Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/b330c7-fdac-400a-967b-a72ead295325/1/PO7GxHlRspnHCAZYPXkdUM2BbF8.mft
File: PO7GxHlRspnHCAZYPXkdUM2BbF8.mft (raw, json)
Hash identifier: 9iPLSPebGnA+8C5xTd+JUEFYInQaR5AwcfqtkrOXg8M=
Subject key identifier: BC:3F:2F:F1:28:85:82:30:AB:20:51:3C:C7:F9:67:33:49:CE:AC:51
Authority key identifier: 3C:EE:C6:C4:79:51:B2:99:C7:08:06:58:3D:79:1D:50:CD:81:6C:5F
Certificate issuer: /CN=3ceec6c47951b299c70806583d791d50cd816c5f
Certificate serial: 01A17770A8E1DDE32806C2DB718BE945412C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PO7GxHlRspnHCAZYPXkdUM2BbF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b330c7-fdac-400a-967b-a72ead295325/1/PO7GxHlRspnHCAZYPXkdUM2BbF8.mft
Manifest number: 0711
Signing time: Mon 26 Oct 2026 09:00:34 +0000
Manifest this update: Mon 26 Oct 2026 09:00:34 +0000
Manifest next update: Tue 27 Oct 2026 09:00:34 +0000
Files and hashes: 1: PO7GxHlRspnHCAZYPXkdUM2BbF8.crl (hash: pF6VvotIJmG7HIDuGHAgjP4nGanAQ90clT0tjDPYWE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b330c7-fdac-400a-967b-a72ead295325/1/PO7GxHlRspnHCAZYPXkdUM2BbF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b330c7-fdac-400a-967b-a72ead295325/1/PO7GxHlRspnHCAZYPXkdUM2BbF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PO7GxHlRspnHCAZYPXkdUM2BbF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:70:a8:e1:dd:e3:28:06:c2:db:71:8b:e9:45:41:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ceec6c47951b299c70806583d791d50cd816c5f
Validity
Not Before: Oct 26 09:00:34 2026 GMT
Not After : Oct 27 09:00:34 2026 GMT
Subject: CN=bc3f2ff128858230ab20513cc7f9673349ceac51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1a:2c:6c:6b:94:53:07:7e:d1:bd:52:bf:b9:
90:9e:2e:19:0c:41:60:17:11:6d:1c:b6:8e:07:e9:
73:9c:26:c5:e0:de:16:97:c9:b3:81:64:bb:c0:16:
12:9c:a7:0c:49:96:d2:f1:b1:2a:f2:22:20:1b:f6:
19:02:82:57:00:e8:54:34:de:e2:73:73:b3:db:27:
56:c5:d6:d1:cc:2e:7b:a3:a8:46:59:d1:2b:b1:5f:
df:78:e1:87:54:3c:02:46:5c:fb:c4:d3:ab:f1:d0:
3d:ba:13:84:f2:a8:e0:44:a9:d7:6f:0e:bd:13:41:
eb:8b:dc:79:eb:c8:ea:77:b3:e6:e1:80:96:a2:d8:
af:ab:92:d1:47:9d:a9:42:14:dc:15:07:2c:db:19:
e1:a5:19:f1:11:96:5c:eb:db:1a:8a:d0:60:23:5a:
a8:94:33:97:ce:94:05:cf:19:34:6f:6b:d8:7c:62:
a3:75:15:a4:00:94:0e:95:ad:75:e6:94:2d:2a:5f:
bd:bd:ce:b6:16:32:75:04:a0:71:8f:a1:0c:bc:cc:
4c:be:9b:8b:94:63:0c:8b:9d:48:46:27:9a:5c:60:
13:de:07:c6:c9:3f:d2:e2:d9:e1:ed:13:26:b1:68:
68:5a:a5:98:51:c1:fa:92:9a:15:41:36:11:f8:9e:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3F:2F:F1:28:85:82:30:AB:20:51:3C:C7:F9:67:33:49:CE:AC:51
X509v3 Authority Key Identifier:
keyid:3C:EE:C6:C4:79:51:B2:99:C7:08:06:58:3D:79:1D:50:CD:81:6C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PO7GxHlRspnHCAZYPXkdUM2BbF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b330c7-fdac-400a-967b-a72ead295325/1/PO7GxHlRspnHCAZYPXkdUM2BbF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b330c7-fdac-400a-967b-a72ead295325/1/PO7GxHlRspnHCAZYPXkdUM2BbF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ca:a5:bf:a6:8a:96:de:8b:3e:69:c8:b7:ba:dc:d6:4e:8b:
04:7b:fd:5e:8d:bc:a8:32:6b:eb:eb:30:98:67:b4:46:7c:82:
50:8a:d8:2c:6f:23:d7:d5:05:a0:d2:61:20:c0:25:b7:d7:c3:
15:42:05:c9:c2:20:e3:c5:cf:2d:69:3d:03:a8:45:0f:8e:ad:
ed:9e:4b:1e:f5:f9:05:dc:26:07:28:c7:17:23:c4:6a:37:cc:
21:11:d1:47:af:bb:9b:72:e9:61:3f:52:96:77:af:9f:a3:fc:
17:8c:5e:0c:08:b6:fd:d8:17:70:84:28:87:08:2f:fa:54:52:
3e:87:57:31:43:1b:92:c3:bd:16:3d:f6:86:57:e6:02:ef:88:
08:41:57:12:c3:66:ba:73:92:d8:8d:22:e0:59:fa:07:0b:00:
87:b9:0f:df:80:17:13:f8:9b:2e:de:dd:3e:29:a0:e8:e3:cf:
78:29:f2:6d:39:d4:96:66:b4:cd:87:20:20:0f:ba:b7:7b:76:
b9:61:0e:bb:fb:8b:0e:22:54:75:a8:98:23:15:3c:e7:06:8c:
fd:eb:ba:c3:e3:c6:ca:da:d9:7a:45:c7:8c:9a:7f:5c:18:72:
76:08:fd:18:e6:4c:a7:16:56:b2:f0:aa:7b:47:f8:34:e5:76:
d5:bf:94:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:54:48 2026 by rpki-client