Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
File: POdWa7WxnnAPSOJeB1BsLyIt84Q.mft (raw, json)
Hash identifier: ZWIs689z+phGKWSudi5PqUpSGQgX3qd6YHFksZPh0vo=
Subject key identifier: AA:7B:E8:98:35:83:1F:35:B7:AE:FA:A0:D2:4E:3C:6D:4C:CA:06:76
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 01A088D5655E48874F0B6B6F879FBDFA0415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
Manifest number: 12A3
Signing time: Thu 10 Sep 2026 01:01:21 +0000
Manifest this update: Thu 10 Sep 2026 01:01:21 +0000
Manifest next update: Fri 11 Sep 2026 01:01:21 +0000
Files and hashes: 1: IKe3Kuub0SpVVP2Gnq1T557gDgk.roa (hash: ci82OhcD+rqbU1y8ZlxW++hpafTX5Z7/Pm7iV79c95E=)
2: POdWa7WxnnAPSOJeB1BsLyIt84Q.crl (hash: 8BP2tcGDrxwLqSwMCEF9GVvEBlODRVC/YtiwhMSyzbU=)
3: eVy__iI-9ySOngwDzUBN71-Ayac.roa (hash: sQfgzmMEgtZkNZ5Un5eGJAS1xbUCrXGRvzgFWs23Plc=)
4: fgbvzgb70NEoaagktTqxdMYst4c.roa (hash: Eoip5fkz+jvKGq0WNw0xxn6yHtKCLgJl9ph2sUZ/62o=)
5: g0yPFaUHY-D6DoLmNBezdgok6L4.roa (hash: tF2Yfxepm6QgVMGCXK7Mb8KH/TWmlDjJHDygGKLmNLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d5:65:5e:48:87:4f:0b:6b:6f:87:9f:bd:fa:04:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Sep 10 01:01:21 2026 GMT
Not After : Sep 11 01:01:21 2026 GMT
Subject: CN=aa7be89835831f35b7aefaa0d24e3c6d4cca0676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:b2:ac:c3:7b:5d:1a:a6:df:55:4d:5b:aa:
1a:b8:ef:d2:95:20:2c:31:5f:f3:98:98:50:82:a5:
cc:8b:ac:45:62:9d:27:4d:74:05:77:8d:c5:90:fb:
dd:f4:f9:bd:ad:07:25:87:e6:d4:d7:3f:da:0b:f1:
64:be:4a:ef:af:b6:78:26:5d:3d:2e:39:a3:95:ef:
b3:14:95:7d:09:f9:60:31:19:b3:f1:0b:8a:e0:92:
09:47:33:03:6d:ee:a7:03:29:89:cc:6b:22:2f:cd:
01:2f:c8:cb:29:eb:81:8a:ac:c2:80:78:16:55:a7:
0e:2a:0d:6d:e2:4f:1b:93:cd:36:89:93:e9:17:c4:
bf:66:f6:7a:be:dc:1f:b8:c7:7d:7b:96:2a:8d:54:
d0:ac:80:ea:9b:3a:74:cb:d5:e8:20:7d:b5:ac:aa:
ea:e1:d6:69:a9:56:95:88:3f:f0:26:cf:db:d5:1a:
b5:63:bc:d9:60:61:72:a3:b5:2a:ce:b1:46:9a:6b:
f9:2a:a0:19:73:00:51:37:bd:f8:c4:43:d5:47:90:
96:30:4d:31:b0:ae:30:da:31:9e:89:3c:09:dd:89:
fa:8b:55:5d:49:38:03:d6:21:58:21:83:df:b4:4b:
dc:12:3a:87:2a:ef:09:0b:f4:04:6e:08:32:d2:47:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7B:E8:98:35:83:1F:35:B7:AE:FA:A0:D2:4E:3C:6D:4C:CA:06:76
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:57:43:93:3b:28:0e:ca:d5:a1:02:3c:a5:0c:a9:69:6e:82:
f8:f3:03:e6:89:bc:20:6b:45:d1:65:2b:80:ca:0a:af:c7:7a:
f2:26:a9:83:98:dc:1b:69:14:e6:b9:f3:d1:c5:da:ba:0c:de:
b6:1c:4d:e1:fc:62:5d:27:02:a3:a2:11:6f:cb:28:4f:00:60:
e3:06:07:f7:df:d9:a0:83:22:e4:99:18:76:ec:5a:dd:b5:a6:
89:0e:7d:c1:17:40:c1:fb:2c:b5:5a:04:dd:59:04:d3:b8:80:
af:7f:75:5e:c1:96:77:81:6a:b1:6a:ee:b3:5c:e9:fb:02:ac:
15:a4:b2:3a:ee:b2:9c:a1:4b:0e:db:ac:04:42:e7:94:bd:86:
8d:5f:90:6c:f1:7f:2d:81:74:99:6a:d4:88:76:50:a7:35:91:
6d:42:9c:4c:10:76:05:e2:6b:4a:66:f7:98:3e:e1:cc:36:5f:
e1:14:98:11:f3:af:f4:46:02:ef:be:dc:e0:f6:45:e1:83:ea:
c6:66:f0:5c:d2:4f:28:51:2e:12:9e:6b:b0:5a:75:4f:c0:f7:
14:c5:50:14:65:2f:22:f4:88:0f:23:47:6f:cb:1b:0d:40:75:
17:f2:a7:af:7b:d7:6c:0a:99:56:3d:ea:55:45:dc:01:d0:7c:
f2:b9:2d:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCI1WVeSIdPC2tvh5+9+gQVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZTc1NjZiYjViMTllNzAwZjQ4ZTI1ZTA3NTA2YzJmMjIy
ZGYzODQwHhcNMjYwOTEwMDEwMTIxWhcNMjYwOTExMDEwMTIxWjAzMTEwLwYDVQQD
EyhhYTdiZTg5ODM1ODMxZjM1YjdhZWZhYTBkMjRlM2M2ZDRjY2EwNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrOyrMN7XRqm31VNW6oauO/SlSAs
MV/zmJhQgqXMi6xFYp0nTXQFd43FkPvd9Pm9rQclh+bU1z/aC/Fkvkrvr7Z4Jl09
Ljmjle+zFJV9CflgMRmz8QuK4JIJRzMDbe6nAymJzGsiL80BL8jLKeuBiqzCgHgW
VacOKg1t4k8bk802iZPpF8S/ZvZ6vtwfuMd9e5YqjVTQrIDqmzp0y9XoIH21rKrq
4dZpqVaViD/wJs/b1Rq1Y7zZYGFyo7UqzrFGmmv5KqAZcwBRN734xEPVR5CWME0x
sK4w2jGeiTwJ3Yn6i1VdSTgD1iFYIYPftEvcEjqHKu8JC/QEbggy0kextwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKp76Jg1gx81t676oNJOPG1MygZ2MB8GA1UdIwQY
MBaAFDznVmu1sZ5wD0jiXgdQbC8iLfOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTIt
ODlmZjA2Zjc5NjM1LzEvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTItODlmZjA2Zjc5NjM1
LzEvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALldDkzso
DsrVoQI8pQypaW6C+PMD5om8IGtF0WUrgMoKr8d68iapg5jcG2kU5rnz0cXaugze
thxN4fxiXScCo6IRb8soTwBg4wYH99/ZoIMi5JkYduxa3bWmiQ59wRdAwfsstVoE
3VkE07iAr391XsGWd4FqsWrus1zp+wKsFaSyOu6ynKFLDtusBELnlL2GjV+QbPF/
LYF0mWrUiHZQpzWRbUKcTBB2BeJrSmb3mD7hzDZf4RSYEfOv9EYC777c4PZF4YPq
xmbwXNJPKFEuEp5rsFp1T8D3FMVQFGUvIvSIDyNHb8sbDUB1F/Knr3vXbAqZVj3q
VUXcAdB88rktRA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 08:45:16 2026 by rpki-client