Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
File: poXxkUzrGSIcVjGTAn1FNFAzrV8.mft (raw, json)
Hash identifier: ZjwG7kCZqc2MojDx6IdsFAEe0C0NPBb1uXmg9aRT+Vs=
Subject key identifier: 21:0E:C8:92:88:C3:1E:FB:54:2D:43:8F:6A:BE:BF:61:1B:42:B1:45
Authority key identifier: A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
Certificate issuer: /CN=a685f1914ceb19221c563193027d45345033ad5f
Certificate serial: 019EB6207CA0E9BA97172857D41BA9716C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
Manifest number: 0598
Signing time: Thu 11 Jun 2026 10:00:42 +0000
Manifest this update: Thu 11 Jun 2026 10:00:42 +0000
Manifest next update: Fri 12 Jun 2026 10:00:42 +0000
Files and hashes: 1: L7xswkZOYtWZFKKAqV29uL6KrTo.roa (hash: 7HxTzwEYY9RT2odFm0ohwxx/sbrU6yVxKLryEnSr9X4=)
2: poXxkUzrGSIcVjGTAn1FNFAzrV8.crl (hash: GsmSZB215Rh3j5Uj86ClILwD63ougMRoiv71kSaMp+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:7c:a0:e9:ba:97:17:28:57:d4:1b:a9:71:6c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a685f1914ceb19221c563193027d45345033ad5f
Validity
Not Before: Jun 11 10:00:42 2026 GMT
Not After : Jun 12 10:00:42 2026 GMT
Subject: CN=210ec89288c31efb542d438f6abebf611b42b145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:9f:83:9d:00:6d:cf:8c:7b:49:6f:f6:8d:
e1:a3:2e:93:aa:bc:30:17:d0:cf:77:47:5c:47:e4:
7e:08:8a:7d:15:97:3a:90:46:45:9a:f0:f7:07:c3:
a1:f5:5e:68:a1:60:18:7f:32:0e:28:78:8d:99:17:
be:d3:98:2a:f0:bc:c1:db:36:11:46:9b:ed:05:ac:
26:81:ec:a3:9c:55:27:cf:9c:9c:7f:76:8f:46:26:
34:31:15:14:f3:35:00:a4:b7:f2:ff:bb:7a:66:39:
ef:a6:ad:21:e4:7c:d8:de:55:bb:d1:4f:bc:3e:2d:
82:e2:73:a9:75:e1:2f:f0:ff:5a:38:ad:00:ac:0b:
e7:c6:70:ca:b5:9c:b1:f8:86:0b:b5:72:31:98:33:
65:c1:55:a7:8d:a8:f7:76:8f:ec:cd:f6:dc:90:70:
cc:ab:7c:1c:97:81:24:6a:24:b3:87:0d:a9:0b:b9:
85:1d:e7:a3:b4:66:86:f3:6e:13:ea:38:c9:9e:25:
62:b1:0f:b4:ff:6b:a6:cf:1b:7e:5c:22:e1:d2:f6:
e3:6b:78:cb:37:b5:20:ba:59:b8:88:e5:7d:68:b0:
09:c1:8f:1e:82:c4:de:b7:49:86:42:49:12:8e:94:
dd:10:a1:d1:2d:bf:5c:6e:b7:ac:14:f8:ed:bf:99:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0E:C8:92:88:C3:1E:FB:54:2D:43:8F:6A:BE:BF:61:1B:42:B1:45
X509v3 Authority Key Identifier:
keyid:A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:92:44:2c:ba:6f:6b:23:f7:1d:26:10:4c:f2:51:5a:4e:80:
0c:2d:51:61:94:c8:29:ba:a5:d0:d4:94:0d:0d:cb:c0:61:8a:
60:6a:b9:de:c6:73:04:f2:f4:82:ed:b7:0e:12:03:0c:dd:a0:
dc:a1:3e:c4:31:31:43:62:77:96:55:2a:c5:a7:65:51:cb:c5:
24:7e:f6:d5:0d:3a:b1:ee:75:c2:eb:9d:a8:f4:90:e5:a4:f5:
6d:aa:26:d1:0f:c1:36:4f:d4:28:18:10:4f:aa:a0:db:f8:18:
c3:2b:4c:98:4c:ae:06:58:91:16:94:57:e8:89:27:aa:ea:e6:
d3:0f:8b:88:d2:4b:00:e0:b2:c0:ac:ac:1d:14:4b:0b:6f:04:
3c:3a:70:68:25:8e:9b:57:91:0e:d0:d4:38:cd:24:27:9d:9c:
f8:1e:c5:a0:f2:5b:09:26:0d:40:77:35:d8:51:cb:66:5c:71:
f2:b3:86:35:3a:97:1b:db:b6:a1:01:30:5e:cf:57:7c:e4:91:
89:5f:b4:d7:3b:55:0b:c9:bb:a4:ef:a5:cf:f1:bb:13:04:59:
73:a3:f9:f8:be:07:9b:b3:99:04:22:73:a2:c8:86:56:73:ec:
4a:0a:4c:89:09:c9:a3:e2:b7:46:26:f2:97:ae:db:06:42:b4:
2b:a2:64:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:14:22 2026 by rpki-client