Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: 98Ky8CUL5O80ILtQTzz1Vkx24yA2uI/R+sUeEQHT048=
Subject key identifier: DB:D8:8C:60:49:BA:64:E4:3E:D2:1F:2C:77:84:C0:29:A5:F5:5C:46
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 019EC337684B0E14601ADF5C437E637A4D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 1009
Signing time: Sat 13 Jun 2026 23:00:48 +0000
Manifest this update: Sat 13 Jun 2026 23:00:48 +0000
Manifest next update: Sun 14 Jun 2026 23:00:48 +0000
Files and hashes: 1: 4yIaOD2NMt2VBGmVwUq_OiRtg_A.roa (hash: kgy/jwMb361XAjDurvjXKgIsxESxjz3mkWg8JfDokdo=)
2: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: E+5GSxBWa9E0AGpFP30+Z6HWX1grWFlLbVr+cOZp3xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:68:4b:0e:14:60:1a:df:5c:43:7e:63:7a:4d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Jun 13 23:00:48 2026 GMT
Not After : Jun 14 23:00:48 2026 GMT
Subject: CN=dbd88c6049ba64e43ed21f2c7784c029a5f55c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:16:1c:8c:54:9a:d1:7d:54:a0:8f:51:24:
48:fe:23:de:df:dd:fa:d6:89:e7:ee:4c:35:14:c6:
72:2f:17:c4:5a:d6:0e:c8:55:15:7e:ad:50:c1:1a:
d1:59:c0:d8:e1:8d:fa:c5:14:ac:57:f5:4d:8d:50:
7e:45:91:6f:e9:da:7d:77:14:72:ed:8d:0d:40:a6:
5f:b1:3d:6a:c2:e4:a7:88:77:5a:55:8b:d1:90:53:
73:81:3d:98:29:38:14:6b:a7:3d:d6:22:bd:6d:90:
f5:93:40:09:f9:3e:fb:c2:98:14:e1:48:66:4d:f8:
c9:b8:aa:da:e6:43:a7:2c:05:32:51:2d:e1:80:e4:
d3:0f:b8:cc:3c:bd:99:35:08:c4:3d:40:8a:78:1a:
06:b5:16:4e:44:4e:d8:b2:f7:27:75:7a:b5:e8:aa:
38:1f:0a:11:9a:58:fc:6b:b2:eb:a0:27:9b:c6:60:
4d:18:77:7b:ec:61:0e:ab:bd:04:57:65:a1:4a:ac:
7e:52:28:03:dd:61:d0:01:8f:fb:a3:8a:7d:32:b8:
cc:b2:e9:2a:73:5c:59:79:19:9a:84:37:15:f9:53:
d0:aa:3f:f9:75:8d:4a:ef:1b:d0:ad:74:f1:92:f2:
de:8a:3d:45:8a:7f:d0:b5:0b:b2:b2:1a:6f:82:88:
13:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D8:8C:60:49:BA:64:E4:3E:D2:1F:2C:77:84:C0:29:A5:F5:5C:46
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d4:42:04:a2:98:42:26:f3:0c:5d:b8:bd:7f:28:20:79:a0:
7b:98:db:0e:82:06:42:d9:1c:98:c3:51:d9:ef:55:4d:ea:43:
d5:9a:81:f9:c1:d8:20:e9:aa:c7:c2:e8:bf:06:f6:e4:07:0b:
de:92:66:8f:28:ea:56:e5:25:93:c7:a3:18:00:55:5f:c4:d3:
08:57:88:14:a9:12:4b:04:17:4b:eb:1e:18:5c:b6:e6:e5:08:
93:36:67:b7:44:92:e3:61:ef:cf:a3:eb:4f:2b:ef:5e:12:69:
d5:00:02:dc:b1:d0:40:d9:b7:e2:25:27:4a:d9:e6:3b:b5:c0:
8e:79:dc:73:89:b4:bb:0f:c8:24:fe:89:da:50:36:25:ef:16:
0e:68:97:ff:3a:1a:7f:40:50:ce:6a:b6:2d:ca:75:1d:58:04:
9c:fd:89:39:0a:45:aa:ed:c2:3f:db:eb:c3:0e:62:89:f6:4c:
70:2f:29:2c:24:60:26:65:e3:3f:00:cb:46:74:46:77:38:f9:
2a:91:96:0e:1e:02:aa:3c:fb:af:a5:f2:d9:f7:b7:9a:84:31:
bf:e4:79:1c:a3:8d:35:9d:9e:21:18:0c:fc:8d:92:23:c1:ef:
20:16:17:e0:dc:7d:31:38:2f:a0:95:34:99:25:0f:e4:34:7d:
c1:ed:0a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:45 2026 by rpki-client