Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
File: POdWa7WxnnAPSOJeB1BsLyIt84Q.mft (raw, json)
Hash identifier: rCxQ76Lm7hOH1NFOHjBLGwopyqpVeHopys68xM2Io04=
Subject key identifier: A7:DB:E8:AE:AD:25:7F:05:C3:A6:37:07:F0:EB:E0:BD:F3:2F:AB:17
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 01A0EB1C2C2C2730283FF31D366B7C72FB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
Manifest number: 12D6
Signing time: Tue 29 Sep 2026 03:01:26 +0000
Manifest this update: Tue 29 Sep 2026 03:01:26 +0000
Manifest next update: Wed 30 Sep 2026 03:01:26 +0000
Files and hashes: 1: IKe3Kuub0SpVVP2Gnq1T557gDgk.roa (hash: ci82OhcD+rqbU1y8ZlxW++hpafTX5Z7/Pm7iV79c95E=)
2: POdWa7WxnnAPSOJeB1BsLyIt84Q.crl (hash: 8MYYalfBueo+ktRkUW1oZgAGWeGsiKaCl0/UbovJ40g=)
3: fgbvzgb70NEoaagktTqxdMYst4c.roa (hash: Eoip5fkz+jvKGq0WNw0xxn6yHtKCLgJl9ph2sUZ/62o=)
4: g0yPFaUHY-D6DoLmNBezdgok6L4.roa (hash: tF2Yfxepm6QgVMGCXK7Mb8KH/TWmlDjJHDygGKLmNLo=)
5: ywHuQjcoQQPpckvAcM1rJIpUcPA.roa (hash: Gf5RuuJQtNjDUR6Af6lWwEk4oPf4XfNWFz/FImCV94g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:2c:2c:27:30:28:3f:f3:1d:36:6b:7c:72:fb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Sep 29 03:01:26 2026 GMT
Not After : Sep 30 03:01:26 2026 GMT
Subject: CN=a7dbe8aead257f05c3a63707f0ebe0bdf32fab17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:74:92:4a:c1:f9:68:fc:46:42:a4:8f:84:
30:cf:0c:61:be:e0:2e:1a:69:da:f4:18:65:b3:d5:
22:fe:0c:0e:14:ac:97:1c:65:6d:61:ee:bb:3c:74:
20:90:48:10:b2:42:b7:e9:90:64:ff:7a:55:e1:8c:
5e:cc:81:2d:8f:73:29:97:ef:58:6a:88:62:e2:06:
1d:1e:08:02:7a:c6:e4:70:99:a1:f0:01:87:18:25:
a1:3d:93:b4:2a:c7:a7:f4:ff:8c:c8:63:a1:4b:35:
7d:b4:4c:2e:fa:bd:8d:e4:01:f6:ae:4b:41:7b:9b:
92:c4:d8:01:62:49:e5:4b:0c:a5:0f:bc:da:fd:f3:
45:0c:19:2a:f6:9b:44:6d:03:18:d7:b2:02:f0:4e:
57:04:58:a0:f7:0d:b4:aa:cc:d5:26:08:71:4c:67:
76:d8:eb:0f:e4:18:24:54:b7:d2:c4:76:ca:40:e0:
80:66:5f:84:05:03:4c:47:df:aa:60:79:90:4f:5a:
2b:93:f1:cb:7e:5a:0d:ca:f1:8c:ba:7f:db:c8:fd:
2b:41:43:11:13:af:b2:92:14:dc:a8:be:c7:92:95:
f0:e6:4f:e2:b7:85:a3:3b:9c:a2:a4:d9:09:ff:bb:
50:47:fa:92:bc:21:18:d7:6f:a3:60:87:b8:ac:23:
86:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DB:E8:AE:AD:25:7F:05:C3:A6:37:07:F0:EB:E0:BD:F3:2F:AB:17
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:01:e9:40:29:3d:11:cd:87:20:1c:41:c4:7f:bf:97:6f:2b:
4e:9e:4e:c5:4d:2b:fa:6f:c4:20:e9:46:a9:65:8f:75:df:de:
5c:ed:80:ac:e8:6e:1c:31:3b:71:b5:06:04:79:a9:f4:a8:ad:
3d:e2:e0:d7:22:34:ff:f1:43:c9:a0:a2:c6:71:41:0a:70:2f:
84:67:fd:d9:75:f1:06:ac:07:3f:58:45:b0:66:36:a3:bb:3b:
84:96:c7:b8:80:35:18:48:45:96:99:1e:e8:cf:33:74:cd:f4:
66:8e:51:c5:23:75:2e:d8:36:ce:02:3b:c6:7b:13:5e:6c:c9:
90:36:af:2f:e8:ab:38:18:9e:b8:9e:ac:0b:bc:47:89:68:b5:
cb:37:77:a8:f4:dd:0b:a9:71:41:fc:74:e4:7a:7e:44:a8:a2:
ba:3e:26:78:0c:00:c8:87:9d:33:37:aa:7d:e5:56:e2:c2:89:
23:af:90:5f:bf:57:25:11:a2:8d:57:00:96:b1:c6:69:e6:9e:
c9:bc:86:19:24:6e:70:e2:b0:2a:a4:67:e3:08:49:ee:7d:9a:
30:cd:a4:6c:98:5b:da:ce:f0:16:5e:51:cd:08:11:56:9f:33:
65:e6:1b:33:df:0c:83:71:6b:fa:b2:ea:00:8a:29:2b:c4:fc:
d6:b9:a4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:09:28 2026 by rpki-client