Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: 36e51HHodYRhGWuVuTwM0+RMFzCYCxVASOZhuxr6dP0=
Subject key identifier: 5C:AB:BF:D4:37:07:D2:7F:EF:FB:ED:58:A8:6A:C9:86:FD:E2:22:8F
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 019CB02416AFE78B11F39E187A6C740659A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 0EF6
Signing time: Mon 02 Mar 2026 20:01:20 +0000
Manifest this update: Mon 02 Mar 2026 20:01:20 +0000
Manifest next update: Tue 03 Mar 2026 20:01:20 +0000
Files and hashes: 1: 4yIaOD2NMt2VBGmVwUq_OiRtg_A.roa (hash: kgy/jwMb361XAjDurvjXKgIsxESxjz3mkWg8JfDokdo=)
2: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: sXuG5sC+Q+JRoPNG9ZZnk+uZ/1GIMaUefbQ+qZBepzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:24:16:af:e7:8b:11:f3:9e:18:7a:6c:74:06:59:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Mar 2 20:01:20 2026 GMT
Not After : Mar 3 20:01:20 2026 GMT
Subject: CN=5cabbfd43707d27feffbed58a86ac986fde2228f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:83:ec:64:dc:f5:6a:74:18:a0:51:d2:dc:5e:
16:cb:60:e8:0c:8d:f4:6f:d0:4a:04:2b:ca:44:2b:
86:72:74:5f:e7:a1:c4:ba:5e:d2:21:b9:5d:f5:a7:
89:61:e3:57:bc:2b:58:4f:69:0d:37:7e:2b:86:9b:
a8:6e:1d:61:68:71:b4:c4:de:50:b3:10:4f:fe:bd:
b5:a2:f0:c7:b7:7d:6c:c5:45:7f:b4:a8:af:e3:11:
d0:0e:ab:e2:6d:79:35:78:cd:7f:94:ef:57:42:29:
0d:5b:c0:20:9a:1a:92:a3:58:4c:75:ba:d6:96:db:
5b:52:e5:66:49:13:6c:17:85:ec:d0:37:27:10:8a:
be:6a:09:4e:e3:06:e5:92:f2:77:8f:30:21:9c:ce:
f3:18:5d:f7:40:c2:51:77:0e:93:78:ad:3d:f2:b9:
3f:1b:2b:83:fd:2d:0c:41:71:33:1a:b9:44:7c:85:
74:d3:02:0c:e6:a5:76:cf:64:25:29:82:65:31:eb:
d8:a7:df:4f:f7:1f:9f:d2:1b:51:74:66:06:b5:64:
6d:8d:10:98:a1:6e:53:f0:5c:79:40:98:ac:22:ef:
c7:1c:28:49:b7:65:ec:95:21:e9:8b:38:c1:9a:27:
76:cb:5b:2d:7a:00:65:c0:cc:c2:7e:9e:ed:46:3d:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AB:BF:D4:37:07:D2:7F:EF:FB:ED:58:A8:6A:C9:86:FD:E2:22:8F
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6d:07:ad:8e:e2:64:5e:64:b4:1e:29:c8:34:8f:15:77:2b:
f6:b4:37:af:dc:35:51:d8:c1:fc:f9:84:2a:de:9a:ff:cc:49:
bd:86:b4:3e:79:6f:27:c4:bc:b5:f5:43:a8:17:6f:b3:70:ae:
4b:f3:c8:a5:5b:43:69:46:b1:1b:0f:9c:0c:9e:e5:c9:7c:77:
b8:f3:31:f2:e6:c5:0a:20:98:be:40:0e:80:05:08:70:ba:c4:
e1:b6:85:47:ae:e9:78:68:0f:d9:d7:f7:f9:c0:96:70:17:81:
0c:b9:d8:25:01:35:7b:38:ce:8f:59:4d:8b:65:11:1f:36:01:
4b:73:bc:69:46:88:ee:7e:67:ae:c7:d3:66:e0:27:87:46:02:
a4:b0:eb:9c:9b:ef:d5:5b:64:ef:18:26:66:57:08:fe:da:1b:
da:42:5d:0d:21:5e:ce:45:7d:5c:04:27:60:2c:3b:14:d6:94:
45:b2:e7:98:0b:df:6b:74:1b:e8:7c:89:53:06:1d:2e:43:3e:
3c:36:dc:13:67:ec:16:e0:20:4e:c2:9f:b2:de:6b:f3:73:69:
4c:ef:08:81:3f:44:bd:da:d9:4b:59:53:66:26:b8:97:5d:51:
39:76:15:90:54:3e:65:2c:4d:2f:a9:d6:9e:27:e8:dc:b7:48:
2e:39:ed:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZywJBav54sR854Yemx0BlmiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzdkMmJmYzNmYTc4ZTcxMDBhMWI4OTM1OTA1YWZmN2E0
OTZiYzkwHhcNMjYwMzAyMjAwMTIwWhcNMjYwMzAzMjAwMTIwWjAzMTEwLwYDVQQD
Eyg1Y2FiYmZkNDM3MDdkMjdmZWZmYmVkNThhODZhYzk4NmZkZTIyMjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44PsZNz1anQYoFHS3F4Wy2DoDI30
b9BKBCvKRCuGcnRf56HEul7SIbld9aeJYeNXvCtYT2kNN34rhpuobh1haHG0xN5Q
sxBP/r21ovDHt31sxUV/tKiv4xHQDqvibXk1eM1/lO9XQikNW8AgmhqSo1hMdbrW
lttbUuVmSRNsF4Xs0DcnEIq+aglO4wblkvJ3jzAhnM7zGF33QMJRdw6TeK098rk/
GyuD/S0MQXEzGrlEfIV00wIM5qV2z2QlKYJlMevYp99P9x+f0htRdGYGtWRtjRCY
oW5T8Fx5QJisIu/HHChJt2XslSHpizjBmid2y1stegBlwMzCfp7tRj3jWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyrv9Q3B9J/7/vtWKhqyYb94iKPMB8GA1UdIwQY
MBaAFD7H0r/D+njnEAobiTWQWv96SWvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOWJiNzItZjZhZi00YTY3LTljNDQt
YmE4ODExMjJjYTYzLzEvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zOWJiNzItZjZhZi00YTY3LTljNDQtYmE4ODExMjJjYTYz
LzEvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj20HrY7i
ZF5ktB4pyDSPFXcr9rQ3r9w1UdjB/PmEKt6a/8xJvYa0PnlvJ8S8tfVDqBdvs3Cu
S/PIpVtDaUaxGw+cDJ7lyXx3uPMx8ubFCiCYvkAOgAUIcLrE4baFR67peGgP2df3
+cCWcBeBDLnYJQE1ezjOj1lNi2URHzYBS3O8aUaI7n5nrsfTZuAnh0YCpLDrnJvv
1Vtk7xgmZlcI/tob2kJdDSFezkV9XAQnYCw7FNaURbLnmAvfa3Qb6HyJUwYdLkM+
PDbcE2fsFuAgTsKfst5r83NpTO8IgT9EvdrZS1lTZia4l11ROXYVkFQ+ZSxNL6nW
nifo3LdILjntAQ==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:08 2026 by rpki-client