Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: hn17xXc+al9zespeUMrkcTZ491OtUPqb3j1FrvoV0+w=
Subject key identifier: 9E:87:56:A9:54:31:2D:45:7F:74:77:AD:F3:0D:B7:BF:9B:86:26:96
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 019D988668CD7D4CEBF321B5DA6343F6EC3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 17AC
Signing time: Thu 16 Apr 2026 23:00:38 +0000
Manifest this update: Thu 16 Apr 2026 23:00:38 +0000
Manifest next update: Fri 17 Apr 2026 23:00:38 +0000
Files and hashes: 1: EWG2pnEixDgrHqKUr2g1EGP2zPY.asa (hash: ZdIG829wBmdAI+Aw8LWYuzyxjjwX6kLllCejRAZydCY=)
2: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: EV42ApA7YAlUWhwW6kKFbOqBrMe/R4eV71x1OBIt0Ec=)
3: sfEXc4wY-pXhuYqaE9QZpaIZSqY.roa (hash: njFcyKEx7yKnKI3LIuKB6v9ru42euT2yptaAKjD9IBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:68:cd:7d:4c:eb:f3:21:b5:da:63:43:f6:ec:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Apr 16 23:00:38 2026 GMT
Not After : Apr 17 23:00:38 2026 GMT
Subject: CN=9e8756a954312d457f7477adf30db7bf9b862696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:61:18:b8:b0:3f:fe:1e:f1:40:90:b6:ef:65:
c2:da:2b:10:08:10:b2:bd:6c:79:25:d9:44:ff:43:
25:72:9a:22:7d:1d:5b:38:81:f9:02:40:79:98:15:
8c:b7:44:9a:dd:54:9d:30:50:c1:4a:01:e0:e9:ea:
fc:28:91:5f:e7:b1:fd:13:c2:cb:4b:99:7f:b1:85:
d8:fd:d3:1b:d4:cb:6a:f9:71:b1:25:ae:a4:1a:89:
78:be:63:ea:68:67:ae:de:ba:10:69:69:e0:af:0a:
61:d3:e9:9b:4a:23:e0:ec:1a:c3:d3:f9:32:2d:40:
83:a8:33:82:f6:50:d3:c7:ed:3f:b6:df:40:bc:ac:
19:2b:16:d4:91:c4:e7:e6:62:51:da:34:14:94:bd:
7a:c3:dc:54:f8:bc:90:73:ad:4c:6c:b8:25:11:0c:
f9:80:9e:13:44:3f:db:41:3f:68:0d:48:d6:53:16:
05:7f:44:87:93:d7:02:59:5b:2b:81:3e:54:4f:da:
d4:ab:cd:30:3c:8f:98:26:04:9d:b7:8c:cf:82:89:
6f:05:8e:59:f3:0d:74:6d:38:d8:83:7d:59:e5:99:
b6:75:52:5a:9d:53:6e:a9:5c:c6:00:08:1a:b3:14:
a6:93:67:7e:bd:09:34:cb:cf:e5:f0:a9:68:13:47:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:87:56:A9:54:31:2D:45:7F:74:77:AD:F3:0D:B7:BF:9B:86:26:96
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7c:6a:70:65:60:49:20:db:c3:2c:9a:70:14:cb:12:50:fc:
58:1d:09:cf:c6:04:25:ea:37:90:e2:f6:76:5e:ae:f7:58:cc:
a5:91:df:d1:01:fb:2b:ed:9a:60:db:31:04:20:07:7c:b4:36:
ed:f5:03:98:91:03:04:d6:1e:2f:3f:e1:b0:15:28:1f:72:e5:
1e:17:1a:1b:bb:69:c9:30:96:4d:4b:0e:6b:1a:eb:36:8f:44:
a0:e3:c2:2c:b7:25:69:f6:4d:76:5c:24:c2:46:aa:db:94:dc:
c3:cb:26:bd:c8:7d:c0:23:9b:47:79:95:f9:f5:ec:36:7e:fb:
3f:e8:c1:91:ef:16:25:8f:88:b4:2c:8a:e6:1c:e8:c0:98:bc:
e1:86:83:08:15:27:34:bc:83:05:e8:bc:17:c7:0e:0b:cf:55:
84:cc:19:5f:11:b7:80:29:2f:59:ca:71:12:c5:52:ae:37:11:
59:ed:ab:6e:f3:45:8e:42:d2:4d:2f:28:6a:9e:80:7b:20:6b:
4b:66:f0:6e:de:f3:45:95:cb:6e:b7:8a:50:f2:cb:d9:e7:71:
91:56:03:2a:16:aa:d8:74:4e:80:ae:45:a0:cf:9a:57:d7:ee:
df:a0:82:58:1e:a0:32:fa:1c:4f:e8:0f:e8:db:fa:e2:89:88:
b7:20:f1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:27:57 2026 by rpki-client