Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.mft
File: POFsA48YrjpjX3C7X1cpHRnC_Wg.mft (raw, json)
Hash identifier: MFin2y2R36noYLc8ZR+PO1AklHAGsxUANWVAp1T5iqU=
Subject key identifier: CB:24:47:97:BA:7C:75:CC:33:A2:87:0D:71:F4:AD:97:6C:AB:3E:9E
Authority key identifier: 3C:E1:6C:03:8F:18:AE:3A:63:5F:70:BB:5F:57:29:1D:19:C2:FD:68
Certificate issuer: /CN=3ce16c038f18ae3a635f70bb5f57291d19c2fd68
Certificate serial: 019F916CD69FC5A7D3FAB71AD119D9ED5AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POFsA48YrjpjX3C7X1cpHRnC_Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:56 +0000
Manifest this update: Fri 24 Jul 2026 00:00:56 +0000
Manifest next update: Sat 25 Jul 2026 00:00:56 +0000
Files and hashes: 1: 5IV12lakLjQprnJbcxcyiQamHtA.roa (hash: GZi6paQkvtZZMZ1EN5RWiQ6i/+Ni0PcRMjzr4OYZpu8=)
2: NTjaKlCxZP_2vMR0Igs6BRPLMBg.roa (hash: yCrErrFnv++SOw7EizZUOX9PNdlIeawFAL8bS5PpO8M=)
3: POFsA48YrjpjX3C7X1cpHRnC_Wg.crl (hash: ArhNYOxs68A3BfLMCAYnAIT2E+Edu061B272p6jDny4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/POFsA48YrjpjX3C7X1cpHRnC_Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:d6:9f:c5:a7:d3:fa:b7:1a:d1:19:d9:ed:5a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce16c038f18ae3a635f70bb5f57291d19c2fd68
Validity
Not Before: Jul 24 00:00:56 2026 GMT
Not After : Jul 25 00:00:56 2026 GMT
Subject: CN=cb244797ba7c75cc33a2870d71f4ad976cab3e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:24:e0:ae:e5:03:5d:24:c7:c3:e8:58:18:
46:d3:73:f5:76:ba:69:ae:1c:ad:ee:ea:d9:06:09:
2d:fa:73:5f:e2:e6:e8:60:79:9f:94:62:f0:cd:ee:
99:70:db:6b:a0:25:70:87:4d:9b:7e:11:bd:1d:75:
1e:c2:3b:b3:99:c1:5f:cd:9e:15:ed:45:ed:cd:ec:
f5:d8:43:f2:c8:85:7b:fb:fd:18:9a:72:9f:f9:5e:
a7:23:11:71:6c:82:3f:df:84:dc:ac:08:da:a4:10:
3d:7b:b9:08:0b:14:56:33:c2:86:38:a1:d5:8e:dd:
a7:cf:cf:40:89:0a:50:ae:5b:42:0d:d5:4b:ba:79:
a5:58:58:ed:23:8d:30:50:04:63:29:40:b2:40:b1:
94:05:94:f6:a7:68:e9:06:8c:d7:f4:50:fe:8c:62:
80:99:82:51:0f:b5:87:71:03:16:3b:5d:bf:f4:57:
96:81:f5:82:28:cc:fc:38:fa:4a:e5:cd:13:79:a5:
e6:c9:b4:f2:03:8f:ab:bc:84:bd:1e:5d:6e:eb:6c:
2a:fa:0b:48:cd:9a:32:12:4f:b1:5e:a8:ad:b7:93:
5c:48:79:38:ac:cd:40:63:28:20:9e:92:f0:3f:2b:
c9:48:85:ab:1e:41:cf:7d:59:64:56:75:46:87:06:
3c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:24:47:97:BA:7C:75:CC:33:A2:87:0D:71:F4:AD:97:6C:AB:3E:9E
X509v3 Authority Key Identifier:
keyid:3C:E1:6C:03:8F:18:AE:3A:63:5F:70:BB:5F:57:29:1D:19:C2:FD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POFsA48YrjpjX3C7X1cpHRnC_Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3f:11:b6:77:aa:60:5a:64:21:57:87:d0:cc:f9:a3:6b:3c:
57:ac:1c:84:45:15:fd:58:83:f0:03:15:5a:b1:a4:77:93:e7:
f8:fe:41:79:84:4d:3f:fc:e4:7a:95:33:b2:3f:cf:40:cc:30:
b3:d2:41:2e:95:72:71:ad:77:6f:ac:cb:14:48:b4:50:95:6c:
7a:52:c3:7c:79:51:f8:b7:d6:7c:10:72:1a:08:6d:ed:a5:8f:
09:57:8b:87:48:5b:3c:67:a3:22:56:e7:3a:51:b0:f0:9d:b4:
0d:28:54:ad:ff:1a:ff:1b:6b:aa:f9:7b:ac:62:13:b8:d6:cd:
20:85:9d:1c:45:45:f4:3b:47:4a:a4:4b:92:cc:54:8a:73:26:
d1:51:98:64:1b:42:94:a3:36:94:c5:e0:fc:92:28:10:e2:27:
36:7f:b4:c9:a9:ce:a1:eb:44:6c:ea:33:c9:c7:91:e8:60:30:
54:1a:e6:f2:d8:9c:30:23:7e:a7:81:a6:ec:e1:b9:37:ed:b4:
52:45:af:f3:d8:20:6b:d9:1d:f0:6f:c9:31:ad:41:b9:58:10:
bf:14:68:9d:b7:d6:b7:10:af:60:11:a0:4b:ea:50:2c:a1:22:
84:cc:06:7c:49:91:2f:65:1f:76:c0:29:38:e5:88:49:5e:4b:
75:7f:5f:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbNafxafT+rca0RnZ7Vq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZTE2YzAzOGYxOGFlM2E2MzVmNzBiYjVmNTcyOTFkMTlj
MmZkNjgwHhcNMjYwNzI0MDAwMDU2WhcNMjYwNzI1MDAwMDU2WjAzMTEwLwYDVQQD
EyhjYjI0NDc5N2JhN2M3NWNjMzNhMjg3MGQ3MWY0YWQ5NzZjYWIzZTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRsk4K7lA10kx8PoWBhG03P1drpp
rhyt7urZBgkt+nNf4uboYHmflGLwze6ZcNtroCVwh02bfhG9HXUewjuzmcFfzZ4V
7UXtzez12EPyyIV7+/0YmnKf+V6nIxFxbII/34TcrAjapBA9e7kICxRWM8KGOKHV
jt2nz89AiQpQrltCDdVLunmlWFjtI40wUARjKUCyQLGUBZT2p2jpBozX9FD+jGKA
mYJRD7WHcQMWO12/9FeWgfWCKMz8OPpK5c0TeaXmybTyA4+rvIS9Hl1u62wq+gtI
zZoyEk+xXqitt5NcSHk4rM1AYyggnpLwPyvJSIWrHkHPfVlkVnVGhwY8GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMskR5e6fHXMM6KHDXH0rZdsqz6eMB8GA1UdIwQY
MBaAFDzhbAOPGK46Y19wu19XKR0Zwv1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9Gc0E0OFlyanBqWDNDN1gxY3BIUm5DX1dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWIt
MjQ1MTVhMTRjNDU2LzEvUE9Gc0E0OFlyanBqWDNDN1gxY3BIUm5DX1dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWItMjQ1MTVhMTRjNDU2
LzEvUE9Gc0E0OFlyanBqWDNDN1gxY3BIUm5DX1dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIj8Rtneq
YFpkIVeH0Mz5o2s8V6wchEUV/ViD8AMVWrGkd5Pn+P5BeYRNP/zkepUzsj/PQMww
s9JBLpVyca13b6zLFEi0UJVselLDfHlR+LfWfBByGght7aWPCVeLh0hbPGejIlbn
OlGw8J20DShUrf8a/xtrqvl7rGITuNbNIIWdHEVF9DtHSqRLksxUinMm0VGYZBtC
lKM2lMXg/JIoEOInNn+0yanOoetEbOozyceR6GAwVBrm8ticMCN+p4Gm7OG5N+20
UkWv89gga9kd8G/JMa1BuVgQvxRonbfWtxCvYBGgS+pQLKEihMwGfEmRL2UfdsAp
OOWISV5LdX9fzw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:06 2026 by rpki-client