Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
File: poXxkUzrGSIcVjGTAn1FNFAzrV8.mft (raw, json)
Hash identifier: NJWavrAztej+N5sp09J0yjWJdzHXfMXOXDwF82RpX0s=
Subject key identifier: D3:B7:F6:63:80:21:41:D6:07:3D:04:84:8B:FF:54:53:96:63:66:24
Authority key identifier: A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
Certificate issuer: /CN=a685f1914ceb19221c563193027d45345033ad5f
Certificate serial: 019D37C0EBFC221ED2CAA5B05910FD64C9C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
Manifest number: 04D2
Signing time: Sun 29 Mar 2026 04:01:23 +0000
Manifest this update: Sun 29 Mar 2026 04:01:23 +0000
Manifest next update: Mon 30 Mar 2026 04:01:23 +0000
Files and hashes: 1: L7xswkZOYtWZFKKAqV29uL6KrTo.roa (hash: 7HxTzwEYY9RT2odFm0ohwxx/sbrU6yVxKLryEnSr9X4=)
2: poXxkUzrGSIcVjGTAn1FNFAzrV8.crl (hash: aRBuOh/2ExHkEiEZB/DsMu9WnG2ax6HM/pBAOvEMlnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:eb:fc:22:1e:d2:ca:a5:b0:59:10:fd:64:c9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a685f1914ceb19221c563193027d45345033ad5f
Validity
Not Before: Mar 29 04:01:23 2026 GMT
Not After : Mar 30 04:01:23 2026 GMT
Subject: CN=d3b7f663802141d6073d04848bff545396636624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:9d:9b:b4:5d:ae:14:c9:2e:76:66:c3:bf:
89:ad:6e:0c:bc:d1:c9:c7:74:b8:38:b4:f8:20:28:
83:1b:cb:6e:dc:60:9c:05:d5:60:1b:7f:70:f6:76:
6b:a2:d4:2f:0b:83:79:ee:14:da:51:06:99:40:dc:
dd:e4:43:b5:e5:b9:b2:09:f9:71:76:6e:0a:04:92:
ca:81:e0:97:15:a4:4b:c8:89:7f:15:ce:cf:21:28:
2a:bb:6c:36:45:69:1a:06:4e:46:4e:ab:86:83:99:
fd:48:58:06:49:b0:2b:33:0f:23:58:f4:a1:97:79:
18:7d:ae:71:91:ee:6c:e4:16:97:05:4f:e8:24:51:
e6:59:33:99:a0:84:b7:e5:f6:2b:23:1f:3a:0e:86:
92:bb:8e:c1:43:de:4b:dd:7c:14:71:df:b5:5c:9b:
1a:36:89:f1:0c:b6:84:ca:7e:6b:7f:8a:c2:45:7e:
6e:42:48:f5:a0:36:6c:9b:fb:b1:b0:4d:0a:e8:4b:
c3:ad:fe:79:e8:5a:70:df:ea:5e:bc:40:c9:d4:b9:
23:ba:9f:4f:e7:5a:ad:9a:48:2c:85:eb:d2:36:c0:
9d:ab:01:97:61:dc:42:c2:6f:e4:bc:1d:c5:9a:73:
02:b8:1f:3f:35:13:17:e7:9b:67:c6:ed:b4:54:8c:
82:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B7:F6:63:80:21:41:D6:07:3D:04:84:8B:FF:54:53:96:63:66:24
X509v3 Authority Key Identifier:
keyid:A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:97:8f:9c:29:49:15:b5:cf:26:26:11:8e:2c:ee:3c:50:91:
d9:56:94:ab:f2:6f:cc:d9:40:a6:5f:e1:80:6d:50:89:3d:35:
2c:4e:bf:ab:0b:fa:66:50:05:fd:aa:53:04:f4:48:ed:c7:22:
b2:d7:a6:d6:a5:d5:d3:4a:3c:ac:99:84:35:4c:d4:be:d5:de:
91:a4:1f:12:61:f3:0b:c5:ee:af:ab:f7:50:e2:65:82:c9:6b:
ee:6d:bf:c7:e8:b1:45:19:9c:b5:ba:6d:42:58:1d:77:c7:16:
ae:1f:3f:3e:5f:c4:d6:28:7a:92:5e:bc:7f:d7:7c:4d:b6:53:
8c:a2:cc:14:46:79:7a:5a:09:22:11:54:e7:2b:c7:8b:2e:e8:
a5:0c:12:87:1f:92:fc:9a:93:bf:01:96:34:63:ce:67:db:e4:
07:1d:ae:2b:31:8e:e3:35:ee:3f:97:9c:1d:f5:5c:47:b4:4b:
58:a3:49:f5:a8:21:66:5d:ce:07:cf:f1:b4:08:e3:f2:b0:39:
9f:00:7d:15:c3:71:50:c6:cf:ac:1f:af:03:95:ea:63:d0:e8:
87:9c:d3:08:c0:9d:7e:54:5e:29:51:6d:cf:ad:d0:2e:9e:a2:
35:b7:9f:69:1e:d9:b3:f9:da:d7:d4:f6:a8:64:5e:c6:11:ec:
b7:53:d3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:14 2026 by rpki-client