Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: bJXtLju37D1m9sZz7bJ4pxp+gvfuDVn3hY1pLsc+de0=
Subject key identifier: A1:32:5F:E4:5B:30:70:73:D2:B9:30:C0:27:BE:3D:48:FE:B2:F0:C1
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 019E205AB063937289F610476FE694780650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0DB1
Signing time: Wed 13 May 2026 08:01:14 +0000
Manifest this update: Wed 13 May 2026 08:01:14 +0000
Manifest next update: Thu 14 May 2026 08:01:14 +0000
Files and hashes: 1: Lz876iU0xtfcqSVTekYcUEB8rNY.roa (hash: P7Dx6/I7M7mFS8oU5u2ZG2WFIIDRuSNAyOVWgF0FkSI=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: Qx6UNgxbIZZeGfcoyklG+0iY14+MwRlLqIc+CYY+PfE=)
3: QzXLtRSL_Wpb4KzFVTKsOifLvN0.roa (hash: hX/2W21N6m8TCgCCktzdp/ieCUoz0M7Pa5wx/tC+JN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:b0:63:93:72:89:f6:10:47:6f:e6:94:78:06:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: May 13 08:01:14 2026 GMT
Not After : May 14 08:01:14 2026 GMT
Subject: CN=a1325fe45b307073d2b930c027be3d48feb2f0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:dd:ea:c5:ef:37:55:71:d8:28:19:07:d4:
0e:7e:e6:3a:33:c4:0b:a5:4a:e0:6e:2f:86:9e:f0:
d9:a6:a9:df:80:9d:1b:9c:de:4f:89:06:e0:8a:50:
3d:36:a1:ba:36:cf:d4:a0:62:a3:41:31:88:66:cf:
81:4f:a0:ee:53:7c:41:5f:2f:3a:50:60:f9:8b:77:
0f:a5:05:05:25:f6:9d:1f:60:9f:28:ab:fa:3f:0a:
9b:ab:b0:ff:9d:cc:53:30:20:ac:e4:c4:b7:3f:61:
2f:3d:f5:a0:69:f8:13:f5:4f:02:b0:52:34:62:d9:
bf:bb:ba:66:9d:46:88:56:75:c8:7e:3d:61:f3:03:
65:09:ae:a4:be:bb:f0:48:af:93:08:99:0e:a2:45:
22:be:92:a6:0d:1e:27:ad:36:66:cc:e1:cc:28:e4:
a8:a6:09:db:c1:36:e3:0e:cd:bc:fa:a5:ea:44:b3:
b5:60:df:9c:2e:a6:d6:98:a9:cb:ab:20:86:fb:95:
82:99:e8:28:62:b4:6b:17:b9:cf:54:b4:e7:2c:e7:
5f:b6:a4:eb:b6:4f:18:92:30:01:5a:8b:59:67:44:
07:88:0f:f6:a5:00:20:e9:ef:85:1c:2a:83:33:13:
8e:84:32:1e:29:82:dd:e1:64:d9:9d:0f:33:8d:76:
82:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:32:5F:E4:5B:30:70:73:D2:B9:30:C0:27:BE:3D:48:FE:B2:F0:C1
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:01:af:61:b7:ef:b7:5f:8a:10:69:30:f3:0d:0a:75:5c:b5:
fd:e2:d9:af:68:f7:a5:93:3f:57:f2:01:24:63:4b:43:65:89:
6c:43:0c:fd:69:55:e8:fa:c5:b0:e8:16:c3:48:ab:1a:ad:09:
00:49:df:b3:ec:e4:d0:ef:91:85:08:95:12:7b:1d:14:7a:df:
59:4b:d0:50:91:53:6e:70:15:1a:d9:85:bc:32:cc:ad:4b:b8:
69:4f:42:8b:f9:ef:2e:64:9b:0d:0e:83:7a:64:1f:22:5b:51:
4f:dd:89:4b:eb:29:05:58:46:39:8c:f3:77:01:e0:9e:e5:17:
56:d0:23:c5:6f:e1:61:55:60:e9:33:56:3b:82:37:c8:40:15:
f6:f9:cc:5a:46:00:84:01:2b:3a:6f:78:f2:ea:af:4f:aa:db:
fd:42:27:75:7f:c1:42:ff:66:be:50:94:04:aa:d0:3d:7a:35:
6a:71:17:05:3c:48:79:bf:38:6d:f2:42:0b:f6:2c:94:3b:ef:
1d:bd:09:8e:56:f0:4e:55:1b:d5:97:56:2c:07:c3:26:04:45:
fa:0d:c1:1a:c4:3e:17:f4:40:1b:b6:80:54:9f:3d:ae:16:02:
57:b3:0c:6c:58:7e:46:c0:1e:f0:0f:47:7d:d4:0d:80:d0:51:
18:27:8f:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWrBjk3KJ9hBHb+aUeAZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZWExZWE4ODdkY2VmZWU2MTM2MTU1YjhiZDgzMzkyOTM3
YzE2NzEwHhcNMjYwNTEzMDgwMTE0WhcNMjYwNTE0MDgwMTE0WjAzMTEwLwYDVQQD
EyhhMTMyNWZlNDViMzA3MDczZDJiOTMwYzAyN2JlM2Q0OGZlYjJmMGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAverd6sXvN1Vx2CgZB9QOfuY6M8QL
pUrgbi+GnvDZpqnfgJ0bnN5PiQbgilA9NqG6Ns/UoGKjQTGIZs+BT6DuU3xBXy86
UGD5i3cPpQUFJfadH2CfKKv6Pwqbq7D/ncxTMCCs5MS3P2EvPfWgafgT9U8CsFI0
Ytm/u7pmnUaIVnXIfj1h8wNlCa6kvrvwSK+TCJkOokUivpKmDR4nrTZmzOHMKOSo
pgnbwTbjDs28+qXqRLO1YN+cLqbWmKnLqyCG+5WCmegoYrRrF7nPVLTnLOdftqTr
tk8YkjABWotZZ0QHiA/2pQAg6e+FHCqDMxOOhDIeKYLd4WTZnQ8zjXaCRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEyX+RbMHBz0rkwwCe+PUj+svDBMB8GA1UdIwQY
MBaAFDzqHqiH3O/uYTYVW4vYM5KTfBZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgt
YjY0Y2FiNGJiZGZmLzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgtYjY0Y2FiNGJiZGZm
LzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyQGvYbfv
t1+KEGkw8w0KdVy1/eLZr2j3pZM/V/IBJGNLQ2WJbEMM/WlV6PrFsOgWw0irGq0J
AEnfs+zk0O+RhQiVEnsdFHrfWUvQUJFTbnAVGtmFvDLMrUu4aU9Ci/nvLmSbDQ6D
emQfIltRT92JS+spBVhGOYzzdwHgnuUXVtAjxW/hYVVg6TNWO4I3yEAV9vnMWkYA
hAErOm948uqvT6rb/UIndX/BQv9mvlCUBKrQPXo1anEXBTxIeb84bfJCC/YslDvv
Hb0JjlbwTlUb1ZdWLAfDJgRF+g3BGsQ+F/RAG7aAVJ89rhYCV7MMbFh+RsAe8A9H
fdQNgNBRGCePkQ==
-----END CERTIFICATE-----
Generated at Wed May 13 13:52:49 2026 by rpki-client