Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: MbrDlGwllCmLYIGutf1BqqGWRWjMGDftHlmOkkJx/SM=
Subject key identifier: 60:99:08:59:5F:66:2C:01:5A:7E:CA:6B:0C:F6:B9:30:D1:D6:38:BF
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 019F129C5CBF999A995AA16C3F9ACF0E8E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 0F8A
Signing time: Mon 29 Jun 2026 09:01:04 +0000
Manifest this update: Mon 29 Jun 2026 09:01:04 +0000
Manifest next update: Tue 30 Jun 2026 09:01:04 +0000
Files and hashes: 1: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: 49sZYSTIz+ZVPFI44Io1DgDYzB/2LBUQVGyxAMK9IFE=)
2: bJ6xJt6ZdP1j5xV1ifbFjOZCpCg.roa (hash: CuOWPy4R5sb9VUo/TuOTu1jjmvwMnXC2ruvyuim2IiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:5c:bf:99:9a:99:5a:a1:6c:3f:9a:cf:0e:8e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Jun 29 09:01:04 2026 GMT
Not After : Jun 30 09:01:04 2026 GMT
Subject: CN=609908595f662c015a7eca6b0cf6b930d1d638bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:67:24:6a:a5:f6:74:21:81:10:57:28:36:
cc:c0:e3:be:49:34:b2:4c:19:fc:5a:1f:97:f5:f4:
97:a0:a9:5f:20:20:7c:14:d3:31:cb:3f:5a:2a:f4:
93:13:74:c9:12:36:f8:25:db:a3:7f:03:72:a3:74:
bb:53:1c:62:c4:ad:c7:a7:65:8a:76:4e:78:e5:ca:
75:01:c7:8e:2d:08:cf:a5:4a:72:fd:b1:2c:5f:99:
28:db:4d:41:41:2e:a4:0b:40:ad:1a:99:b0:7f:01:
c3:35:85:4d:a6:ef:31:a3:31:44:ac:be:76:11:2b:
80:73:c1:4a:a2:28:0b:19:86:7b:1c:a1:1f:91:92:
37:ed:2f:6d:e4:4d:5c:93:ac:18:a9:63:cf:93:4c:
ab:c7:07:dd:ca:e0:49:af:d5:64:bc:56:ee:e2:44:
12:00:68:b3:6d:55:9f:38:13:0e:4f:82:f5:83:35:
fa:08:df:6f:e5:06:3a:83:1e:09:c3:bf:ae:a7:43:
11:cc:a4:b0:b4:f7:bb:71:a7:b5:9f:77:e0:8f:9c:
bd:33:29:9b:70:89:84:d3:7f:a9:1c:9b:17:cf:39:
4d:5d:83:d4:48:41:9a:3c:1c:2e:fe:d1:46:af:f1:
66:c9:3d:df:c6:7a:94:d6:b9:ac:2d:e7:7b:43:1d:
af:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:99:08:59:5F:66:2C:01:5A:7E:CA:6B:0C:F6:B9:30:D1:D6:38:BF
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ea:9b:4d:96:cc:e7:db:0b:aa:bc:78:42:88:3b:fd:b5:04:
cb:18:e4:4c:22:8a:26:43:4b:38:e8:40:1e:d1:f8:4d:47:de:
86:f0:a8:48:a2:8e:c2:a8:31:59:a8:fe:c1:6c:06:8a:2c:c7:
45:5d:99:0c:0b:76:04:0b:d0:72:37:bb:94:2e:2a:21:8f:01:
4b:3a:36:f0:2f:5f:dc:56:78:08:54:ad:ad:21:b4:dc:87:e6:
19:85:11:63:14:5f:b6:00:9f:eb:a6:87:27:1d:7f:4e:5b:5e:
ef:19:44:49:db:52:7e:41:44:38:b7:81:5f:45:71:94:52:e5:
0b:9c:12:c3:69:7b:19:1b:fa:9b:ec:13:68:14:37:4b:f7:90:
d2:93:e6:d9:31:35:4d:0a:85:f1:68:7b:2e:57:b2:a3:66:c9:
78:4a:f9:3a:5b:e7:7c:36:6f:a3:7f:dd:35:cd:ad:85:34:51:
3a:a3:85:ea:bc:1b:19:17:3e:e6:af:53:79:00:27:49:be:f3:
26:1b:62:97:59:d5:8a:aa:be:ca:50:b9:4a:a4:0d:0d:b6:98:
77:94:ce:53:e8:20:1b:3e:b7:39:2d:0a:ce:48:f0:68:37:af:
06:94:cc:d7:3b:e2:1b:b2:87:ed:62:81:e6:51:db:d3:20:a2:
c6:ed:6a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 19:08:22 2026 by rpki-client