e:7c:76:1f:8b:3c:
0e:9a:e1:2b:03:36:98:ab:41:20:7b:a5:44:00:fc:be:6e:07:
2b:0a:6a:e2:84:e5:67:7a:70:01:7c:cf:9a:de:cd:a5:c5:70:
05:69:d3:c7:60:48:5e:06:28:28:d7:42:c9:b6:77:f7:4f:42:
a5:35:fb:89:b9:53:76:d4:4d:3e:ae:de:dc:77:74:36:9d:b2:
26:be:f2:8c:3c:f9:9b:c9:49:0a:99:d3:05:a3:28:34:f9:30:
79:6f:63:53:e5:82:2e:7d:76:44:ab:62:e9:c2:44:21:73:90:
cb:b8:16:e0:8d:a5:84:d0:09:be:23:de:88:5a:43:4e:bc:2d:
30:e7:4c:7c:64:bf:8d:db:e3:64:32:86:c4:f1:8d:66:ac:c5:
52:13:29:43:fa:9f:aa:1b:ab:bd:12:b1:56:77:38:d6:9a:f7:
5c:55:e0:3d:1c:18:9b:f3:39:c8:ff:11:d2:82:ca:67:e7:07:
59:cf:f4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:22 2026 by rpki-client