Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: pLODXZzZTfYMxyQ1JGb59b+bQ9Ux849WluzFl44AU+M=
Subject key identifier: F8:8F:58:4C:B2:16:71:DB:34:E2:43:9C:F2:69:77:EA:F4:F8:8F:78
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 019D9A074DFBB5E04B9B85707D3A0D830C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 128A
Signing time: Fri 17 Apr 2026 06:01:03 +0000
Manifest this update: Fri 17 Apr 2026 06:01:03 +0000
Manifest next update: Sat 18 Apr 2026 06:01:03 +0000
Files and hashes: 1: LDms8nxe60K6COjjp_csNfhmghs.roa (hash: Q5tvWtDVNBkz/BRp4dl8220S6HSORZZf3f/jyOpji8U=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: hAOcTqlBKcdt0CdPQN+byvu4JfFuQPKPMJzVAA/IjjA=)
3: T6VYQnhnQYETwVj8BZYLRwwLS3U.roa (hash: C4QUjsV9O/nqAXRjoFy9pa8X3S9h9F1PXPJew5ITvec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:4d:fb:b5:e0:4b:9b:85:70:7d:3a:0d:83:0c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Apr 17 06:01:03 2026 GMT
Not After : Apr 18 06:01:03 2026 GMT
Subject: CN=f88f584cb21671db34e2439cf26977eaf4f88f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:29:16:7a:09:23:d7:95:2e:e6:2a:58:e7:a4:
0a:27:25:04:ca:3c:a1:67:7f:3c:8c:df:81:3c:50:
42:64:0a:5f:f3:3b:84:94:8c:7b:4d:26:7f:de:a5:
db:60:6a:51:4b:c0:98:09:5c:f0:ba:ec:9f:16:ae:
e6:d8:6d:eb:48:ec:c7:6c:24:47:b3:d2:21:8b:9b:
8b:37:f1:9d:82:a1:03:e8:e8:e8:19:05:64:2d:69:
cb:6c:6b:86:d9:39:d7:0f:34:36:03:95:68:ab:ba:
ca:94:8e:f5:69:4b:8b:3a:11:51:d4:ec:fa:da:35:
42:2c:3d:07:ed:da:72:8b:df:c2:f5:df:25:62:b9:
03:27:77:12:b0:ea:8f:33:df:0c:09:0c:7b:8d:58:
d1:2b:4f:05:8b:86:ed:27:06:ef:13:48:a5:b1:7e:
f7:17:e6:c0:5c:2c:81:1a:a2:dd:57:73:e8:fc:c7:
85:05:80:14:00:10:41:81:d6:5f:99:62:c8:be:46:
a9:5f:43:75:87:f4:7f:d9:62:e3:71:23:c0:d3:cb:
c0:51:fa:24:19:cf:bf:47:98:f7:f9:66:12:1c:9e:
6f:c5:54:0f:03:b3:d5:ac:79:8b:e6:61:e0:c6:39:
c6:6c:4f:f6:d2:23:25:5f:85:db:3f:fd:24:36:97:
b5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8F:58:4C:B2:16:71:DB:34:E2:43:9C:F2:69:77:EA:F4:F8:8F:78
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:27:37:8e:5e:23:fc:2f:4a:a8:08:fc:68:57:ef:c4:21:7c:
3a:dc:ce:09:50:e9:11:07:89:23:3b:5a:43:3a:24:d0:08:ca:
73:a3:d5:01:15:70:1a:52:76:b3:bf:2b:08:3d:92:ea:da:2e:
df:12:24:8f:c6:28:67:23:c2:c7:c7:ee:3d:ce:23:93:5a:91:
cf:1a:e7:1c:89:d3:77:b2:a5:85:fa:a4:5b:34:0a:67:96:31:
1b:b4:34:25:ab:6f:0b:db:1a:60:3a:62:7f:47:d6:a7:48:9a:
66:f1:1f:8e:77:b2:4b:39:a9:dc:37:3c:74:cf:04:4a:7b:e4:
7f:bb:a9:da:d7:70:4a:8e:2d:7e:c4:2e:64:16:d9:26:0c:e4:
dc:27:65:de:ec:31:01:6b:47:bc:44:e6:09:bd:22:fa:64:37:
f9:5a:7b:bd:1b:5c:de:57:5d:e3:a3:90:5e:f6:7d:75:e2:4d:
8c:b4:44:44:d3:5c:f2:05:87:28:aa:84:f0:db:a9:5e:d0:8c:
8e:d5:04:6c:2d:0b:e2:11:94:42:8b:8f:a2:0e:67:cb:69:67:
ce:28:94:6b:6e:d9:e5:39:c3:56:11:72:ee:c6:11:8e:e2:6d:
08:2a:01:25:d9:ff:ee:34:28:d8:26:08:c2:c0:4b:74:67:a5:
8f:8e:ef:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:09:21 2026 by rpki-client