Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: T43cOCZe3Hl7ugV4GgbAs/OPpl0/q/JH0XOz3FqfQBA=
Subject key identifier: AA:3A:D3:78:8A:1E:84:FE:BE:24:50:A7:D1:6A:BD:8F:BE:21:74:FB
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 019D99D0B1E54E1EE0FFFD32AC713951CB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 0F6F
Signing time: Fri 17 Apr 2026 05:01:24 +0000
Manifest this update: Fri 17 Apr 2026 05:01:24 +0000
Manifest next update: Sat 18 Apr 2026 05:01:24 +0000
Files and hashes: 1: 4yIaOD2NMt2VBGmVwUq_OiRtg_A.roa (hash: kgy/jwMb361XAjDurvjXKgIsxESxjz3mkWg8JfDokdo=)
2: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: YpaqNWacAo0pHUiCp61N3qJUvQKfC6XT69WO0cZJPg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:b1:e5:4e:1e:e0:ff:fd:32:ac:71:39:51:cb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Apr 17 05:01:24 2026 GMT
Not After : Apr 18 05:01:24 2026 GMT
Subject: CN=aa3ad3788a1e84febe2450a7d16abd8fbe2174fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8e:af:6c:7f:f1:dc:eb:63:df:19:1d:55:59:
9c:17:26:34:12:fa:f4:a5:86:4a:51:2f:4c:1f:90:
9a:cc:c1:8a:9c:18:de:35:4f:92:df:ee:b2:22:47:
98:54:d0:94:a3:82:2e:e4:e7:4b:cb:c9:60:c7:49:
6e:b3:5f:43:8a:5d:1a:25:52:ae:ee:a0:3a:fd:35:
73:41:ce:70:a0:ed:b4:d0:38:24:80:c3:1f:d3:f8:
c5:00:90:8b:13:94:92:f0:53:c7:d9:1f:0a:94:26:
35:60:e5:27:f1:7c:24:6e:9f:86:68:c4:37:ec:07:
24:39:58:b4:63:f0:7b:aa:0b:e5:39:ea:c7:9e:42:
ad:4f:b6:49:1b:12:2c:95:1b:62:ed:b0:78:09:5d:
74:61:9a:39:d0:cb:35:c0:e9:43:7f:7b:6f:f4:8e:
aa:da:a2:f2:a2:67:5c:bd:62:31:a0:ae:cd:8f:41:
92:4e:15:1f:37:b8:47:8c:11:58:10:b1:0c:10:74:
0e:aa:b0:cb:60:5b:ba:10:d3:fc:e7:85:6b:1c:a3:
bb:4d:6d:14:39:fe:86:1e:98:8f:87:96:da:34:9c:
17:15:78:7c:1c:19:12:82:83:56:cb:58:21:67:44:
9f:97:f4:d1:a3:5e:33:56:0f:bd:5d:f5:45:d9:73:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3A:D3:78:8A:1E:84:FE:BE:24:50:A7:D1:6A:BD:8F:BE:21:74:FB
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e8:f7:fd:10:bc:89:11:1c:85:fb:4d:95:5f:a3:bb:1e:f6:
64:5f:04:ee:f3:6b:d5:9c:d1:e2:dc:e5:48:b9:ba:d5:22:e3:
08:f2:32:76:b5:c8:0f:9e:2e:f3:1d:f2:2d:2f:99:ec:f1:d0:
d3:55:6a:8f:c1:7b:55:0a:99:1c:2d:87:7c:0e:9e:63:0f:61:
69:45:59:18:7a:e3:f3:13:04:f3:26:66:64:5b:99:c0:16:19:
68:b8:98:4a:d6:21:f0:8b:5e:f7:05:71:92:f4:4b:a6:b3:35:
07:59:e5:d8:5c:ec:42:8b:fe:4a:3a:35:c3:4d:ba:97:7f:3f:
ab:61:c5:9e:2b:a3:0f:6e:0f:ec:b3:ad:bb:cc:45:2a:9d:81:
46:fa:a5:2e:51:04:72:3a:59:b0:30:23:39:54:42:54:78:56:
50:9d:ba:93:7a:e1:1a:72:58:7c:32:03:45:ea:7f:33:5f:3b:
3c:09:5a:1f:ce:f3:e0:cd:00:c3:07:fb:23:ab:05:87:c4:1e:
20:b8:fd:f1:47:7c:4f:f6:f6:e2:2e:8c:49:94:5b:89:55:d4:
20:45:41:1d:30:34:c8:73:9e:36:fa:ca:cf:2a:00:94:af:29:
6b:9b:e1:5d:79:01:ea:ec:d9:05:b3:ef:40:5f:aa:86:ce:8e:
db:1b:08:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:51:27 2026 by rpki-client