Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
File: poXxkUzrGSIcVjGTAn1FNFAzrV8.mft (raw, json)
Hash identifier: hVdpiruZaU6nUf6geBpOueMtlprJU+GGzV+a5MXOHkE=
Subject key identifier: 9C:BB:89:EE:F9:EF:66:7F:81:B3:9E:AC:AA:52:DB:12:77:8B:E7:47
Authority key identifier: A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
Certificate issuer: /CN=a685f1914ceb19221c563193027d45345033ad5f
Certificate serial: 01A08B68AC25B17FCFD1AE4C8F3FCC7B54D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
Manifest number: 068B
Signing time: Thu 10 Sep 2026 13:01:27 +0000
Manifest this update: Thu 10 Sep 2026 13:01:27 +0000
Manifest next update: Fri 11 Sep 2026 13:01:27 +0000
Files and hashes: 1: L7xswkZOYtWZFKKAqV29uL6KrTo.roa (hash: 7HxTzwEYY9RT2odFm0ohwxx/sbrU6yVxKLryEnSr9X4=)
2: poXxkUzrGSIcVjGTAn1FNFAzrV8.crl (hash: bu7ijdeuPbDgN7ruMa4UfT2Eqx6qUybS8JzE3xff2dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:ac:25:b1:7f:cf:d1:ae:4c:8f:3f:cc:7b:54:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a685f1914ceb19221c563193027d45345033ad5f
Validity
Not Before: Sep 10 13:01:27 2026 GMT
Not After : Sep 11 13:01:27 2026 GMT
Subject: CN=9cbb89eef9ef667f81b39eacaa52db12778be747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:28:cb:59:5e:ab:43:8e:0c:d0:a2:c7:85:5d:
f9:34:2e:c8:b3:27:cb:cc:6d:a2:db:e9:dd:0c:4a:
18:dc:bd:e3:9b:f9:68:b7:39:8b:3e:7f:82:f6:91:
fd:3c:09:47:93:85:b3:7b:a3:d1:3c:c8:ea:17:ce:
cd:b8:f9:9b:e2:65:4a:82:ac:d0:dd:1b:1c:8d:a0:
05:01:7b:cd:bf:1a:89:d0:1d:27:41:5c:d2:a9:5f:
5a:ba:6a:97:75:3b:52:6e:7d:9d:45:ef:b3:5a:6c:
43:43:81:49:36:24:f7:19:5b:83:aa:ec:80:3d:ac:
6b:8f:32:e5:06:a6:8d:86:f3:2c:de:a3:bb:6c:22:
ef:c3:fc:14:be:70:0e:18:35:16:64:f1:17:b9:76:
8a:5f:57:11:46:48:11:52:8a:97:4f:ae:13:67:17:
d7:cb:4b:98:f3:24:e2:b2:68:b4:08:4f:44:1e:8a:
d2:3b:c8:88:c4:4b:b2:52:73:63:31:35:85:c1:ed:
dc:30:de:be:09:87:7d:0b:5d:48:3e:ba:ae:af:0c:
62:80:f0:f9:7c:c4:9a:f9:cf:29:7b:44:62:65:5e:
d1:d8:0f:db:e0:a1:4a:16:6f:e4:04:37:3f:c2:2d:
34:ab:4e:50:ff:b5:ed:16:9b:40:24:5f:9e:97:ed:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BB:89:EE:F9:EF:66:7F:81:B3:9E:AC:AA:52:DB:12:77:8B:E7:47
X509v3 Authority Key Identifier:
keyid:A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e2:e6:10:04:41:28:73:94:f7:59:91:36:6a:0c:49:03:96:
c0:62:53:c5:07:66:0f:0e:ed:c3:d4:ac:0b:9c:62:3b:11:ed:
2a:79:85:be:1b:b9:c7:18:98:d0:3d:9e:b0:3c:21:5d:52:bb:
ff:64:6e:86:79:7d:86:d7:c5:90:b5:e8:46:c6:30:97:53:13:
62:55:04:65:8d:1b:71:24:0b:80:fa:ce:ee:e4:c7:b6:19:5e:
d2:43:fe:1c:8f:44:b5:77:34:b8:2b:2f:ac:98:98:f2:a7:c7:
88:14:f7:ba:48:e4:43:ad:6b:d5:54:e8:61:b1:45:5d:13:9a:
ee:9e:82:ce:28:31:d5:d9:5a:d5:61:23:39:b1:7b:df:de:d8:
ed:28:a9:d6:f4:de:6e:20:1a:5c:c0:c2:02:75:46:7b:a5:72:
ae:6c:07:17:27:50:f8:7b:c4:b2:01:1d:29:61:ed:e7:90:22:
dd:81:2a:b2:3f:af:ca:4b:a5:65:72:03:d6:fa:49:85:ea:e7:
be:8a:5c:ea:5d:34:3a:8c:f9:f5:b1:86:b4:b5:29:0c:38:94:
59:58:79:a8:50:39:8f:5f:49:b0:49:31:ee:92:47:e2:68:f8:
f2:ed:7c:8c:44:81:fb:6f:c1:d1:bf:aa:d2:ef:a2:13:67:0e:
8b:51:b8:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLaKwlsX/P0a5Mjz/Me1TQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ODVmMTkxNGNlYjE5MjIxYzU2MzE5MzAyN2Q0NTM0NTAz
M2FkNWYwHhcNMjYwOTEwMTMwMTI3WhcNMjYwOTExMTMwMTI3WjAzMTEwLwYDVQQD
Eyg5Y2JiODllZWY5ZWY2NjdmODFiMzllYWNhYTUyZGIxMjc3OGJlNzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SjLWV6rQ44M0KLHhV35NC7IsyfL
zG2i2+ndDEoY3L3jm/lotzmLPn+C9pH9PAlHk4Wze6PRPMjqF87NuPmb4mVKgqzQ
3RscjaAFAXvNvxqJ0B0nQVzSqV9aumqXdTtSbn2dRe+zWmxDQ4FJNiT3GVuDquyA
PaxrjzLlBqaNhvMs3qO7bCLvw/wUvnAOGDUWZPEXuXaKX1cRRkgRUoqXT64TZxfX
y0uY8yTismi0CE9EHorSO8iIxEuyUnNjMTWFwe3cMN6+CYd9C11IPrqurwxigPD5
fMSa+c8pe0RiZV7R2A/b4KFKFm/kBDc/wi00q05Q/7XtFptAJF+el+39FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJy7ie7572Z/gbOerKpS2xJ3i+dHMB8GA1UdIwQY
MBaAFKaF8ZFM6xkiHFYxkwJ9RTRQM61fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG9YeGtVenJHU0ljVmpHVEFuMUZORkF6clY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8xOTg2MmMtZjdkNC00ZjRmLWE4ZGQt
MWViYzUwZGNlZDQ5LzEvcG9YeGtVenJHU0ljVmpHVEFuMUZORkF6clY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8xOTg2MmMtZjdkNC00ZjRmLWE4ZGQtMWViYzUwZGNlZDQ5
LzEvcG9YeGtVenJHU0ljVmpHVEFuMUZORkF6clY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+LmEARB
KHOU91mRNmoMSQOWwGJTxQdmDw7tw9SsC5xiOxHtKnmFvhu5xxiY0D2esDwhXVK7
/2Ruhnl9htfFkLXoRsYwl1MTYlUEZY0bcSQLgPrO7uTHthle0kP+HI9EtXc0uCsv
rJiY8qfHiBT3ukjkQ61r1VToYbFFXROa7p6Czigx1dla1WEjObF7397Y7Sip1vTe
biAaXMDCAnVGe6VyrmwHFydQ+HvEsgEdKWHt55Ai3YEqsj+vykulZXID1vpJhern
vopc6l00Ooz59bGGtLUpDDiUWVh5qFA5j19JsEkx7pJH4mj48u18jESB+2/B0b+q
0u+iE2cOi1G43w==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:46:44 2026 by rpki-client