Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: d01+S1YO6r7N0PqQ7V/Cf+BZjWbT88PMzwqyIOb7EBI=
Subject key identifier: D8:E5:BA:16:83:3A:20:88:E7:DD:F8:A2:15:DB:A7:BA:12:22:9D:B1
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 019FA7BD1657BBC0971A98AC7B7CD1AA10FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 18BE
Signing time: Tue 28 Jul 2026 08:00:14 +0000
Manifest this update: Tue 28 Jul 2026 08:00:14 +0000
Manifest next update: Wed 29 Jul 2026 08:00:14 +0000
Files and hashes: 1: J7ygwSzolnxGNbzMScyOPU5oo1U.asa (hash: uRkTFamZ6RfUST+pVlAWRJRGt5ZACmghNKXhVG0bm80=)
2: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: IfeplmpqaHOBQXi9JypQ19P+HTLJ+dOXBkiQEv2f+J4=)
3: sfEXc4wY-pXhuYqaE9QZpaIZSqY.roa (hash: njFcyKEx7yKnKI3LIuKB6v9ru42euT2yptaAKjD9IBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:16:57:bb:c0:97:1a:98:ac:7b:7c:d1:aa:10:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Jul 28 08:00:14 2026 GMT
Not After : Jul 29 08:00:14 2026 GMT
Subject: CN=d8e5ba16833a2088e7ddf8a215dba7ba12229db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:3e:95:6b:ad:c6:e8:65:f3:99:93:cb:eb:
40:64:82:78:fb:05:92:7b:82:fe:19:d7:0c:05:eb:
48:59:f9:42:b4:40:f0:11:57:7c:92:b2:99:d9:3a:
b8:fc:67:bd:06:5c:77:5b:49:d2:05:49:ba:48:01:
47:c4:7e:6f:75:ba:4a:54:a2:e0:dc:13:55:4c:54:
f2:82:36:12:f7:8b:6a:57:ea:22:f4:75:6c:e8:3e:
b6:82:2d:3b:ce:fd:af:26:45:75:ac:b8:28:d9:95:
ea:90:3e:fd:a7:01:e8:54:81:e8:3c:19:e1:c9:11:
45:5e:b3:cb:07:69:9f:7c:8f:0a:ab:4a:a5:37:bc:
2d:b3:7b:51:15:96:bb:96:85:5f:6e:0d:03:33:2b:
17:2a:3b:b9:cc:64:42:44:1a:ca:85:85:ce:25:85:
be:f7:a0:9d:fe:1d:43:8e:9f:6e:9e:6b:c2:74:f9:
f7:d4:b5:e5:4b:a8:0f:08:0d:7f:55:ae:44:6d:ef:
1d:1a:f2:c9:03:80:15:ce:d0:dc:a6:43:63:7b:16:
64:9f:c9:4f:d8:da:32:87:a2:91:2f:2b:2c:c7:a2:
27:a2:e1:0d:47:36:03:b0:f7:06:2e:9d:5b:fe:1c:
18:7f:3e:ce:a0:95:4f:1a:fb:60:26:5f:3c:c1:12:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E5:BA:16:83:3A:20:88:E7:DD:F8:A2:15:DB:A7:BA:12:22:9D:B1
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:07:ad:27:fa:18:42:d8:e2:78:45:fe:2e:49:91:2d:e3:77:
4c:4e:5b:30:2c:9c:ad:c5:0a:89:2f:b4:b2:34:20:3d:fa:90:
29:d6:29:5b:06:af:56:a4:cb:d5:eb:f3:8a:71:d6:e0:8a:83:
34:d4:11:32:9e:6a:46:51:f2:dd:0c:47:22:05:8b:41:b3:77:
ae:92:eb:f4:32:c2:ab:a4:06:8c:5a:f8:c0:7b:35:eb:47:5b:
0d:6f:bb:84:72:af:61:09:73:43:a7:07:28:7e:2e:fe:88:de:
6e:09:d1:f5:17:25:c2:c0:47:1a:d6:6d:7b:19:63:a2:43:12:
78:59:1e:d5:f0:50:f3:47:a3:6a:54:09:a7:b6:f6:55:b1:10:
43:f4:3d:a7:21:ec:3c:23:28:db:4a:63:d0:1c:f8:5e:fa:f0:
d1:df:1c:ec:b9:91:37:fb:e0:8a:27:5d:e1:5f:37:83:05:eb:
bf:eb:12:3e:cb:36:ee:a0:3d:04:0e:42:eb:42:96:d9:59:be:
cc:30:95:5d:b9:9d:aa:a4:d3:32:c6:ab:c3:ca:e5:2c:96:aa:
ae:dc:b6:0c:74:b4:55:90:b3:fc:ba:fc:5d:fc:c2:fb:86:22:
75:b1:22:aa:23:9d:29:ba:fc:4e:b1:90:37:7d:26:5f:fb:cc:
65:28:a6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:44:30 2026 by rpki-client