Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: qn+4eZ+0LNusTvewuMdyqIgmvvNnEYkL6+1FqcKlJWs=
Subject key identifier: CD:58:90:95:0A:2C:72:82:66:56:33:EC:27:16:A7:8A:13:A5:59:54
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 01A18262B81220674F3967790439EA937EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 10CD
Signing time: Wed 28 Oct 2026 12:01:09 +0000
Manifest this update: Wed 28 Oct 2026 12:01:09 +0000
Manifest next update: Thu 29 Oct 2026 12:01:09 +0000
Files and hashes: 1: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: Cs5HVIP0Jk+vAv33uB71XF7lhWuuyw6mJPrnpeANcdI=)
2: bJ6xJt6ZdP1j5xV1ifbFjOZCpCg.roa (hash: CuOWPy4R5sb9VUo/TuOTu1jjmvwMnXC2ruvyuim2IiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:62:b8:12:20:67:4f:39:67:79:04:39:ea:93:7e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Oct 28 12:01:09 2026 GMT
Not After : Oct 29 12:01:09 2026 GMT
Subject: CN=cd5890950a2c7282665633ec2716a78a13a55954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:32:e3:c3:71:5b:32:9b:0c:2f:92:54:28:
4a:29:54:5c:58:ac:d7:6f:b7:3d:19:fc:16:ca:c7:
bb:86:a4:ee:ae:94:69:5c:be:af:56:fb:3c:ab:74:
8b:da:94:04:f4:dc:61:8b:51:f9:ce:e2:0f:34:22:
bc:27:a8:8b:4c:93:45:1b:4b:79:26:43:eb:6b:47:
e4:85:f2:27:c0:22:5d:00:28:50:90:49:29:83:13:
7d:13:d3:e5:50:3f:10:f3:96:46:a6:98:70:a5:a4:
5b:83:a1:3b:b5:cd:ce:5a:7b:73:45:7d:77:e5:a4:
ff:34:fd:a2:65:be:51:57:75:7f:7e:17:a9:b0:b0:
b1:02:31:8f:d7:7b:c4:c1:f9:be:fc:14:56:aa:88:
ab:4f:9f:05:f9:d0:c2:57:08:d8:f8:0d:1f:b3:e9:
1f:4b:25:24:86:d9:62:25:08:11:64:45:6d:fd:80:
48:2c:01:f9:84:4c:e5:88:9e:08:49:28:fb:cd:fc:
23:38:93:5c:21:7f:00:54:8f:e1:2c:93:3d:dd:a2:
f5:47:2e:e6:e1:17:33:86:96:43:96:58:75:64:bf:
70:42:be:47:b6:51:fc:08:7a:42:ec:b3:6a:a8:92:
ea:e6:32:68:4c:17:38:de:a7:60:c6:2c:00:16:fb:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:58:90:95:0A:2C:72:82:66:56:33:EC:27:16:A7:8A:13:A5:59:54
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:74:c8:ff:8a:0c:c2:36:01:8f:9a:56:55:69:9d:f6:7c:2e:
41:04:b6:ba:e9:c3:75:dd:bc:f4:6d:ea:7b:38:ba:e1:ef:bc:
e9:15:2c:95:aa:5a:f8:f9:b8:a5:0d:85:c4:17:93:bd:5f:43:
56:8e:2c:b0:fc:f1:d7:e9:82:34:6a:f7:21:0b:53:b5:f3:c7:
2a:c2:4c:37:81:86:ce:78:d2:b0:04:e2:4d:9f:1f:39:27:c5:
21:e9:43:98:3b:10:cb:4b:a7:d7:5c:18:b4:d7:5e:3b:f0:40:
52:69:e9:7d:42:d7:ef:58:bb:4d:8f:ef:81:95:16:5f:a5:7e:
ed:15:ce:30:a8:72:41:4f:a7:0c:81:1e:6d:d0:86:c8:a6:2c:
f5:76:8c:78:56:88:fe:9b:f3:f1:c6:52:1a:31:7b:f5:38:e8:
ab:4e:68:a9:67:5e:a8:5c:4a:28:d1:f7:ad:82:b7:6e:0a:3b:
f2:dd:38:07:bb:14:5a:16:1e:86:94:8e:10:00:34:d9:13:b6:
66:cd:a0:2b:9e:4d:80:f5:ea:14:71:db:ee:f2:fb:a1:d4:b2:
4c:48:a5:c2:39:1d:98:2a:5e:0b:30:81:25:ad:90:34:9c:89:
72:a2:d8:22:39:03:72:ab:62:25:66:a6:b6:68:57:75:e3:1e:
f6:92:98:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:21:34 2026 by rpki-client