Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
File: POdWa7WxnnAPSOJeB1BsLyIt84Q.mft (raw, json)
Hash identifier: Mxt3MU6n9HOv1jcBT13/8l/Q4RYv9ymabUkNIymLGPY=
Subject key identifier: 9E:D7:D7:75:DD:5E:E5:48:56:42:F5:8B:A5:38:59:27:C9:C6:86:71
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 019D254CC1E3D3E032E0E7C19471FE9C7DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
Manifest number: 10E1
Signing time: Wed 25 Mar 2026 14:01:20 +0000
Manifest this update: Wed 25 Mar 2026 14:01:20 +0000
Manifest next update: Thu 26 Mar 2026 14:01:20 +0000
Files and hashes: 1: 59JIOcrvwaeo-sYFo7t-MHws0gw.roa (hash: 4M2J02zr2QMxD8HQmUQji1N30RyT0kcqU00uheMc840=)
2: IKe3Kuub0SpVVP2Gnq1T557gDgk.roa (hash: ci82OhcD+rqbU1y8ZlxW++hpafTX5Z7/Pm7iV79c95E=)
3: POdWa7WxnnAPSOJeB1BsLyIt84Q.crl (hash: LRZ9rJ7avjnMAWHZG4v8IAaSkDlwCWhAzmssN9ZdhXo=)
4: g0yPFaUHY-D6DoLmNBezdgok6L4.roa (hash: tF2Yfxepm6QgVMGCXK7Mb8KH/TWmlDjJHDygGKLmNLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:c1:e3:d3:e0:32:e0:e7:c1:94:71:fe:9c:7d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Mar 25 14:01:20 2026 GMT
Not After : Mar 26 14:01:20 2026 GMT
Subject: CN=9ed7d775dd5ee5485642f58ba5385927c9c68671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:88:aa:6c:5b:bd:0c:1c:9d:2d:e0:50:2d:b6:
1f:61:c4:dc:bd:04:54:0f:99:5c:de:03:e8:9e:84:
d7:0d:49:8c:8d:f7:ee:8d:ba:75:33:70:b6:d5:86:
80:eb:96:9d:18:f3:10:1a:e1:9c:07:bc:ce:06:e5:
5f:18:2f:2b:aa:02:6e:77:7d:a8:76:24:b5:59:01:
f3:e7:37:d4:64:62:53:c2:93:ea:ad:10:e6:d1:de:
81:8f:7b:77:22:64:f9:0e:e7:25:29:1b:d0:8e:55:
5b:4b:92:2f:29:d1:b3:8b:24:80:75:1e:1a:a0:ec:
83:1e:2a:f8:24:9d:e2:a7:34:ae:46:da:8e:35:da:
4e:f2:36:3a:f0:33:eb:b1:ce:1d:55:2c:54:0d:3c:
5b:69:7a:aa:86:0a:31:61:c4:8d:75:36:b6:de:c5:
85:f5:71:02:ef:2e:f7:3d:b0:6d:2a:f8:73:73:0d:
0d:2e:ea:d8:cb:f0:ef:58:ba:89:9f:bc:62:0b:82:
82:24:6c:bc:22:00:2b:ef:18:d3:7d:b6:d1:d7:68:
36:6a:86:0a:0a:c6:31:f4:e0:4d:c5:93:6c:f7:27:
41:18:af:c7:52:b6:6a:bd:29:a3:69:4b:4b:a4:91:
ed:b6:75:d0:45:80:56:31:78:a2:77:96:9c:a5:ba:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D7:D7:75:DD:5E:E5:48:56:42:F5:8B:A5:38:59:27:C9:C6:86:71
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3b:8c:de:72:99:08:c7:54:01:96:ea:64:7e:3f:60:30:db:
ed:e6:25:0a:53:50:ed:3d:5c:44:c6:dd:79:ed:8e:3e:d1:ef:
58:b3:b3:51:7f:b8:2f:f8:06:7c:64:48:62:03:8a:3c:eb:ed:
8f:43:2f:1c:54:e2:b8:22:d8:57:51:33:91:b4:9c:b7:f9:4c:
2a:84:d3:ca:b0:d6:88:28:5c:a4:85:d5:cd:69:39:5a:cd:b8:
6c:3b:55:b6:63:b3:76:93:cb:ce:36:c1:f9:e4:ec:78:11:b4:
55:f7:2a:97:9f:39:0f:78:d5:b2:f5:70:fa:62:59:95:ef:74:
dd:69:7e:ab:87:ed:2c:b9:f6:67:80:fb:a3:36:c0:1f:fa:2c:
84:f1:32:bd:ac:7d:70:37:df:84:6f:71:2b:95:c0:00:09:78:
44:06:99:45:58:a0:b2:7d:b5:46:0e:da:c4:7c:2f:b4:49:24:
72:e9:c8:2a:9a:21:8f:f1:69:eb:51:14:09:c2:2b:b4:d7:4b:
ad:db:5d:02:d5:16:0f:1e:85:c3:50:51:05:83:85:60:69:a8:
58:9d:35:8e:c1:22:21:89:4b:3b:0e:1c:c7:f4:3b:93:87:81:
92:23:e5:3a:0b:94:d2:1c:46:9e:4a:15:1b:c0:10:bc:69:c0:
1f:cf:f5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:06:54 2026 by rpki-client