Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
File: POsgUJhzLLkIgjBF79XXQCUMayc.mft (raw, json)
Hash identifier: GZioct9Ef+/PZZ+RS+YfWZzhKbzM/pcIRlc2AAbDRkw=
Subject key identifier: DC:01:D4:64:1B:9C:4B:6A:A8:3E:9F:69:75:6B:72:5E:E2:EE:32:5D
Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
Certificate issuer: /CN=3ceb205098732cb908823045efd5d740250c6b27
Certificate serial: 019D2816A40C4F9C0D80E9C05E0B832E0557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:01:05 +0000
Manifest this update: Thu 26 Mar 2026 03:01:05 +0000
Manifest next update: Fri 27 Mar 2026 03:01:05 +0000
Files and hashes: 1: POsgUJhzLLkIgjBF79XXQCUMayc.crl (hash: BKRVVbBzcqT3CvCZSzPVsQsSUFHhRvl49rMx1bWXTfY=)
2: pp4dxt_v1A7idhETx472Fe15Gfk.roa (hash: we1iOucBiqHe+rmZf6gCAUUM5mZ0MLpY0KQ1hHxgDkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a4:0c:4f:9c:0d:80:e9:c0:5e:0b:83:2e:05:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27
Validity
Not Before: Mar 26 03:01:05 2026 GMT
Not After : Mar 27 03:01:05 2026 GMT
Subject: CN=dc01d4641b9c4b6aa83e9f69756b725ee2ee325d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:25:91:d7:23:5a:dc:ea:a1:95:4b:62:cd:af:
87:96:0b:1b:be:73:1a:ca:2b:03:e0:e6:fd:02:a5:
da:c5:00:41:6f:8a:84:0d:05:7c:bc:71:0d:a6:10:
89:e7:3e:14:6a:cc:36:d3:e1:d9:bc:e0:88:fe:86:
6e:53:a4:03:6c:3a:b5:c7:e8:da:79:91:4e:8b:56:
d4:fb:ec:37:32:df:7e:5b:d1:10:f6:ec:dd:b6:43:
57:d7:04:4f:15:69:f8:9a:f8:73:a3:7d:c9:4a:be:
37:be:6f:70:d5:06:c8:8f:e0:2f:b5:d9:8b:30:37:
6c:6e:d1:27:6b:eb:7f:41:96:9c:ab:21:bc:a0:74:
7c:23:04:a5:78:6e:a0:7e:64:75:46:08:dd:26:6b:
9f:d6:48:b3:8a:b7:31:83:eb:4d:f2:0d:1b:34:2c:
b5:01:44:2e:5b:f4:72:3d:b7:7b:e5:9d:b3:91:19:
7a:84:14:0a:94:7d:64:61:f2:3d:78:52:c6:3b:42:
41:a0:81:21:b5:d4:86:3b:b8:3f:bf:55:db:59:f8:
5e:3f:c7:01:b8:a9:66:99:e1:aa:1a:97:62:e5:90:
51:9f:18:a8:ea:45:08:14:dc:b4:b4:f4:97:a7:1c:
f6:d4:6d:c9:2c:2b:8c:55:84:b9:f7:17:9a:ae:01:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:01:D4:64:1B:9C:4B:6A:A8:3E:9F:69:75:6B:72:5E:E2:EE:32:5D
X509v3 Authority Key Identifier:
keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0f:a4:fb:2c:c9:2a:f4:10:10:36:ce:ac:b6:92:c3:5d:8c:
fe:a8:33:8a:ec:9b:e9:69:53:bf:4d:ac:3c:26:06:91:fd:cb:
1a:0d:be:77:70:1a:d4:5d:1c:cf:60:69:eb:a6:71:54:6d:00:
b8:e9:10:13:06:c5:6d:75:ad:51:02:a2:14:6d:a4:bc:5f:8b:
9a:c1:bb:57:6a:47:a6:8a:aa:8b:ed:77:c2:73:2c:8e:a0:54:
d9:44:1b:1e:d5:f9:4d:aa:d2:99:88:db:c5:5d:2f:b0:0b:13:
2c:7b:74:07:97:2e:ef:1e:88:a2:98:51:20:61:41:7a:1f:f0:
d9:61:5f:a1:91:c6:b4:30:01:91:88:7a:23:47:dc:dc:1b:a6:
16:6c:1e:4b:66:40:f2:d2:e0:92:0d:b2:18:e6:5c:9e:59:6b:
0f:97:13:15:63:49:b9:87:2c:5e:86:b9:71:1d:bc:4f:47:e8:
72:2b:64:8e:f7:91:bb:1b:3b:2e:fe:23:16:49:dc:33:eb:ef:
08:26:c8:19:4b:ca:2f:07:71:f0:67:3e:60:73:14:3b:77:83:
97:12:c6:c5:0d:5f:b6:94:d0:90:01:d5:b8:c9:f7:fa:ca:ff:
56:36:6c:02:7d:67:d9:67:e2:bd:66:20:f7:69:14:8e:84:e3:
12:0b:89:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:28:22 2026 by rpki-client