Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: 3v4TjAGti74W3fBmGXVJzKbVvtL5Pv58I75qnHGgfbg=
Subject key identifier: 8C:3D:46:A4:C0:25:EC:E1:80:FD:A5:B7:F6:B9:82:0D:D3:F5:63:0D
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 019F0A06A84D6ECF8A6811C657FE2112C989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0E2A
Signing time: Sat 27 Jun 2026 17:00:36 +0000
Manifest this update: Sat 27 Jun 2026 17:00:36 +0000
Manifest next update: Sun 28 Jun 2026 17:00:36 +0000
Files and hashes: 1: Lz876iU0xtfcqSVTekYcUEB8rNY.roa (hash: P7Dx6/I7M7mFS8oU5u2ZG2WFIIDRuSNAyOVWgF0FkSI=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: xDa44C6Bv2jy7eLJJ2eNU8a4V2o2Csp1TDCk5cUFHfo=)
3: QzXLtRSL_Wpb4KzFVTKsOifLvN0.roa (hash: hX/2W21N6m8TCgCCktzdp/ieCUoz0M7Pa5wx/tC+JN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:06:a8:4d:6e:cf:8a:68:11:c6:57:fe:21:12:c9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Jun 27 17:00:36 2026 GMT
Not After : Jun 28 17:00:36 2026 GMT
Subject: CN=8c3d46a4c025ece180fda5b7f6b9820dd3f5630d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:16:9b:1b:21:dd:50:d0:2e:0e:07:1d:62:
2b:66:23:c4:19:cf:92:ae:f2:24:64:e3:75:aa:35:
66:98:04:e6:98:c6:57:b9:64:3c:66:c4:c3:bb:5f:
a5:ab:1c:6f:d6:11:3a:4f:5c:69:01:9b:48:5b:c4:
91:97:0d:1d:3a:eb:e0:0b:0b:f3:06:fc:8a:eb:b2:
ff:5f:b4:e9:83:a4:b0:2f:f5:3e:f4:de:c7:6e:a1:
d0:04:cc:ec:aa:1d:1e:ed:04:8b:83:cf:08:d1:bb:
f5:05:23:e6:39:1f:02:d9:9e:24:8b:ca:d4:30:0a:
eb:43:55:d1:a0:8b:b2:f6:d6:85:96:32:42:75:99:
2d:68:89:ad:f7:80:72:5c:14:91:99:ac:ba:ce:69:
3e:03:e5:48:61:bf:7e:99:f6:1f:d3:ce:a8:7a:e5:
07:9d:63:cc:50:a3:c5:f0:40:a0:51:ce:d5:f9:53:
1f:5f:56:9c:30:ce:f3:2e:91:bc:4f:7f:9e:24:34:
36:fe:18:17:22:aa:6a:d6:9c:fd:ad:bc:1d:f9:0d:
50:99:c3:69:14:7c:90:27:1e:70:6e:eb:78:c6:04:
6b:ca:80:fd:49:f5:44:aa:50:8a:a9:ba:d5:16:39:
80:7c:b2:14:2d:c8:e9:be:db:b7:20:e7:ed:8d:0c:
fe:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3D:46:A4:C0:25:EC:E1:80:FD:A5:B7:F6:B9:82:0D:D3:F5:63:0D
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:66:dc:2c:6a:45:d7:8e:fe:40:67:b6:55:28:fb:39:fd:c0:
04:3f:4d:fe:92:a5:97:84:40:db:86:ad:42:66:de:73:a2:af:
5f:67:b8:3a:89:2f:f6:a8:43:d9:cc:bd:a8:23:b9:60:a6:f1:
49:cb:07:f2:97:58:89:37:55:59:7f:79:9f:05:99:a5:3d:6f:
c0:7d:4c:29:79:23:c4:32:af:cb:17:fc:20:55:42:e2:98:84:
95:b0:54:8c:a1:ff:80:be:74:bf:9a:59:26:fb:d1:13:cd:f8:
bf:2a:a0:56:a0:0e:33:77:e1:02:11:be:27:88:cd:38:11:21:
f6:20:5a:6f:4d:1e:eb:d0:09:64:e2:1b:b3:ad:99:db:a6:93:
ac:1a:23:93:44:cd:27:e3:ca:81:b1:d4:24:c0:e5:44:2e:e8:
f9:ed:a2:8f:de:a1:c2:c2:8d:f8:ab:89:db:ee:2e:55:cf:01:
ab:3d:36:01:f6:53:ae:e7:fa:df:f2:ec:fd:89:f7:17:64:56:
dc:aa:35:a5:c4:80:54:27:e5:bf:50:a3:a7:cf:03:8f:fc:6f:
6c:e4:6e:58:d7:92:85:e2:a5:b8:5e:0c:29:ad:38:7a:9d:05:
6d:54:9a:fb:8c:05:b3:8b:b4:6c:08:0c:90:01:f9:e6:78:23:
93:11:ec:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 03:05:52 2026 by rpki-client