Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: dHQWQ1TOVxGJogCaZ4UDoY5B/3aIF9Aj6wbO0yx4ub8=
Subject key identifier: 87:17:B4:97:D7:57:01:46:A7:5C:FA:EC:CA:5A:37:E9:F1:C5:F9:E7
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 019CAE6C2C8F93187CD257D6B83BF60EE85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 1210
Signing time: Mon 02 Mar 2026 12:00:50 +0000
Manifest this update: Mon 02 Mar 2026 12:00:50 +0000
Manifest next update: Tue 03 Mar 2026 12:00:50 +0000
Files and hashes: 1: LDms8nxe60K6COjjp_csNfhmghs.roa (hash: Q5tvWtDVNBkz/BRp4dl8220S6HSORZZf3f/jyOpji8U=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: D+8ZADYM/+w3M4u0jZ06epcmf4MehlVqwbqueZDtbMw=)
3: T6VYQnhnQYETwVj8BZYLRwwLS3U.roa (hash: C4QUjsV9O/nqAXRjoFy9pa8X3S9h9F1PXPJew5ITvec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:2c:8f:93:18:7c:d2:57:d6:b8:3b:f6:0e:e8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Mar 2 12:00:50 2026 GMT
Not After : Mar 3 12:00:50 2026 GMT
Subject: CN=8717b497d7570146a75cfaecca5a37e9f1c5f9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:ab:58:4f:12:c1:64:c3:81:19:3b:8a:1a:
50:b4:fd:6c:88:d2:fd:d6:01:69:32:29:1b:28:60:
c5:a8:3c:9c:5c:3f:e2:1e:3d:d8:3f:2e:eb:ee:ff:
58:4e:07:17:65:e7:ab:8b:c5:df:35:90:1f:af:48:
bf:5f:69:34:18:b8:e6:d1:6f:b0:09:53:2b:e4:7d:
a9:1b:d6:26:53:42:9a:de:4f:58:b2:8f:c8:6f:7f:
ad:6f:b2:27:33:3d:c6:71:90:e5:85:0e:14:ec:36:
e7:25:12:93:58:0d:28:bd:fa:5c:f8:22:d5:11:54:
60:e2:32:53:41:cc:70:23:0d:84:4f:56:62:cd:2e:
2e:b8:66:97:c2:df:80:08:02:c2:b3:6c:4b:96:59:
1c:04:66:80:85:3c:4c:92:c5:c2:e7:6d:68:e6:c9:
21:e0:c2:32:a7:cd:82:20:5b:68:24:be:5f:9f:4e:
0e:a7:78:72:70:5b:53:0e:ce:bd:6c:72:57:35:bb:
a4:80:68:7a:28:6b:a0:5d:a8:99:1a:7c:d5:70:83:
a9:15:7b:59:4a:52:80:5c:8c:08:f9:6c:91:ce:40:
eb:f0:76:80:73:ed:92:93:03:ca:a7:ba:74:87:0d:
7a:2a:ce:d7:d3:36:78:51:bb:2e:ea:68:8a:65:40:
1c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:17:B4:97:D7:57:01:46:A7:5C:FA:EC:CA:5A:37:E9:F1:C5:F9:E7
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5d:18:28:d2:d0:f4:c9:03:fc:11:ad:c3:53:2c:cc:cb:a4:
c4:b9:de:f6:cb:b4:f5:78:4e:e7:3d:7e:19:b9:e1:8c:6f:04:
40:7b:8f:81:0c:fe:9a:e7:75:c3:2b:e8:c2:b3:d1:a5:76:cc:
f5:15:e4:72:91:62:5e:2d:e1:b1:43:1c:15:0e:ec:e4:2a:15:
30:04:0d:80:4d:d6:58:e4:14:7f:8c:ea:c7:f2:28:64:a8:3b:
90:89:e4:4a:4e:b3:43:73:5a:c8:ca:79:38:82:ef:52:b9:b7:
a4:a5:cb:cb:d0:a0:df:3c:72:ea:91:b8:0d:6a:91:e3:c5:77:
e8:40:40:32:68:9d:17:ba:e8:da:86:91:cc:82:d9:53:15:e2:
dd:8d:70:dd:e2:59:e6:00:2d:d5:d1:48:2e:f1:7c:e9:72:ee:
7e:f2:19:72:6d:7f:8a:23:b4:d1:59:ce:90:80:79:b8:72:4e:
bb:97:a4:51:e4:6e:55:64:d8:11:c8:fa:c8:2e:da:f2:a6:cb:
0d:d4:74:1e:28:7d:53:cd:da:ca:f5:08:15:1a:76:c3:4b:66:
34:d2:a5:ac:10:bc:e1:16:30:25:41:1a:af:01:76:be:47:72:
c9:1d:27:0d:ee:45:9c:7c:0c:f2:3a:ee:64:f7:47:51:9b:bd:
0f:12:60:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:05 2026 by rpki-client