Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: l10bfjBQX+brzQxyuO1JnUeuih/FWU74Tebow2jzj00=
Subject key identifier: 3A:FB:D6:8D:FD:7F:E9:F4:4A:2E:D9:37:67:1F:7F:C5:A6:5E:A0:CF
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 01A0C8FD2447D9BD99746D12C84148BD89BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 1430
Signing time: Tue 22 Sep 2026 12:00:28 +0000
Manifest this update: Tue 22 Sep 2026 12:00:28 +0000
Manifest next update: Wed 23 Sep 2026 12:00:28 +0000
Files and hashes: 1: LDms8nxe60K6COjjp_csNfhmghs.roa (hash: Q5tvWtDVNBkz/BRp4dl8220S6HSORZZf3f/jyOpji8U=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: k8DZ7cDSPtKIURwv0+dNyTLGAEjyaojAH1lnYGy/tlo=)
3: T6VYQnhnQYETwVj8BZYLRwwLS3U.roa (hash: C4QUjsV9O/nqAXRjoFy9pa8X3S9h9F1PXPJew5ITvec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:24:47:d9:bd:99:74:6d:12:c8:41:48:bd:89:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Sep 22 12:00:28 2026 GMT
Not After : Sep 23 12:00:28 2026 GMT
Subject: CN=3afbd68dfd7fe9f44a2ed937671f7fc5a65ea0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:25:d6:7d:c9:93:b2:c6:65:73:34:d3:2b:
0b:bd:32:4c:44:a0:41:f1:e4:6a:af:9d:e0:3d:04:
4b:93:ea:8f:13:27:26:81:f8:56:8b:a9:e9:6b:ce:
92:3c:bd:ac:8d:2b:78:cc:86:6d:d6:8f:24:2c:fa:
f2:58:b6:d7:70:64:df:df:7f:ea:57:83:40:e0:55:
88:07:e6:6b:1e:de:ac:f2:72:88:db:7f:fa:29:e2:
f0:fe:14:a0:cd:fe:97:2e:fc:ab:a9:cc:d0:19:c6:
0c:c6:2b:83:ff:c1:0b:9f:03:1a:d0:07:44:fb:a1:
3e:4f:ba:b8:fb:82:80:95:08:75:16:99:f6:60:df:
cf:3f:9a:8e:99:11:78:f0:39:27:d8:b4:c3:74:af:
bf:72:ad:c9:66:95:3b:00:65:4b:e5:91:fb:fd:f9:
3c:bc:25:74:07:71:56:49:dc:da:d7:32:b4:87:de:
72:41:fd:8c:d0:03:d8:eb:75:1b:a8:ab:83:e8:6d:
d5:f9:88:04:69:78:ff:09:74:d7:67:2b:94:61:e2:
f7:6c:8f:5d:40:2b:b4:30:08:df:6b:bd:f8:f6:97:
7c:14:71:54:6b:8c:89:d0:61:8e:29:16:0d:0d:75:
2a:ef:d4:89:d8:45:36:4f:48:a4:98:3c:04:79:9e:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FB:D6:8D:FD:7F:E9:F4:4A:2E:D9:37:67:1F:7F:C5:A6:5E:A0:CF
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:71:3b:a4:ae:1c:99:5d:af:d3:60:80:c2:40:8a:06:1f:28:
b6:8c:25:b6:2e:19:d2:a0:92:55:a2:85:55:7d:d9:ac:87:b0:
2e:57:c9:c4:25:54:32:72:7a:cf:49:bc:e5:ea:6c:6a:1c:42:
d2:da:7b:6e:d8:c6:9b:d2:48:34:66:0b:1d:76:97:52:50:4b:
63:45:27:4e:84:19:55:02:1c:c3:ab:22:cd:2a:63:e0:3a:ef:
fc:96:0d:45:0f:e5:7a:87:90:f7:29:52:6d:56:05:af:95:5f:
a0:f8:c9:ee:c8:f7:f9:56:34:80:ab:03:ee:82:f9:01:32:ac:
07:92:b2:95:8a:64:b8:8a:48:77:ec:15:52:4a:b3:c1:c6:69:
7a:88:e2:1e:bc:89:7e:7e:cb:5a:94:4f:df:79:be:00:63:8b:
3f:2f:51:8d:2a:48:27:03:96:aa:58:43:69:88:8f:2c:b9:6f:
fb:46:0f:51:36:25:d2:b6:76:57:21:39:0f:fb:52:c2:c1:74:
59:8d:f3:01:7e:31:b1:9e:f3:9d:87:a6:18:6e:61:43:cb:a4:
ad:83:9f:b4:4e:00:f6:81:4c:1b:4c:22:8b:93:c4:73:05:6b:
50:a2:bd:81:63:98:dd:81:d4:be:d3:9b:22:ba:7a:9a:88:47:
db:1e:70:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:58:36 2026 by rpki-client