Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: bFhzDOYXoIVR9yRkhhXRwiIdXV7+F/3VTscLuxvlOl8=
Subject key identifier: CD:57:9A:35:23:A9:5C:C6:74:DB:CE:4E:96:D4:6C:87:97:95:34:B8
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 019F0BF5CFE15D89E420A8243FFA61D85FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0E2B
Signing time: Sun 28 Jun 2026 02:01:26 +0000
Manifest this update: Sun 28 Jun 2026 02:01:26 +0000
Manifest next update: Mon 29 Jun 2026 02:01:26 +0000
Files and hashes: 1: Lz876iU0xtfcqSVTekYcUEB8rNY.roa (hash: P7Dx6/I7M7mFS8oU5u2ZG2WFIIDRuSNAyOVWgF0FkSI=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: s/ySC5MoTojoUnKmVg8F7g/KsfvncazOxcfH+hbvLO0=)
3: QzXLtRSL_Wpb4KzFVTKsOifLvN0.roa (hash: hX/2W21N6m8TCgCCktzdp/ieCUoz0M7Pa5wx/tC+JN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0b:f5:cf:e1:5d:89:e4:20:a8:24:3f:fa:61:d8:5f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Jun 28 02:01:26 2026 GMT
Not After : Jun 29 02:01:26 2026 GMT
Subject: CN=cd579a3523a95cc674dbce4e96d46c87979534b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:6c:6f:73:03:b3:15:cb:1c:7c:34:38:db:
cd:bf:2d:48:69:8d:1c:02:1c:e9:ca:00:19:df:52:
ea:44:22:23:c7:7e:e8:3d:9f:52:43:9d:0e:c9:71:
b9:79:b4:af:d9:19:3b:98:82:81:31:ca:87:42:3a:
f0:89:4f:e1:3e:81:01:65:af:f8:fb:b8:b0:66:d2:
6d:79:23:dc:18:70:8e:45:cc:5a:bc:48:6f:d0:8d:
c9:4e:24:7c:21:15:60:23:29:ae:c1:58:d1:16:22:
48:7c:87:f2:cf:ed:55:46:15:f7:7b:25:49:48:10:
2c:be:77:32:61:53:2a:79:1a:24:c7:c7:01:da:5a:
fe:74:bb:56:ce:0c:2c:ac:45:42:62:0b:bd:18:a2:
cb:bc:58:1e:0b:4b:1e:eb:64:0d:49:68:63:13:96:
cb:09:b9:54:32:7a:79:e9:4b:a6:98:db:30:14:a0:
99:7f:d0:d9:29:4b:a1:ad:af:23:c6:21:8c:8a:d0:
45:05:54:56:fa:60:8c:9d:aa:50:ae:0b:cc:67:1d:
3d:a9:e1:b6:02:0b:ee:52:40:03:c5:65:b7:32:6f:
6d:2f:b4:4f:6f:b5:3b:ed:73:ae:df:44:f6:b5:05:
84:32:8b:2b:62:fe:0f:2a:bb:c7:3e:76:1c:db:2c:
53:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:57:9A:35:23:A9:5C:C6:74:DB:CE:4E:96:D4:6C:87:97:95:34:B8
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:31:af:93:e8:ed:ea:b9:ec:87:5a:de:1c:0d:11:e8:18:01:
6c:a9:95:7d:2d:f9:b7:5d:70:17:9f:1a:ad:4d:f6:6b:8c:bd:
3b:bf:b6:69:49:90:42:d1:ee:26:3e:75:6e:22:be:af:be:da:
39:69:a9:a9:f5:4b:44:4e:df:4b:5c:b2:a6:12:d3:95:7a:c1:
43:61:f6:ae:6a:a9:b6:ee:38:05:f2:bf:be:7b:04:09:22:1e:
8f:4a:c5:72:4e:b9:2f:27:89:a0:66:ec:b8:c6:43:0b:88:8b:
a4:7a:36:eb:1f:3c:15:09:26:0b:7a:50:10:73:60:28:08:25:
ef:c6:0d:14:1d:76:f2:48:d5:dd:bc:f4:4e:f6:15:9c:7b:01:
fd:f5:80:6b:8c:05:42:84:43:33:c4:14:4b:0b:e9:19:24:7e:
23:75:32:23:06:78:8e:b8:ee:6c:55:54:36:06:9b:a9:d3:13:
d6:df:88:be:e7:0f:d5:20:b9:ac:bd:66:77:2a:9c:d7:62:9d:
a9:2e:71:a3:ab:86:51:e0:d8:a2:e8:bd:85:91:d0:7c:32:73:
1c:24:86:1b:58:49:9e:1e:09:cf:91:eb:8a:b6:54:f0:4b:17:
8a:9d:26:9e:e7:05:e4:6e:03:6e:bc:ff:74:39:5c:7c:6d:df:
a4:a3:0e:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8L9c/hXYnkIKgkP/ph2F/dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZWExZWE4ODdkY2VmZWU2MTM2MTU1YjhiZDgzMzkyOTM3
YzE2NzEwHhcNMjYwNjI4MDIwMTI2WhcNMjYwNjI5MDIwMTI2WjAzMTEwLwYDVQQD
EyhjZDU3OWEzNTIzYTk1Y2M2NzRkYmNlNGU5NmQ0NmM4Nzk3OTUzNGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyslsb3MDsxXLHHw0ONvNvy1IaY0c
AhzpygAZ31LqRCIjx37oPZ9SQ50OyXG5ebSv2Rk7mIKBMcqHQjrwiU/hPoEBZa/4
+7iwZtJteSPcGHCORcxavEhv0I3JTiR8IRVgIymuwVjRFiJIfIfyz+1VRhX3eyVJ
SBAsvncyYVMqeRokx8cB2lr+dLtWzgwsrEVCYgu9GKLLvFgeC0se62QNSWhjE5bL
CblUMnp56UummNswFKCZf9DZKUuhra8jxiGMitBFBVRW+mCMnapQrgvMZx09qeG2
AgvuUkADxWW3Mm9tL7RPb7U77XOu30T2tQWEMosrYv4PKrvHPnYc2yxTrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1XmjUjqVzGdNvOTpbUbIeXlTS4MB8GA1UdIwQY
MBaAFDzqHqiH3O/uYTYVW4vYM5KTfBZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgt
YjY0Y2FiNGJiZGZmLzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgtYjY0Y2FiNGJiZGZm
LzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjGvk+jt
6rnsh1reHA0R6BgBbKmVfS35t11wF58arU32a4y9O7+2aUmQQtHuJj51biK+r77a
OWmpqfVLRE7fS1yyphLTlXrBQ2H2rmqptu44BfK/vnsECSIej0rFck65LyeJoGbs
uMZDC4iLpHo26x88FQkmC3pQEHNgKAgl78YNFB128kjV3bz0TvYVnHsB/fWAa4wF
QoRDM8QUSwvpGSR+I3UyIwZ4jrjubFVUNgabqdMT1t+IvucP1SC5rL1mdyqc12Kd
qS5xo6uGUeDYoui9hZHQfDJzHCSGG1hJnh4Jz5HrirZU8EsXip0mnucF5G4Dbrz/
dDlcfG3fpKMOCQ==
-----END CERTIFICATE-----
Generated at Sun Jun 28 04:19:56 2026 by rpki-client