Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: Xf8CRAK6CYTbMZDkr9Z8Chh7ePw1fQCefrnrrk0Lavs=
Subject key identifier: D2:03:8E:B6:68:68:69:7A:27:72:A6:8C:A9:E0:7D:51:10:AE:B5:E2
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 019EC17F7B0E3B2F7C94F1266C8253D8C1AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 1323
Signing time: Sat 13 Jun 2026 15:00:17 +0000
Manifest this update: Sat 13 Jun 2026 15:00:17 +0000
Manifest next update: Sun 14 Jun 2026 15:00:17 +0000
Files and hashes: 1: LDms8nxe60K6COjjp_csNfhmghs.roa (hash: Q5tvWtDVNBkz/BRp4dl8220S6HSORZZf3f/jyOpji8U=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: ODALscHLZ3a0TFplhiVAR3T7C2Js1DUcE/D+bf1tph8=)
3: T6VYQnhnQYETwVj8BZYLRwwLS3U.roa (hash: C4QUjsV9O/nqAXRjoFy9pa8X3S9h9F1PXPJew5ITvec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:7b:0e:3b:2f:7c:94:f1:26:6c:82:53:d8:c1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Jun 13 15:00:17 2026 GMT
Not After : Jun 14 15:00:17 2026 GMT
Subject: CN=d2038eb66868697a2772a68ca9e07d5110aeb5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:98:e1:07:c2:87:3f:52:68:7c:17:db:46:6a:
87:de:f6:bf:7b:59:ed:5c:02:e1:a7:d5:6a:05:cb:
e4:bf:45:d3:5c:f5:e8:74:e9:81:3d:26:4a:64:e6:
45:30:4f:63:5d:4c:37:33:df:bf:6f:b9:ce:e7:53:
c3:59:08:2e:48:98:cd:04:a4:97:96:97:15:33:e6:
46:8e:5e:97:58:00:da:8f:e0:ea:0c:2d:07:86:48:
15:8b:79:74:af:b1:ce:88:82:3f:29:be:27:9f:a3:
6a:db:9f:da:de:e8:ed:e6:2b:88:a0:73:36:2f:4c:
7a:2c:57:79:fb:d5:57:2e:b4:a2:d1:95:91:2c:d8:
a7:f3:36:05:c1:b1:5b:ee:e7:f9:71:74:10:da:9e:
19:dc:30:1b:68:55:18:b0:c7:3f:e6:e3:5e:c4:3e:
4b:99:f5:05:81:ce:2f:f6:dc:bc:91:bd:d0:43:59:
86:de:ea:07:aa:ed:28:5c:5c:ff:8b:5e:20:c4:99:
32:23:bd:3b:f8:b0:63:db:bb:cb:a1:27:dc:d0:be:
99:b1:9b:6b:66:9a:71:0f:ea:6c:ed:2b:42:ef:ac:
2c:7e:33:3a:ec:2b:5c:40:54:47:67:53:04:a4:ff:
be:25:4d:54:03:d5:e1:dd:00:36:8f:df:77:b6:b6:
f4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:03:8E:B6:68:68:69:7A:27:72:A6:8C:A9:E0:7D:51:10:AE:B5:E2
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0f:05:b5:63:c7:a0:00:46:71:08:8b:18:7e:fa:6d:22:b9:
2f:69:83:02:f1:ac:99:aa:20:93:5e:6a:0b:f5:7a:a5:4c:28:
df:ab:33:1c:cf:62:b5:19:f0:95:bc:6c:ef:ec:f2:34:dc:da:
76:34:47:3c:b0:6a:a2:6d:62:48:a3:df:df:b8:2e:fc:4e:8d:
9b:bc:ed:50:8e:a3:a5:fe:20:ff:10:70:a3:85:2f:6a:75:86:
4e:07:e0:43:ae:c4:10:6e:c8:fd:bb:68:cd:d3:29:2e:b4:9e:
13:ed:40:ee:64:5c:6b:01:74:00:bb:52:f9:e6:5c:d2:df:18:
01:6a:41:94:f2:a4:ac:dd:4f:66:ab:42:62:f1:d2:04:f4:6d:
bc:c8:bb:25:3d:43:a8:cb:e3:88:ab:da:fe:09:18:4e:25:e4:
04:de:34:8e:fc:9e:c1:18:4d:46:0c:62:a5:c5:07:40:29:a3:
63:a6:93:e0:51:af:a6:52:ee:2e:15:74:cd:ea:4b:41:13:79:
77:d2:87:82:3e:ac:51:30:72:8b:e1:43:f8:53:d0:3c:ea:f7:
74:0c:6f:69:f8:d1:79:c0:56:14:24:bd:4b:d5:82:a8:e3:56:
9f:10:00:25:c3:3c:d2:2f:29:53:9b:e0:1f:df:c9:5f:e8:94:
2d:b0:0f:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Bf3sOOy98lPEmbIJT2MGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlY2Q1M2M2NjQyNGMzZjM2OWNhODhlZTdhZjc2YWRiMjVl
MTg0NTEwHhcNMjYwNjEzMTUwMDE3WhcNMjYwNjE0MTUwMDE3WjAzMTEwLwYDVQQD
EyhkMjAzOGViNjY4Njg2OTdhMjc3MmE2OGNhOWUwN2Q1MTEwYWViNWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZjhB8KHP1JofBfbRmqH3va/e1nt
XALhp9VqBcvkv0XTXPXodOmBPSZKZOZFME9jXUw3M9+/b7nO51PDWQguSJjNBKSX
lpcVM+ZGjl6XWADaj+DqDC0HhkgVi3l0r7HOiII/Kb4nn6Nq25/a3ujt5iuIoHM2
L0x6LFd5+9VXLrSi0ZWRLNin8zYFwbFb7uf5cXQQ2p4Z3DAbaFUYsMc/5uNexD5L
mfUFgc4v9ty8kb3QQ1mG3uoHqu0oXFz/i14gxJkyI707+LBj27vLoSfc0L6ZsZtr
ZppxD+ps7StC76wsfjM67CtcQFRHZ1MEpP++JU1UA9Xh3QA2j993trb0LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIDjrZoaGl6J3KmjKngfVEQrrXiMB8GA1UdIwQY
MBaAFD7NU8ZkJMPzacqI7nr3atsl4YRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNjVhZGEtNGQ0YS00MDRkLTg3MDAt
YzIyNTY4MDRlOTIyLzEvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNjVhZGEtNGQ0YS00MDRkLTg3MDAtYzIyNTY4MDRlOTIy
LzEvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcg8FtWPH
oABGcQiLGH76bSK5L2mDAvGsmaogk15qC/V6pUwo36szHM9itRnwlbxs7+zyNNza
djRHPLBqom1iSKPf37gu/E6Nm7ztUI6jpf4g/xBwo4UvanWGTgfgQ67EEG7I/bto
zdMpLrSeE+1A7mRcawF0ALtS+eZc0t8YAWpBlPKkrN1PZqtCYvHSBPRtvMi7JT1D
qMvjiKva/gkYTiXkBN40jvyewRhNRgxipcUHQCmjY6aT4FGvplLuLhV0zepLQRN5
d9KHgj6sUTByi+FD+FPQPOr3dAxvafjRecBWFCS9S9WCqONWnxAAJcM80i8pU5vg
H9/JX+iULbAP4A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:35:12 2026 by rpki-client