Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: t/XEtebA/gH5b/AGLIzZ8sdh8/QgemRWLwSunkyNFnY=
Subject key identifier: 0F:4F:68:23:EC:C6:39:8B:B1:3E:B3:3B:78:BA:AE:CA:D8:D2:82:47
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 019D32D128EFD0CBA3839CD3AA710C0F8187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0D36
Signing time: Sat 28 Mar 2026 05:01:01 +0000
Manifest this update: Sat 28 Mar 2026 05:01:01 +0000
Manifest next update: Sun 29 Mar 2026 05:01:01 +0000
Files and hashes: 1: Lz876iU0xtfcqSVTekYcUEB8rNY.roa (hash: P7Dx6/I7M7mFS8oU5u2ZG2WFIIDRuSNAyOVWgF0FkSI=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: iDjVs4mf13NYbn8+6V8+Zu52tUIPZi9tSmP175KGxbY=)
3: QzXLtRSL_Wpb4KzFVTKsOifLvN0.roa (hash: hX/2W21N6m8TCgCCktzdp/ieCUoz0M7Pa5wx/tC+JN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d1:28:ef:d0:cb:a3:83:9c:d3:aa:71:0c:0f:81:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Mar 28 05:01:01 2026 GMT
Not After : Mar 29 05:01:01 2026 GMT
Subject: CN=0f4f6823ecc6398bb13eb33b78baaecad8d28247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:e8:37:44:51:0d:aa:20:c0:f2:7e:9e:3e:
2f:00:5e:0f:8d:eb:b5:42:33:4b:0d:36:2e:c5:de:
9c:2b:e3:42:4b:76:eb:1c:ae:c5:8e:82:5d:64:bd:
c4:9d:a7:33:57:49:c0:6e:73:1d:a1:ac:33:67:2d:
c8:07:77:2d:6b:dd:46:d4:67:dc:ca:a7:97:03:07:
44:ce:6d:ca:c3:b2:e2:7a:79:b9:4c:02:08:69:55:
b1:ca:bb:07:81:e2:61:d0:ad:de:d1:ea:5c:3f:e7:
8e:4c:3b:61:43:d1:75:4e:b5:bd:3e:40:b2:40:f2:
d9:66:82:0f:0e:c3:a5:6d:cc:8f:88:8d:e5:de:13:
ca:c2:11:3b:02:22:ac:f8:4b:64:5b:4c:d1:c1:73:
c6:45:6f:22:7b:d7:9b:19:55:5e:29:d9:df:a5:ed:
f0:ac:7f:02:59:fd:75:ec:81:1e:c0:3d:c5:df:26:
9e:14:e9:87:eb:55:a4:ba:b2:fb:db:19:8f:bd:7c:
11:ba:3b:64:90:5a:71:a4:f7:98:75:96:07:98:a1:
13:12:63:d3:33:e9:c9:26:da:a0:a7:35:8f:82:ef:
b7:58:57:72:01:4b:8c:ae:16:76:29:db:ab:5d:2c:
2a:6d:c9:0c:03:c7:dd:32:4f:5b:65:b1:fb:41:4a:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4F:68:23:EC:C6:39:8B:B1:3E:B3:3B:78:BA:AE:CA:D8:D2:82:47
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:27:2e:fb:17:56:0b:33:a0:e5:26:21:c6:3d:72:a9:87:5b:
2b:40:58:71:7f:af:aa:9a:77:e1:07:6c:ea:22:af:52:ef:20:
99:8b:56:7a:07:0d:0c:76:78:1b:c7:d2:ba:8d:dc:04:fd:9c:
7f:61:c8:5b:aa:04:7f:32:fd:a4:21:3b:07:eb:41:02:11:fc:
9f:a2:2b:c4:53:cc:cf:4b:7a:65:82:62:4d:11:fb:65:3e:56:
63:31:bf:92:e4:6a:31:3a:1d:a3:86:b6:31:94:69:05:12:06:
6f:ef:ab:e8:82:86:5c:f1:8f:30:53:75:6e:62:67:eb:11:3c:
03:5a:58:d1:29:a6:c3:a6:6a:74:52:d1:aa:80:21:4d:20:d1:
64:69:1b:9d:07:40:b3:66:eb:73:db:15:af:06:ec:e5:d3:5a:
ff:24:86:b8:54:9f:c7:15:1d:00:6f:5d:72:c2:2b:c3:67:24:
3b:12:9c:66:87:03:0f:a8:53:1d:e9:f5:e0:1e:bd:69:6c:b0:
c2:f2:73:f8:ac:7d:c4:08:64:30:17:dc:5f:f0:71:70:0f:0a:
8c:b4:27:8f:b0:6e:e8:8f:50:47:fe:bf:31:d0:71:66:84:e4:
8a:08:cc:c0:6a:13:9e:12:0b:dd:7a:8c:02:a8:89:dc:41:4e:
a8:9c:86:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:15:32 2026 by rpki-client