Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: Ue1ZRVFZkFJe9ThlGNGl3ZRnD0oE7d70r38I3vOIsT4=
Subject key identifier: 78:F7:26:60:99:5E:55:1C:D2:F4:F5:58:AE:21:16:3E:B2:10:02:C1
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 01A0C77C8A67D9C73F28D3B11A6D62EC4ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 1953
Signing time: Tue 22 Sep 2026 05:00:22 +0000
Manifest this update: Tue 22 Sep 2026 05:00:22 +0000
Manifest next update: Wed 23 Sep 2026 05:00:22 +0000
Files and hashes: 1: J7ygwSzolnxGNbzMScyOPU5oo1U.asa (hash: uRkTFamZ6RfUST+pVlAWRJRGt5ZACmghNKXhVG0bm80=)
2: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: R1C6VDANmcrc4OtEn9JJIAqRoYnO1MXVl8XjW9jXjek=)
3: sfEXc4wY-pXhuYqaE9QZpaIZSqY.roa (hash: njFcyKEx7yKnKI3LIuKB6v9ru42euT2yptaAKjD9IBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:8a:67:d9:c7:3f:28:d3:b1:1a:6d:62:ec:4a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Sep 22 05:00:22 2026 GMT
Not After : Sep 23 05:00:22 2026 GMT
Subject: CN=78f72660995e551cd2f4f558ae21163eb21002c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:93:8b:dd:c8:c5:62:9b:f6:ba:34:45:66:12:
39:2c:11:17:d2:1f:22:00:33:d3:fe:63:18:20:45:
14:18:e1:eb:d8:d0:5a:99:5a:ce:22:13:61:00:4f:
f1:50:10:aa:03:c0:e1:75:a4:cd:8e:6a:10:bb:43:
3d:3b:fa:3a:36:fc:01:fd:9d:a3:9f:a0:bb:cc:5c:
31:63:92:62:17:84:a6:18:ee:fa:18:2d:61:5f:7e:
4d:4a:26:e3:4d:48:44:6f:33:31:eb:89:6d:05:97:
4d:05:bc:96:a6:91:d2:54:0b:9c:97:38:b7:67:ab:
e1:82:13:70:79:00:af:5e:9c:52:57:87:f0:83:c1:
13:80:fc:b7:6a:e7:e5:33:ce:48:67:cd:f9:d5:35:
41:5f:34:1c:33:32:bf:da:b6:dc:a4:71:d6:ea:5a:
44:83:76:94:c2:ec:4b:1c:ab:91:5d:43:30:03:2d:
8d:cc:35:61:de:61:70:62:44:59:d9:7f:e0:f3:e8:
18:a2:bf:06:d0:34:02:39:9f:8b:f1:df:ff:e9:a4:
62:ec:52:72:81:21:8f:d7:56:b5:1a:56:d5:e9:be:
e9:9d:54:95:95:f4:73:bc:6f:07:5c:aa:40:10:a5:
97:0a:70:91:db:31:ef:7b:2d:cd:ca:74:d0:f9:26:
fb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F7:26:60:99:5E:55:1C:D2:F4:F5:58:AE:21:16:3E:B2:10:02:C1
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9d:c1:51:e3:3d:4a:e8:da:b8:a0:ef:ed:9e:c1:83:93:36:
10:05:57:f0:82:32:60:9a:e4:06:8c:c8:75:62:b6:90:5c:c9:
8c:ce:62:50:b6:a5:e6:5a:b7:e7:4d:3f:01:6c:e5:02:f9:82:
39:19:02:7a:0f:cd:b8:49:fb:9c:0f:d2:11:ad:75:70:c0:0c:
f4:2c:70:ab:7f:94:59:24:42:2d:6c:13:f2:d7:77:95:2a:10:
d8:6b:5b:7d:a6:1b:a6:7f:bd:2a:2f:29:7b:85:fd:29:59:c8:
0d:d1:c0:07:55:08:7d:0f:2a:17:e4:cc:93:46:c0:f7:fc:1f:
21:4c:72:8f:fe:b1:c2:45:14:fa:b1:e7:03:71:3c:d6:35:27:
40:c6:ec:b9:ed:13:62:a3:e1:d0:95:67:15:ee:8d:ce:13:0c:
f1:4d:7b:a0:ce:8a:04:56:84:2c:cf:94:31:0b:8e:6a:31:66:
08:9d:1c:06:8a:46:48:31:97:ba:b6:ac:00:f1:71:01:c8:7d:
d7:74:4c:75:c4:6b:22:b3:c7:ae:cb:06:38:fb:13:cc:e0:98:
2c:1c:b2:5c:fb:51:1d:f3:c7:8c:19:9a:b6:17:4d:35:68:9f:
fa:ce:f6:3b:1d:92:19:63:1f:49:86:e4:33:24:0a:2a:e7:8a:
e6:d0:ec:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:28:06 2026 by rpki-client