Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: LvbbX4geG6KEb2IH62NxZtVVJW7eV/RIehNZiUXIWNg=
Subject key identifier: 98:FE:90:7E:7C:FA:FA:76:94:93:D4:D9:B7:EB:0C:25:87:F4:EC:C7
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 019FFC48907B824F1D2E24FC2D340A878FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 1003
Signing time: Thu 13 Aug 2026 18:00:41 +0000
Manifest this update: Thu 13 Aug 2026 18:00:41 +0000
Manifest next update: Fri 14 Aug 2026 18:00:41 +0000
Files and hashes: 1: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: TCTa9U1lCxucyROaGsRHUXeFXkrdSAvatD9Iy0KIPfk=)
2: bJ6xJt6ZdP1j5xV1ifbFjOZCpCg.roa (hash: CuOWPy4R5sb9VUo/TuOTu1jjmvwMnXC2ruvyuim2IiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 15:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:48:90:7b:82:4f:1d:2e:24:fc:2d:34:0a:87:8f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Aug 13 18:00:41 2026 GMT
Not After : Aug 14 18:00:41 2026 GMT
Subject: CN=98fe907e7cfafa769493d4d9b7eb0c2587f4ecc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:81:9d:93:14:5e:f6:71:c5:06:ef:40:95:18:
81:8b:f8:bd:0a:b6:cc:1c:99:2a:c1:a7:dc:72:ec:
81:d6:c2:3d:97:5d:41:ce:77:01:21:c9:cf:2a:6c:
99:28:5f:78:64:1c:28:9c:ab:f9:de:52:9a:c0:55:
8c:82:a3:4c:15:da:36:0e:f7:8b:eb:8f:42:23:b0:
b1:2f:c0:15:17:9a:3f:a6:14:58:84:16:1f:01:e4:
54:5e:ee:04:1a:76:5b:e4:34:46:d2:33:28:a0:26:
6f:27:85:c4:db:6c:ae:ed:18:63:70:27:8a:a4:a9:
d2:0b:91:e0:8a:c4:44:81:6d:e7:2d:fb:0c:06:61:
a1:d8:76:34:9e:5e:12:bf:8a:c1:8b:4c:4b:ef:89:
33:4d:8f:a3:28:1d:cf:b8:cc:e7:3e:96:d4:c9:88:
99:58:fb:34:fa:54:e6:c2:98:b8:6a:1a:27:a1:f5:
7e:7c:1f:2b:10:ca:95:8d:81:9d:5f:c0:7e:ee:0e:
b3:ab:99:ad:81:e6:e5:3e:d9:8a:a6:37:e5:40:07:
d3:8e:b3:2a:b3:b1:f4:62:e9:55:84:ad:d7:a4:6c:
88:b6:2c:5d:a7:a7:b6:cf:00:5d:8c:84:b4:96:35:
bc:51:4d:fd:e5:61:e8:9b:ae:34:36:f7:80:9c:65:
89:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FE:90:7E:7C:FA:FA:76:94:93:D4:D9:B7:EB:0C:25:87:F4:EC:C7
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a7:62:2d:1b:97:8d:60:9a:c0:b6:d9:ea:60:ac:37:b5:20:
5b:76:6b:03:23:ff:91:37:16:a4:dd:4c:70:34:ff:19:dc:65:
60:7d:60:1b:e9:ab:bd:87:63:7b:c9:39:08:4e:06:92:18:e8:
30:36:4c:5e:73:c2:91:6c:a2:00:cf:6a:6f:f3:21:84:8b:42:
84:97:c0:0d:74:08:d2:bb:26:04:e5:9f:6e:7a:2a:68:36:13:
5f:12:48:da:98:ae:1a:57:33:7a:13:b4:61:9e:c5:1c:ba:f7:
8b:5d:8e:8e:d5:8c:2a:13:83:81:bb:1a:53:54:cf:fb:38:ec:
c5:22:a2:84:aa:d3:b9:9c:6a:84:79:5d:f4:cd:4f:ce:2d:fe:
5c:90:ac:0b:44:dd:4e:93:3f:e5:d7:a6:0f:91:8f:0b:d3:6c:
2b:ca:fc:55:14:bd:cd:31:17:61:34:95:c4:56:54:9e:0b:b3:
b3:cf:0e:76:23:44:5e:b9:9e:48:88:be:b0:62:4e:f9:1d:7b:
0a:c9:e7:83:3f:ca:43:2d:7b:eb:c6:44:1d:3d:bd:8e:b0:63:
d8:e4:f3:90:7e:ff:c7:15:82:c1:7f:f4:0c:5e:b5:18:a5:08:
c5:58:7d:1b:4f:19:19:10:4a:4f:64:42:f0:b1:a4:eb:93:e3:
74:fe:49:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 20:58:58 2026 by rpki-client