Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: Ga5RTfrlobb0mFhqSus8AzDovq2brfJWgZ6Z961H+7I=
Subject key identifier: 46:E8:73:F5:97:BF:E7:9E:03:AE:8F:47:91:DE:F6:CA:33:AD:09:D7
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 019CA90EC50E81D15AE46547F915CCFA1363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 1730
Signing time: Sun 01 Mar 2026 11:00:43 +0000
Manifest this update: Sun 01 Mar 2026 11:00:43 +0000
Manifest next update: Mon 02 Mar 2026 11:00:43 +0000
Files and hashes: 1: EWG2pnEixDgrHqKUr2g1EGP2zPY.asa (hash: ZdIG829wBmdAI+Aw8LWYuzyxjjwX6kLllCejRAZydCY=)
2: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: NaZp4J6P20ICkZ7systXsFAAA+b8qQQ1sxIQa8lPBTk=)
3: sfEXc4wY-pXhuYqaE9QZpaIZSqY.roa (hash: njFcyKEx7yKnKI3LIuKB6v9ru42euT2yptaAKjD9IBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:c5:0e:81:d1:5a:e4:65:47:f9:15:cc:fa:13:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Mar 1 11:00:43 2026 GMT
Not After : Mar 2 11:00:43 2026 GMT
Subject: CN=46e873f597bfe79e03ae8f4791def6ca33ad09d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:39:0a:61:da:6b:3c:92:38:6c:6a:06:8c:
b3:0c:8d:ca:98:9c:3b:4d:cb:21:3d:85:f4:6e:70:
85:e1:15:99:cf:2b:b5:b6:59:2d:6b:d1:dc:b7:37:
55:21:a0:8e:36:3e:77:b9:5c:3c:e0:38:ce:3b:6a:
0f:fe:d5:8d:ac:e0:5d:f2:57:d5:53:21:81:e5:e9:
6c:2e:50:b3:0c:aa:07:a1:58:0d:a1:81:84:0d:9f:
3b:b1:91:72:f5:35:2c:e1:17:0a:e1:ec:01:71:e6:
b3:37:f5:e2:0a:1d:ae:1a:52:ea:0e:9f:1e:3b:e6:
55:61:7b:0c:87:db:9e:d9:ff:e4:7d:fe:19:22:e3:
3c:3c:77:dd:a2:36:d8:11:9f:a8:ee:cf:9a:7c:b4:
d4:22:90:c7:05:bd:aa:5b:80:5f:c3:25:ee:64:7c:
17:1b:a4:95:d2:53:79:65:3a:df:f3:63:89:e4:53:
15:8b:86:b8:26:8f:45:0c:3a:ca:c3:c7:27:ff:8d:
80:c8:5a:11:56:17:d7:3b:ef:85:0a:9e:69:08:da:
fa:1e:da:bc:6a:69:90:67:0c:94:74:9a:c6:94:d5:
37:da:9d:a3:57:81:06:5d:7a:a7:dd:a4:3d:0d:60:
c0:b7:45:21:cc:77:c1:9d:2a:47:b3:e0:bd:39:3f:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E8:73:F5:97:BF:E7:9E:03:AE:8F:47:91:DE:F6:CA:33:AD:09:D7
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:13:a2:57:76:de:31:64:dc:8a:30:5d:b4:27:59:29:b6:e8:
30:7e:3c:11:47:07:1f:72:31:ed:c8:8e:26:73:3e:38:d8:fb:
d5:d5:4d:7c:eb:c9:2c:31:1c:0e:da:78:5e:c4:52:b3:fd:3a:
40:d3:09:75:68:79:63:23:0a:36:b3:2d:6a:59:9b:be:26:9c:
c7:d7:5e:b9:b2:e5:f4:44:23:a7:bf:23:f2:fa:4f:12:2e:e0:
db:f6:c9:3c:55:3c:41:36:46:c3:e5:79:2a:8f:18:35:82:88:
ef:ec:50:72:97:e7:ff:b6:c4:21:dd:11:89:b3:af:44:b4:a7:
8d:4a:6e:a7:24:e1:56:f5:f4:81:0e:d5:98:8a:c2:a2:54:9a:
e4:f9:62:85:8a:b8:9a:63:ee:92:f8:aa:75:9b:77:7f:65:7f:
51:1a:bd:e7:58:32:c8:b6:2d:31:f6:6e:2d:1d:cb:1c:70:25:
eb:97:e7:d6:13:a1:64:7b:2c:5a:a4:91:ac:45:2c:56:5d:3e:
f2:c1:43:b6:ca:fa:70:b8:aa:42:d4:ef:1f:88:24:86:ec:b9:
a5:88:a0:c9:70:cc:a6:fe:a4:68:d6:d5:47:c7:a3:75:b5:12:
0c:14:85:83:c0:c5:1a:8d:64:dc:4f:68:dd:60:67:11:35:9e:
10:b8:5e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:36:33 2026 by rpki-client