Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: +HeATEnXQo8Pbc2XFA9Pfj/B0HQ6CvROny0qCNjbHqE=
Subject key identifier: BD:FC:79:0A:6C:71:40:8B:C0:DC:22:D5:37:50:9A:8D:41:60:7C:FE
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 01A12D32DC678A2769039C941DADBBB2C8CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 1149
Signing time: Sun 11 Oct 2026 23:01:10 +0000
Manifest this update: Sun 11 Oct 2026 23:01:10 +0000
Manifest next update: Mon 12 Oct 2026 23:01:10 +0000
Files and hashes: 1: 4yIaOD2NMt2VBGmVwUq_OiRtg_A.roa (hash: kgy/jwMb361XAjDurvjXKgIsxESxjz3mkWg8JfDokdo=)
2: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: BitTdrj55Zjk3/xaa7fLw5i80WlUDEr8/zWq9cPOTYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:32:dc:67:8a:27:69:03:9c:94:1d:ad:bb:b2:c8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Oct 11 23:01:10 2026 GMT
Not After : Oct 12 23:01:10 2026 GMT
Subject: CN=bdfc790a6c71408bc0dc22d537509a8d41607cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:09:64:a3:ef:55:f2:09:eb:3f:e8:65:6d:
bd:d3:7e:82:01:8f:ac:ce:5a:ae:74:6a:0d:b7:4d:
ee:2c:8a:af:a4:ba:7e:77:85:e3:ac:4d:0f:2c:6b:
a9:8b:9c:4c:d9:f0:fd:28:75:9c:8b:a6:1e:01:58:
34:5d:04:5c:4e:7c:15:71:86:e5:2e:fe:6c:35:26:
5a:99:ee:42:96:6c:76:a1:7a:97:95:bf:f5:06:99:
bd:d9:0e:8a:8f:09:d6:6e:f8:eb:51:85:a4:41:93:
b5:2e:61:e8:a3:6b:0c:4c:62:38:f7:32:04:95:9a:
c0:b6:ea:9e:47:8c:df:68:30:4c:ec:ef:0d:1c:7a:
04:08:c8:b4:2e:f9:31:bc:f1:e1:40:7f:52:2b:6f:
00:9e:13:8b:bb:9b:d0:48:92:8b:f1:18:6a:f9:74:
0d:99:f7:7b:bc:35:17:1f:c4:27:8e:42:32:d7:81:
2b:34:49:3e:53:da:f4:57:37:fc:af:64:eb:9f:92:
36:7d:05:fc:9e:1a:e8:7e:49:cd:1a:ec:d8:5f:af:
8a:e9:c4:0d:58:34:a8:83:14:91:6a:cc:8e:cc:cc:
ba:68:e6:0a:dc:89:c8:33:c7:4b:51:20:13:96:d3:
8d:a4:77:82:0e:d1:d8:60:de:ca:a0:e5:06:66:d0:
88:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FC:79:0A:6C:71:40:8B:C0:DC:22:D5:37:50:9A:8D:41:60:7C:FE
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e0:df:3a:1a:86:7c:3d:f5:03:dd:d1:1f:46:01:31:79:27:
d2:a9:fc:d3:8d:b9:eb:b6:a7:17:2a:99:d4:26:1c:39:94:4e:
d8:6b:3e:7f:17:db:24:88:ed:40:b8:8a:72:06:a3:98:eb:71:
23:08:8e:4a:dc:69:3f:7b:57:d5:1a:63:4c:6e:d3:07:4b:50:
13:59:fe:7f:bf:39:26:06:c7:93:d2:95:82:a6:dc:74:81:81:
27:7e:e0:d4:3e:b0:4b:34:45:42:9e:f0:a2:08:fe:86:b7:2b:
59:77:88:a7:8c:d5:81:a2:04:3a:8e:c0:49:18:5e:45:7c:00:
32:05:82:b5:54:f5:3b:a4:24:e4:2d:de:a0:bc:70:32:b4:18:
4a:f2:84:fd:ad:95:4b:7e:d5:55:3e:79:e1:fa:4b:c5:99:fb:
68:8b:5f:c7:9e:7c:20:b2:85:2e:0a:80:30:82:8a:24:c5:19:
22:fa:ce:21:2e:89:9e:ef:b3:e7:ac:df:79:f6:70:da:7b:94:
27:f0:da:59:94:f1:cd:92:fe:ba:e4:d2:a6:77:7d:1a:81:3f:
73:7f:93:1b:b6:c9:da:a6:0f:53:89:22:ff:f8:15:9d:32:07:
12:0b:e0:c2:af:fb:f7:c3:7e:f2:b2:7b:56:0c:a8:7a:2e:0b:
9d:a4:45:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:12:02 2026 by rpki-client