Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: 0r15VpYgsJdHasG6NScVOH80Mym3b/l8rRysZpQtIec=
Subject key identifier: EE:24:4C:0B:48:52:D5:66:7B:89:B0:13:DC:DB:E3:07:DC:7D:DB:70
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 019CAE35D17EF83B63AFAC2EB0837CAB5FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 0EF5
Signing time: Mon 02 Mar 2026 11:01:28 +0000
Manifest this update: Mon 02 Mar 2026 11:01:28 +0000
Manifest next update: Tue 03 Mar 2026 11:01:28 +0000
Files and hashes: 1: 4yIaOD2NMt2VBGmVwUq_OiRtg_A.roa (hash: kgy/jwMb361XAjDurvjXKgIsxESxjz3mkWg8JfDokdo=)
2: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: sTBz4nbnwDci6AuEKk7MW2AqSTTnXcImuovT/HjywNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:d1:7e:f8:3b:63:af:ac:2e:b0:83:7c:ab:5f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Mar 2 11:01:28 2026 GMT
Not After : Mar 3 11:01:28 2026 GMT
Subject: CN=ee244c0b4852d5667b89b013dcdbe307dc7ddb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:76:d5:6f:82:fe:5f:64:7c:ac:0b:0c:d6:
5c:10:fc:7b:ae:3c:0a:58:aa:29:8d:45:41:8d:1e:
81:87:78:61:45:13:b0:65:60:a9:de:34:38:74:66:
68:7e:2b:86:f0:ee:57:24:ff:7d:60:83:e6:0e:d7:
dc:db:a3:20:c6:61:3d:01:70:7f:8f:0a:71:a1:cc:
e2:8f:d7:31:35:d0:91:04:29:7b:e4:9e:2f:9b:1e:
a5:7d:7d:f1:4d:eb:83:c1:ce:a2:60:ab:ca:fc:84:
77:e3:0e:a1:c8:8a:02:dc:8f:29:68:78:18:5f:d8:
aa:ea:e7:ec:d2:ad:96:50:46:78:72:d9:80:57:37:
5f:97:ac:18:f1:aa:60:85:3a:91:7d:90:c8:62:24:
2f:76:8a:b9:00:90:b0:63:da:bf:39:4b:b8:47:87:
1b:1a:da:cf:2d:d5:8a:c1:d7:d9:f0:86:c7:a3:26:
0b:37:31:29:e8:aa:74:5e:8f:eb:2e:5a:11:28:b3:
eb:b0:d5:d1:3f:fd:b7:9d:a0:7a:24:87:18:51:dc:
00:c0:5f:a5:9d:8b:64:28:4b:f7:9a:19:42:6a:b5:
70:6c:1c:fb:28:f1:33:12:92:b4:f0:29:91:34:d5:
a8:94:64:d4:da:12:d8:28:da:61:bc:56:fb:0d:e1:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:24:4C:0B:48:52:D5:66:7B:89:B0:13:DC:DB:E3:07:DC:7D:DB:70
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f1:0d:fa:fd:78:72:ea:51:98:09:55:40:cd:d9:57:a7:8f:
c8:cb:18:84:24:d4:d0:52:95:19:c2:be:4c:f5:36:dc:eb:e5:
6a:97:c5:dd:63:dd:67:5b:ea:c4:6c:08:70:6f:52:ae:e4:1a:
99:da:ba:f1:6a:92:db:d2:bc:79:a6:14:d5:ea:d1:16:91:88:
fa:2d:b2:10:b3:2f:d8:78:73:c6:b2:45:a9:36:52:9c:d5:c5:
66:5d:51:70:ab:9e:ed:94:0e:c2:86:95:28:46:b3:aa:23:6f:
46:57:28:88:76:2d:00:35:1e:54:bc:a3:dd:bd:7e:e7:b3:0f:
09:4c:d8:a0:09:80:d4:6f:31:e1:9d:67:4e:d3:f2:68:ee:21:
52:ef:66:e3:a0:33:43:2a:b1:73:9e:97:41:0c:b6:51:ea:27:
db:d1:d9:14:20:28:cb:d7:07:66:76:38:7f:dc:24:3a:4e:fb:
72:ab:ad:78:bc:db:34:3e:a0:49:71:50:6d:33:16:ca:30:74:
03:df:7b:ad:16:32:f1:6d:b9:45:00:e7:52:7e:4c:45:43:23:
cd:a2:25:37:0f:7a:94:56:ea:52:2d:93:62:c1:f5:60:26:0d:
d6:f9:cb:e3:7c:d4:9c:1f:ee:47:f2:62:ce:2c:88:fa:f2:c9:
d2:66:cb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:14:06 2026 by rpki-client