Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: 8d+PYPosWWViOBZYwYujkfhLikLfDshcDT8CPqqyUrQ=
Subject key identifier: F1:7A:F0:15:40:CF:A8:52:16:76:8A:0D:91:20:89:40:C7:FF:0C:95
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 019EBE1109B461F4C46629EFD608E4EEE71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 1844
Signing time: Fri 12 Jun 2026 23:00:47 +0000
Manifest this update: Fri 12 Jun 2026 23:00:47 +0000
Manifest next update: Sat 13 Jun 2026 23:00:47 +0000
Files and hashes: 1: EWG2pnEixDgrHqKUr2g1EGP2zPY.asa (hash: ZdIG829wBmdAI+Aw8LWYuzyxjjwX6kLllCejRAZydCY=)
2: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: Mj0K8tGq29KAvzZwpluTXnQcmJSj59RdYIlyx/EUYeI=)
3: sfEXc4wY-pXhuYqaE9QZpaIZSqY.roa (hash: njFcyKEx7yKnKI3LIuKB6v9ru42euT2yptaAKjD9IBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:09:b4:61:f4:c4:66:29:ef:d6:08:e4:ee:e7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Jun 12 23:00:47 2026 GMT
Not After : Jun 13 23:00:47 2026 GMT
Subject: CN=f17af01540cfa85216768a0d91208940c7ff0c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:af:70:2e:b5:6f:1e:b0:a7:9d:63:6e:d9:29:
24:f0:f6:95:5a:c4:1f:3d:9a:29:2e:10:c7:a4:b8:
1a:8d:fe:ad:96:04:ef:66:c8:9d:b8:0f:11:ed:63:
44:2c:56:cc:1d:1c:77:97:ca:a2:70:03:2b:f9:72:
9a:7c:a7:4e:6f:a7:75:44:4c:c5:a8:4f:2e:63:51:
ac:2b:f7:50:64:7b:01:9a:a3:73:1b:07:81:31:66:
f8:4a:3c:72:9e:a3:7f:d1:f3:81:c4:e4:67:a1:07:
29:d1:04:37:49:03:2c:cf:86:d3:e7:8b:4b:aa:58:
92:e3:ed:41:f5:42:04:d2:d1:9c:ec:88:74:45:a7:
80:aa:14:ba:79:3a:25:df:7a:37:53:1f:d7:f7:0d:
95:ef:8f:86:eb:ca:a7:05:33:5d:54:63:10:1f:fc:
c1:05:72:bd:10:ec:72:28:ea:55:ea:7e:92:33:2c:
b8:72:0f:d9:32:d4:6c:90:50:33:44:80:67:64:cb:
6e:3c:68:b7:8c:1c:2d:b8:48:73:22:e7:4f:c4:03:
89:f1:09:9c:f7:33:ee:92:9d:ef:da:ac:0b:39:78:
c3:f4:df:3f:01:a9:dc:74:c9:ac:8c:7a:c0:9a:74:
54:7e:90:32:91:e3:c3:a6:2e:39:50:21:f2:19:47:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7A:F0:15:40:CF:A8:52:16:76:8A:0D:91:20:89:40:C7:FF:0C:95
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ee:00:af:ed:38:c4:95:5f:32:42:7d:db:ee:e9:41:13:4e:
4b:19:75:b8:32:e2:4f:c0:13:7f:5d:52:12:03:3b:9b:8a:d3:
cd:f7:3c:81:d9:a6:02:72:ef:a7:b3:42:49:e3:b4:21:b1:fc:
23:5f:5f:0f:51:99:3a:c1:91:e5:3d:bc:87:43:d0:49:6c:59:
2c:7f:f9:bb:d3:f4:0e:56:f1:e7:85:86:31:a7:dc:26:b3:7b:
5e:5d:a9:49:49:1e:19:74:26:ac:69:34:d5:9f:98:be:1f:75:
00:1a:67:91:d6:7c:1d:b6:44:3c:0d:f2:38:33:cf:aa:70:34:
d0:20:23:9a:4e:ec:51:80:d8:38:56:a4:0b:f2:fe:b6:e5:f8:
12:b5:b2:fb:69:23:ae:a7:b2:9d:6b:6a:11:2e:31:89:88:a7:
fa:f7:80:fb:ea:15:96:e8:da:34:6f:9c:43:33:9a:00:3f:9d:
80:a2:45:51:e0:8a:2a:10:64:d4:da:9d:4b:4c:e7:41:e9:59:
1a:1d:28:36:a6:7e:3f:60:3a:cc:2e:5b:fa:1a:44:d3:ec:86:
55:57:05:11:04:1f:2b:d7:35:2b:a1:78:d7:5d:54:e5:3a:06:
d1:f1:7d:16:af:f9:a9:b5:a9:20:71:04:e0:cb:dd:de:9e:97:
3f:6d:42:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+EQm0YfTEZinv1gjk7ucdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzE0Y2M2MDdkMWYwMjgzODQ4ZjlhODE1ZGJlNjc1ZTIz
MzlhN2UwHhcNMjYwNjEyMjMwMDQ3WhcNMjYwNjEzMjMwMDQ3WjAzMTEwLwYDVQQD
EyhmMTdhZjAxNTQwY2ZhODUyMTY3NjhhMGQ5MTIwODk0MGM3ZmYwYzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a9wLrVvHrCnnWNu2Skk8PaVWsQf
PZopLhDHpLgajf6tlgTvZsiduA8R7WNELFbMHRx3l8qicAMr+XKafKdOb6d1REzF
qE8uY1GsK/dQZHsBmqNzGweBMWb4SjxynqN/0fOBxORnoQcp0QQ3SQMsz4bT54tL
qliS4+1B9UIE0tGc7Ih0RaeAqhS6eTol33o3Ux/X9w2V74+G68qnBTNdVGMQH/zB
BXK9EOxyKOpV6n6SMyy4cg/ZMtRskFAzRIBnZMtuPGi3jBwtuEhzIudPxAOJ8Qmc
9zPukp3v2qwLOXjD9N8/AancdMmsjHrAmnRUfpAykePDpi45UCHyGUev9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPF68BVAz6hSFnaKDZEgiUDH/wyVMB8GA1UdIwQY
MBaAFD7BTMYH0fAoOEj5qBXb5nXiM5p+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNGTXhnZlI4Q2c0U1Btb0Zkdm1kZUl6bW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83NTRiZDYtZmQ2YS00ZGM2LWE5Mjct
NzY5YTBjNWVlYTBkLzEvUHNGTXhnZlI4Q2c0U1Btb0Zkdm1kZUl6bW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83NTRiZDYtZmQ2YS00ZGM2LWE5MjctNzY5YTBjNWVlYTBk
LzEvUHNGTXhnZlI4Q2c0U1Btb0Zkdm1kZUl6bW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABO4Ar+04
xJVfMkJ92+7pQRNOSxl1uDLiT8ATf11SEgM7m4rTzfc8gdmmAnLvp7NCSeO0IbH8
I19fD1GZOsGR5T28h0PQSWxZLH/5u9P0Dlbx54WGMafcJrN7Xl2pSUkeGXQmrGk0
1Z+Yvh91ABpnkdZ8HbZEPA3yODPPqnA00CAjmk7sUYDYOFakC/L+tuX4ErWy+2kj
rqeynWtqES4xiYin+veA++oVlujaNG+cQzOaAD+dgKJFUeCKKhBk1NqdS0znQelZ
Gh0oNqZ+P2A6zC5b+hpE0+yGVVcFEQQfK9c1K6F4111U5ToG0fF9Fq/5qbWpIHEE
4Mvd3p6XP21Crw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:27:28 2026 by rpki-client