Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: sdD3YuXOdFkAcVGykkvS7nhjXRpfzgn5XLtqhGIf/7s=
Subject key identifier: 13:DE:74:0F:8A:2A:1E:6D:A3:16:33:B8:6B:45:05:72:3F:4E:8C:6A
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 019D2DE18D1A5E424464BC7159E849A1EA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 0E8F
Signing time: Fri 27 Mar 2026 06:00:49 +0000
Manifest this update: Fri 27 Mar 2026 06:00:49 +0000
Manifest next update: Sat 28 Mar 2026 06:00:49 +0000
Files and hashes: 1: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: o2f+O6WFw9ivji9Kl0TnOMCIaRCxNdM3xg2EGCquEzY=)
2: bJ6xJt6ZdP1j5xV1ifbFjOZCpCg.roa (hash: CuOWPy4R5sb9VUo/TuOTu1jjmvwMnXC2ruvyuim2IiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:e1:8d:1a:5e:42:44:64:bc:71:59:e8:49:a1:ea:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Mar 27 06:00:49 2026 GMT
Not After : Mar 28 06:00:49 2026 GMT
Subject: CN=13de740f8a2a1e6da31633b86b4505723f4e8c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d3:67:e2:c0:67:74:f6:ac:09:7e:94:62:bb:
b2:79:a5:0a:55:1d:1d:b6:e2:8f:b6:2e:3e:34:a6:
1a:37:15:20:09:6d:6e:dc:48:58:76:f6:da:de:bd:
90:57:91:a8:3e:77:d4:2c:1b:e1:53:9e:16:42:fa:
ed:77:86:65:ed:11:09:28:4b:c6:a5:1b:31:fb:06:
84:38:c3:80:a5:24:b7:2a:56:9e:1b:fb:98:38:88:
88:d6:0a:c0:79:48:e9:36:f4:84:3f:da:61:07:26:
c6:00:84:51:a2:c3:a9:8a:46:b7:18:94:00:f6:d6:
c0:8b:be:06:84:a8:8e:0f:75:c2:06:e3:c5:d4:16:
68:76:f3:43:d8:45:9e:85:10:0b:fd:0d:28:9f:82:
33:51:16:ee:c7:12:be:43:0f:03:3f:59:c3:89:df:
9c:9f:4e:fc:5d:fa:c8:a6:9a:e1:97:6a:cb:55:93:
08:7a:07:ef:c4:7d:9c:12:4f:01:dc:61:a6:43:f9:
cf:11:49:94:4d:af:e6:70:1e:c3:12:6f:8d:f4:92:
77:2e:7a:75:4c:5a:76:41:04:bd:28:85:0b:ad:52:
ae:21:ec:3b:55:88:9c:80:4d:40:83:2c:d1:d5:7f:
34:d7:38:04:48:55:5f:50:42:87:b3:87:80:cc:3f:
fc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DE:74:0F:8A:2A:1E:6D:A3:16:33:B8:6B:45:05:72:3F:4E:8C:6A
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b1:b0:6c:b2:f6:46:fb:92:f1:8c:08:86:97:88:2e:2f:d2:
bf:a3:b2:f6:ad:f5:43:0d:29:0e:54:f7:3a:a0:58:0a:fc:7a:
51:12:71:c2:3a:2f:00:9f:99:4f:cd:31:38:c6:88:fb:ca:59:
69:79:31:a6:f6:17:bd:16:e0:f8:52:6d:68:5b:fc:a1:f0:9e:
d9:78:b3:16:93:d8:6a:2a:fb:de:99:ca:12:b7:94:2e:9f:a7:
15:aa:46:16:65:25:81:f1:a9:05:85:ad:6b:60:e5:40:78:9b:
11:46:d2:b1:d5:d0:ae:75:a4:a3:e2:89:5d:11:96:c8:77:23:
30:7b:e0:d6:23:05:37:73:f6:a7:32:fe:95:0d:3e:72:37:1d:
12:e4:ba:62:75:54:bf:ca:ef:4f:f1:e0:33:40:7a:d8:71:f1:
8a:73:81:58:f6:0e:03:80:be:e6:4b:f7:1f:a2:84:e6:07:d4:
c7:69:ec:55:0f:30:3b:6c:60:8c:34:24:56:86:36:54:81:1f:
3d:a2:06:bf:08:4b:3b:d7:53:47:f4:f2:ea:da:7d:cd:63:ae:
4a:6e:3f:bf:31:49:dc:16:64:7a:8a:87:58:5d:10:b6:c2:27:
16:fe:df:2f:e8:13:04:78:df:ec:33:65:89:45:69:d1:fc:9a:
af:73:d4:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0t4Y0aXkJEZLxxWehJoepBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlOGM2Y2M0NDhmOTYzNWM1NmZmMjJiMTFjZDgwYzFhYTlj
NTJkNGYwHhcNMjYwMzI3MDYwMDQ5WhcNMjYwMzI4MDYwMDQ5WjAzMTEwLwYDVQQD
EygxM2RlNzQwZjhhMmExZTZkYTMxNjMzYjg2YjQ1MDU3MjNmNGU4YzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tNn4sBndPasCX6UYruyeaUKVR0d
tuKPti4+NKYaNxUgCW1u3EhYdvba3r2QV5GoPnfULBvhU54WQvrtd4Zl7REJKEvG
pRsx+waEOMOApSS3KlaeG/uYOIiI1grAeUjpNvSEP9phBybGAIRRosOpika3GJQA
9tbAi74GhKiOD3XCBuPF1BZodvND2EWehRAL/Q0on4IzURbuxxK+Qw8DP1nDid+c
n078XfrIpprhl2rLVZMIegfvxH2cEk8B3GGmQ/nPEUmUTa/mcB7DEm+N9JJ3Lnp1
TFp2QQS9KIULrVKuIew7VYicgE1AgyzR1X801zgESFVfUEKHs4eAzD/85QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPedA+KKh5toxYzuGtFBXI/ToxqMB8GA1UdIwQY
MBaAFD6MbMRI+WNcVv8isRzYDBqpxS1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTct
ZDI4MTA1ZTNmMzgwLzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hZjY3NDItZTM1OC00YTZlLWExYTctZDI4MTA1ZTNmMzgw
LzEvUG94c3hFajVZMXhXX3lLeEhOZ01HcW5GTFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbGwbLL2
RvuS8YwIhpeILi/Sv6Oy9q31Qw0pDlT3OqBYCvx6URJxwjovAJ+ZT80xOMaI+8pZ
aXkxpvYXvRbg+FJtaFv8ofCe2XizFpPYair73pnKEreULp+nFapGFmUlgfGpBYWt
a2DlQHibEUbSsdXQrnWko+KJXRGWyHcjMHvg1iMFN3P2pzL+lQ0+cjcdEuS6YnVU
v8rvT/HgM0B62HHxinOBWPYOA4C+5kv3H6KE5gfUx2nsVQ8wO2xgjDQkVoY2VIEf
PaIGvwhLO9dTR/Ty6tp9zWOuSm4/vzFJ3BZkeoqHWF0QtsInFv7fL+gTBHjf7DNl
iUVp0fyar3PUAg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 16:09:32 2026 by rpki-client