Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: vYFX6D7PoQPZZi8re7yXNl/AobdZ9/jhM0pL86lTcmc=
Subject key identifier: 89:93:AF:41:CC:EA:63:EE:8C:79:6F:71:4E:4C:43:75:42:94:11:1B
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 01A1193D9A8DC3AC19BDF364E1C2929848AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0F3B
Signing time: Thu 08 Oct 2026 02:00:29 +0000
Manifest this update: Thu 08 Oct 2026 02:00:29 +0000
Manifest next update: Fri 09 Oct 2026 02:00:29 +0000
Files and hashes: 1: Lz876iU0xtfcqSVTekYcUEB8rNY.roa (hash: P7Dx6/I7M7mFS8oU5u2ZG2WFIIDRuSNAyOVWgF0FkSI=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: gLpl92EQ2fONgZh19vGLchk4aHfg4fp4SutahyhkXAk=)
3: QzXLtRSL_Wpb4KzFVTKsOifLvN0.roa (hash: hX/2W21N6m8TCgCCktzdp/ieCUoz0M7Pa5wx/tC+JN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:3d:9a:8d:c3:ac:19:bd:f3:64:e1:c2:92:98:48:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Oct 8 02:00:29 2026 GMT
Not After : Oct 9 02:00:29 2026 GMT
Subject: CN=8993af41ccea63ee8c796f714e4c43754294111b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:49:32:c1:3e:fd:23:7f:53:d8:da:23:ab:
06:59:2a:3b:8d:ad:f3:6a:dd:6f:5b:9f:d2:6a:ef:
9b:f7:7f:f6:e9:38:4a:33:74:c4:ac:ed:e3:e5:dc:
dd:ec:71:af:39:ff:06:ba:e1:51:28:49:12:eb:7a:
82:b2:bc:b9:4a:dc:04:ca:0b:1c:4d:33:81:25:a1:
58:27:b5:c2:f5:66:7d:23:bd:30:b3:e7:8b:6a:2d:
87:cf:6f:2f:a7:6a:75:9b:d1:f6:a9:a0:4c:2f:59:
c7:79:7c:f1:2c:f2:85:ab:4f:76:1f:02:23:a3:ca:
71:3b:9d:ff:ad:c7:bc:b5:e1:27:4a:50:fb:d9:d0:
f1:40:25:a7:65:fe:30:fc:4e:83:9b:14:9b:e8:4b:
61:1e:f5:12:f4:d0:0b:d7:e1:71:52:98:48:8c:73:
4e:82:4d:47:e4:c3:56:ab:40:e8:95:61:e3:b5:86:
e4:43:68:de:14:bd:0a:1d:79:55:cf:8d:39:69:2d:
80:4e:2f:b6:03:e1:d6:38:c9:17:e3:fa:0a:1a:26:
f2:91:a2:f0:c0:ac:fd:ee:8b:8d:0a:be:42:a0:cf:
a8:1a:2b:16:f0:70:d2:4b:53:e5:f3:55:24:e3:03:
21:14:a5:12:88:3c:a1:e0:c5:87:3c:4c:db:9a:00:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:93:AF:41:CC:EA:63:EE:8C:79:6F:71:4E:4C:43:75:42:94:11:1B
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d5:cc:de:22:9d:df:f1:aa:a8:5a:72:aa:89:d4:8b:44:c0:
93:e6:22:24:48:84:1c:27:d3:46:b7:bf:88:0e:4f:20:3a:c7:
b7:de:41:cc:f6:e3:ed:43:b3:7e:e9:07:ea:1d:d3:16:18:41:
a4:f7:ac:35:30:18:69:5f:ad:65:65:17:ee:0c:cb:ad:36:30:
fe:dd:90:a2:67:1d:7b:dd:5e:80:7c:a7:9c:53:2d:e4:dd:24:
4f:47:d8:51:6a:b1:33:44:b6:be:a5:12:a2:a8:7d:cb:80:dc:
36:b5:83:c2:9a:e5:e6:70:b9:43:a5:ba:3d:53:37:71:69:53:
87:a9:0a:24:68:f5:4d:13:e6:e6:41:6b:4f:b5:6d:2a:0e:29:
ed:78:38:94:5c:ab:58:31:3a:b5:c9:e2:ce:36:a3:04:3b:35:
6b:39:b7:02:ac:29:95:b8:0b:1d:8c:75:f7:76:6a:bb:91:5d:
39:1c:65:49:e4:ad:c8:03:9d:6d:83:8b:75:95:2a:fa:64:54:
18:43:70:b8:fa:4d:b6:76:3d:08:07:3f:46:72:bb:34:31:11:
1f:9f:73:d5:f6:ce:12:f5:48:e7:98:ee:d6:b4:a0:2d:a2:29:
2e:22:81:85:8f:02:d2:88:99:9d:02:20:cc:b8:4c:81:cd:f4:
ec:69:c7:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEZPZqNw6wZvfNk4cKSmEisMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZWExZWE4ODdkY2VmZWU2MTM2MTU1YjhiZDgzMzkyOTM3
YzE2NzEwHhcNMjYxMDA4MDIwMDI5WhcNMjYxMDA5MDIwMDI5WjAzMTEwLwYDVQQD
Eyg4OTkzYWY0MWNjZWE2M2VlOGM3OTZmNzE0ZTRjNDM3NTQyOTQxMTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssVJMsE+/SN/U9jaI6sGWSo7ja3z
at1vW5/Sau+b93/26ThKM3TErO3j5dzd7HGvOf8GuuFRKEkS63qCsry5StwEygsc
TTOBJaFYJ7XC9WZ9I70ws+eLai2Hz28vp2p1m9H2qaBML1nHeXzxLPKFq092HwIj
o8pxO53/rce8teEnSlD72dDxQCWnZf4w/E6DmxSb6EthHvUS9NAL1+FxUphIjHNO
gk1H5MNWq0DolWHjtYbkQ2jeFL0KHXlVz405aS2ATi+2A+HWOMkX4/oKGibykaLw
wKz97ouNCr5CoM+oGisW8HDSS1Pl81Uk4wMhFKUSiDyh4MWHPEzbmgCWLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImTr0HM6mPujHlvcU5MQ3VClBEbMB8GA1UdIwQY
MBaAFDzqHqiH3O/uYTYVW4vYM5KTfBZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgt
YjY0Y2FiNGJiZGZmLzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgtYjY0Y2FiNGJiZGZm
LzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdXM3iKd
3/GqqFpyqonUi0TAk+YiJEiEHCfTRre/iA5PIDrHt95BzPbj7UOzfukH6h3TFhhB
pPesNTAYaV+tZWUX7gzLrTYw/t2Qomcde91egHynnFMt5N0kT0fYUWqxM0S2vqUS
oqh9y4DcNrWDwprl5nC5Q6W6PVM3cWlTh6kKJGj1TRPm5kFrT7VtKg4p7Xg4lFyr
WDE6tcnizjajBDs1azm3AqwplbgLHYx193Zqu5FdORxlSeStyAOdbYOLdZUq+mRU
GENwuPpNtnY9CAc/RnK7NDERH59z1fbOEvVI55ju1rSgLaIpLiKBhY8C0oiZnQIg
zLhMgc307GnHVA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 07:40:23 2026 by rpki-client