Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.mft
File: POFsA48YrjpjX3C7X1cpHRnC_Wg.mft (raw, json)
Hash identifier: VerbcFYvygQQnmtxd3t7VEU901npDNPYt4YUCy+OXQg=
Subject key identifier: 55:A8:08:00:96:3E:5A:D0:BE:99:A2:ED:96:01:1E:73:19:C9:23:3D
Authority key identifier: 3C:E1:6C:03:8F:18:AE:3A:63:5F:70:BB:5F:57:29:1D:19:C2:FD:68
Certificate issuer: /CN=3ce16c038f18ae3a635f70bb5f57291d19c2fd68
Certificate serial: 019F36AA807BA8C8C5AD55D1AC75C2DF8C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POFsA48YrjpjX3C7X1cpHRnC_Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.mft
Manifest number: 11
Signing time: Mon 06 Jul 2026 09:02:51 +0000
Manifest this update: Mon 06 Jul 2026 09:02:51 +0000
Manifest next update: Tue 07 Jul 2026 09:02:51 +0000
Files and hashes: 1: 5IV12lakLjQprnJbcxcyiQamHtA.roa (hash: GZi6paQkvtZZMZ1EN5RWiQ6i/+Ni0PcRMjzr4OYZpu8=)
2: NTjaKlCxZP_2vMR0Igs6BRPLMBg.roa (hash: yCrErrFnv++SOw7EizZUOX9PNdlIeawFAL8bS5PpO8M=)
3: POFsA48YrjpjX3C7X1cpHRnC_Wg.crl (hash: XXhAtHQ4MVoDWAGNYSeSL975gLLJmHXDiy7GDuZbEk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/POFsA48YrjpjX3C7X1cpHRnC_Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:aa:80:7b:a8:c8:c5:ad:55:d1:ac:75:c2:df:8c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce16c038f18ae3a635f70bb5f57291d19c2fd68
Validity
Not Before: Jul 6 09:02:51 2026 GMT
Not After : Jul 7 09:02:51 2026 GMT
Subject: CN=55a80800963e5ad0be99a2ed96011e7319c9233d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:92:1b:32:5e:7c:8d:bd:f9:6f:dc:8f:78:
b6:11:d7:39:dc:50:36:e8:9b:bf:12:51:0c:71:4f:
9e:63:1e:00:ab:ce:3f:c0:07:41:92:01:df:c3:ce:
c5:61:88:0b:26:44:17:5e:87:63:34:b5:d0:c1:2b:
1b:0f:58:54:54:6a:52:b9:46:9e:f6:0e:8d:40:66:
5c:9f:88:93:ed:14:04:05:7f:d5:94:13:e5:21:06:
26:91:f5:30:7b:8d:b6:1f:60:85:63:61:be:a7:90:
6d:97:4f:07:09:f9:46:73:92:a8:79:8f:67:58:37:
f3:85:ca:91:16:0b:ca:d0:d6:10:df:f7:48:88:ac:
c8:83:d6:6c:81:30:23:9f:a7:5b:de:70:11:0b:7f:
fd:ed:13:06:51:47:0b:80:fa:8b:e8:7e:e9:81:bf:
9f:c8:53:b0:c4:9b:28:bc:71:2f:c0:de:30:01:87:
15:d6:82:05:e5:a2:16:2d:0a:28:bc:5a:6d:7d:24:
f8:0f:02:48:b4:70:a3:ea:9d:c1:9d:eb:19:a5:5e:
4a:56:7e:ce:a2:1f:db:ab:a7:b0:f7:7a:74:81:3d:
64:0d:f8:69:ad:5a:65:51:55:ee:3e:1a:f5:24:6f:
d2:0f:42:64:3e:92:36:fc:a4:3e:82:5c:43:87:dd:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A8:08:00:96:3E:5A:D0:BE:99:A2:ED:96:01:1E:73:19:C9:23:3D
X509v3 Authority Key Identifier:
keyid:3C:E1:6C:03:8F:18:AE:3A:63:5F:70:BB:5F:57:29:1D:19:C2:FD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POFsA48YrjpjX3C7X1cpHRnC_Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:18:47:ac:5c:db:6e:7e:30:14:56:1a:29:61:e1:1c:6b:2a:
1c:e9:fb:1c:d9:10:7b:3d:19:50:9f:58:4b:0a:aa:c4:e1:f1:
2c:65:4a:86:45:fc:43:01:72:c6:f5:0d:f6:8d:36:22:39:0b:
b9:59:50:87:6a:b9:75:ed:cd:61:51:70:a6:a4:f3:ca:87:e9:
d1:5c:6d:9a:13:f7:f3:ba:f8:dc:ad:4d:95:11:ab:27:5c:80:
4a:c5:36:34:4e:99:e3:63:6a:ec:00:45:72:11:a2:e3:30:dd:
bb:54:b9:33:8b:81:5d:30:aa:be:bf:01:d1:95:22:cb:3e:0c:
6c:e9:89:c0:71:aa:55:44:de:20:53:b0:5c:20:97:a6:9a:e3:
92:0d:1a:d1:c2:79:8f:72:b7:87:e0:6f:29:35:88:d3:47:b6:
49:a3:5e:9a:b6:4b:65:32:66:50:5e:ee:2f:55:ac:92:f5:e4:
70:26:c4:4c:67:4b:62:37:e1:21:17:78:51:58:67:a8:a2:a4:
0e:6b:41:02:0a:b4:88:78:7a:f9:5a:1c:49:c9:f5:62:17:bb:
64:37:04:db:27:10:cc:cc:df:a9:6b:75:e4:01:43:5c:8e:a2:
8a:b9:ac:73:d7:2a:c5:54:b0:68:3a:b8:20:57:8a:24:c9:3d:
55:cd:c9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:03:38 2026 by rpki-client