Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: ihbnq6Lqz2PSLKayetclklh9LaSlbNGfqr+kSdGbbpw=
Subject key identifier: 55:10:F0:0C:51:B6:3B:8E:2F:C6:6A:52:E3:B4:E0:E8:1A:BD:C6:1E
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 01A12B44D75E75CB58AACD27F89AE65094EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 1148
Signing time: Sun 11 Oct 2026 14:01:34 +0000
Manifest this update: Sun 11 Oct 2026 14:01:34 +0000
Manifest next update: Mon 12 Oct 2026 14:01:34 +0000
Files and hashes: 1: 4yIaOD2NMt2VBGmVwUq_OiRtg_A.roa (hash: kgy/jwMb361XAjDurvjXKgIsxESxjz3mkWg8JfDokdo=)
2: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: tkVYZcakk6yoMIvZUiZnUlrdE6I7a4rYC67vMKTsK80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:d7:5e:75:cb:58:aa:cd:27:f8:9a:e6:50:94:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Oct 11 14:01:34 2026 GMT
Not After : Oct 12 14:01:34 2026 GMT
Subject: CN=5510f00c51b63b8e2fc66a52e3b4e0e81abdc61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:77:e3:f3:70:a4:7d:ef:c0:9e:82:ed:8c:86:
90:5f:65:8c:cc:6c:c3:a1:1e:b3:61:97:46:71:25:
6e:64:63:de:12:97:4a:6f:5c:f5:89:e4:e2:17:c9:
c3:12:33:69:2a:51:5f:06:66:8c:13:37:1b:87:ad:
80:f6:d5:0e:b2:83:69:ec:bc:76:49:2b:5e:f8:2c:
76:d8:ba:7c:c9:e7:d0:83:2c:83:e9:74:04:aa:06:
09:b2:ed:b1:f9:0c:2f:ea:3a:0e:34:b8:6a:ea:b0:
bb:ad:f7:b7:39:b1:d4:56:2e:84:31:95:8d:ce:30:
6c:a2:ed:2d:0d:39:35:b4:5d:f4:69:ee:17:77:d1:
92:ce:05:93:1c:62:e4:e9:49:80:9b:72:5e:d6:d4:
a6:13:0a:07:d9:9a:8b:f9:8b:38:4a:e1:22:e5:ff:
dc:6f:26:a6:f0:bc:e6:e3:c2:91:d8:68:fa:d3:69:
13:04:9d:64:57:da:15:de:4a:9c:f3:b2:7b:e3:85:
8c:fb:40:7f:7d:b5:5e:e4:e4:65:11:fe:26:24:67:
d5:e1:0b:66:ce:2f:dc:15:9e:87:2c:e3:78:a6:7e:
0f:8d:29:a7:44:27:8c:bc:27:28:29:29:77:d5:7e:
da:35:2c:bb:96:24:2b:09:79:8d:a7:a8:54:58:98:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:10:F0:0C:51:B6:3B:8E:2F:C6:6A:52:E3:B4:E0:E8:1A:BD:C6:1E
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:37:75:21:1f:17:03:7a:4c:b5:a8:80:a7:10:7c:d9:56:b9:
56:4e:8e:04:27:a4:7c:17:da:cd:20:b2:ee:fe:20:63:4c:ff:
b4:03:78:1f:ab:67:02:31:f6:56:08:bf:37:75:31:ac:dc:25:
97:de:2d:7b:ad:03:18:aa:48:7b:bc:83:e4:ee:ef:27:a8:2c:
66:36:2e:63:80:2d:6a:95:38:16:0d:a6:c1:72:ae:8b:bc:85:
eb:23:db:18:38:6a:7e:f0:2b:99:3a:61:eb:fe:5a:14:ea:a8:
00:c8:01:53:9b:36:96:17:af:86:a4:9b:de:e2:a3:1a:c6:42:
f5:2d:14:5b:0e:c1:6d:aa:6a:83:8e:cd:35:1d:6d:25:f2:d8:
da:3e:ba:8f:96:71:cb:63:93:7a:7b:f4:33:eb:c1:a8:5f:cb:
c7:14:fa:95:d0:c2:73:d2:a0:c4:84:75:5a:95:4e:06:87:8e:
2d:18:e2:15:ca:31:1f:33:fa:93:ed:0d:0e:aa:17:ae:8b:32:
37:9a:08:62:a2:75:67:0a:b9:8f:0d:5b:54:05:34:0d:5c:ab:
b6:cc:50:c2:e6:1e:d9:8e:83:41:be:7e:a5:27:4a:87:3f:ed:
21:fc:e3:b7:e2:80:35:eb:5c:dd:3f:6b:ab:93:b9:9c:5c:d0:
d5:ee:f4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:30:59 2026 by rpki-client