Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.mft
File: POFsA48YrjpjX3C7X1cpHRnC_Wg.mft (raw, json)
Hash identifier: J12+t8GpYjFG3lGxNXWdJN4KtjheL73tOkPlUzhw0Qs=
Subject key identifier: 83:FB:10:E6:EF:6C:F7:A9:1A:16:CB:B6:27:C1:D5:50:05:FB:74:ED
Authority key identifier: 3C:E1:6C:03:8F:18:AE:3A:63:5F:70:BB:5F:57:29:1D:19:C2:FD:68
Certificate issuer: /CN=3ce16c038f18ae3a635f70bb5f57291d19c2fd68
Certificate serial: 01A02055F72AF0BAF6C9D8E2858F96974D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POFsA48YrjpjX3C7X1cpHRnC_Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.mft
Manifest number: 8A
Signing time: Thu 20 Aug 2026 18:01:39 +0000
Manifest this update: Thu 20 Aug 2026 18:01:39 +0000
Manifest next update: Fri 21 Aug 2026 18:01:39 +0000
Files and hashes: 1: 5IV12lakLjQprnJbcxcyiQamHtA.roa (hash: GZi6paQkvtZZMZ1EN5RWiQ6i/+Ni0PcRMjzr4OYZpu8=)
2: NTjaKlCxZP_2vMR0Igs6BRPLMBg.roa (hash: yCrErrFnv++SOw7EizZUOX9PNdlIeawFAL8bS5PpO8M=)
3: POFsA48YrjpjX3C7X1cpHRnC_Wg.crl (hash: P4DLeFC86VEOpQqsyLLoKHJFtkg5A7Y4sW5w4kl9TFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/POFsA48YrjpjX3C7X1cpHRnC_Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:55:f7:2a:f0:ba:f6:c9:d8:e2:85:8f:96:97:4d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce16c038f18ae3a635f70bb5f57291d19c2fd68
Validity
Not Before: Aug 20 18:01:39 2026 GMT
Not After : Aug 21 18:01:39 2026 GMT
Subject: CN=83fb10e6ef6cf7a91a16cbb627c1d55005fb74ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:dd:60:a4:de:c7:3d:00:b8:4d:1a:5a:0d:
97:14:21:ce:6a:d7:c2:0b:75:7c:c4:34:fe:21:ba:
85:c4:46:06:46:d5:e8:29:74:19:40:45:44:bb:d5:
55:03:56:d9:51:35:91:9e:d6:0a:a7:ed:4f:35:00:
60:d3:03:27:eb:f2:27:b7:8f:0c:0b:b9:68:57:eb:
72:2b:03:46:14:00:c0:cb:c4:e1:8a:00:3d:70:52:
6e:dc:bf:81:44:a6:f7:44:ab:ab:95:03:b2:1d:69:
12:a2:d9:3b:c7:10:a2:f0:d4:32:cc:df:fd:2f:cc:
94:62:88:54:4b:f0:f3:12:cc:4d:68:df:5d:1b:51:
9c:55:30:1b:5d:15:6a:c6:d0:36:46:7e:41:c5:1d:
81:cc:2d:6b:74:0b:a0:17:7a:20:28:61:7c:ad:45:
d5:84:f2:a3:f6:7d:ae:e7:b7:61:e7:ed:92:09:ee:
f0:b4:36:65:e6:8c:8b:86:ac:13:f3:1e:18:ef:2f:
8e:49:21:23:ba:97:99:76:9c:99:f1:9c:e1:d2:26:
fc:3f:af:97:92:89:13:5d:f4:07:4f:95:d2:fe:e0:
44:10:b8:5b:45:1d:23:71:a2:f6:c2:51:df:04:6e:
57:c3:00:28:cc:d4:42:2c:14:b8:49:d8:e6:96:14:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FB:10:E6:EF:6C:F7:A9:1A:16:CB:B6:27:C1:D5:50:05:FB:74:ED
X509v3 Authority Key Identifier:
keyid:3C:E1:6C:03:8F:18:AE:3A:63:5F:70:BB:5F:57:29:1D:19:C2:FD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POFsA48YrjpjX3C7X1cpHRnC_Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/POFsA48YrjpjX3C7X1cpHRnC_Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:cc:31:d1:55:6f:1e:04:d6:c5:b1:4e:e0:c0:e0:11:17:9b:
40:58:66:be:45:28:eb:16:db:33:b6:12:6d:90:e4:43:22:a9:
42:b3:c4:ff:59:2a:f4:24:e6:19:d6:e8:b6:01:3a:72:02:76:
03:42:94:00:b5:6c:83:a9:06:e2:a4:dd:8b:69:90:98:ad:61:
68:06:56:3f:b1:bc:28:04:2a:3a:e4:93:c9:59:22:2f:7b:82:
85:0a:e2:67:f7:54:c2:c2:66:bd:b3:0e:a2:88:29:dd:28:9e:
5a:0d:e1:05:42:17:3e:f3:81:d0:f4:9a:a7:48:60:95:e9:3e:
6a:f2:25:ea:c8:de:60:46:d9:e0:ff:f6:02:b9:a8:c2:b9:05:
66:cf:9e:55:58:bd:2f:fe:fb:9b:eb:e4:79:86:16:98:24:53:
ff:84:e6:1d:55:c9:e1:36:30:42:e0:d6:e5:69:59:5d:ae:c3:
f0:7e:77:9b:6a:ec:56:fc:48:6d:a7:b9:db:a6:28:d9:0e:e5:
51:cb:03:7d:6a:48:7e:9b:0a:36:be:35:9a:7c:35:e8:82:70:
32:60:4d:01:5e:6a:07:fe:44:f6:70:fc:c5:62:21:19:fb:02:
a6:5c:d5:84:44:b9:1d:d7:ab:a2:c0:b9:76:f1:37:6d:ec:63:
52:5b:57:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAgVfcq8Lr2ydjihY+Wl00jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZTE2YzAzOGYxOGFlM2E2MzVmNzBiYjVmNTcyOTFkMTlj
MmZkNjgwHhcNMjYwODIwMTgwMTM5WhcNMjYwODIxMTgwMTM5WjAzMTEwLwYDVQQD
Eyg4M2ZiMTBlNmVmNmNmN2E5MWExNmNiYjYyN2MxZDU1MDA1ZmI3NGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7rdYKTexz0AuE0aWg2XFCHOatfC
C3V8xDT+IbqFxEYGRtXoKXQZQEVEu9VVA1bZUTWRntYKp+1PNQBg0wMn6/Int48M
C7loV+tyKwNGFADAy8ThigA9cFJu3L+BRKb3RKurlQOyHWkSotk7xxCi8NQyzN/9
L8yUYohUS/DzEsxNaN9dG1GcVTAbXRVqxtA2Rn5BxR2BzC1rdAugF3ogKGF8rUXV
hPKj9n2u57dh5+2SCe7wtDZl5oyLhqwT8x4Y7y+OSSEjupeZdpyZ8Zzh0ib8P6+X
kokTXfQHT5XS/uBEELhbRR0jcaL2wlHfBG5XwwAozNRCLBS4SdjmlhRAMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIP7EObvbPepGhbLtifB1VAF+3TtMB8GA1UdIwQY
MBaAFDzhbAOPGK46Y19wu19XKR0Zwv1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9Gc0E0OFlyanBqWDNDN1gxY3BIUm5DX1dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWIt
MjQ1MTVhMTRjNDU2LzEvUE9Gc0E0OFlyanBqWDNDN1gxY3BIUm5DX1dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWItMjQ1MTVhMTRjNDU2
LzEvUE9Gc0E0OFlyanBqWDNDN1gxY3BIUm5DX1dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMwx0VVv
HgTWxbFO4MDgERebQFhmvkUo6xbbM7YSbZDkQyKpQrPE/1kq9CTmGdbotgE6cgJ2
A0KUALVsg6kG4qTdi2mQmK1haAZWP7G8KAQqOuSTyVkiL3uChQriZ/dUwsJmvbMO
oogp3SieWg3hBUIXPvOB0PSap0hglek+avIl6sjeYEbZ4P/2ArmowrkFZs+eVVi9
L/77m+vkeYYWmCRT/4TmHVXJ4TYwQuDW5WlZXa7D8H53m2rsVvxIbae526Yo2Q7l
UcsDfWpIfpsKNr41mnw16IJwMmBNAV5qB/5E9nD8xWIhGfsCplzVhES5HderosC5
dvE3bexjUltXPQ==
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:13 2026 by rpki-client