Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
File: PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json)
Hash identifier: n/5AXHKAG7bNn/ACtxSf4padvgTbtpjvHOkJPa+cyaw=
Subject key identifier: 86:6C:03:56:F9:30:7F:74:F8:85:D7:0B:3C:60:05:98:CF:53:13:CF
Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Certificate issuer: /CN=3d2384b784f197ea03dac2feda7895fc4b740729
Certificate serial: 01A0E6641E0502C955994B9861FE2502304B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
Manifest number: 1A7D
Signing time: Mon 28 Sep 2026 05:01:55 +0000
Manifest this update: Mon 28 Sep 2026 05:01:55 +0000
Manifest next update: Tue 29 Sep 2026 05:01:55 +0000
Files and hashes: 1: 9nNyzPySymEM7sc2oK89zLOdPps.roa (hash: REW3iMc5Rvj/cI6qbWCaSFdTmGA7s4x31HfoeK6bal8=)
2: GTg7W8NKWzw0dLf4M8dHxEchex0.asa (hash: N/dEnbH4PB15J8zC5BacpoiTth6pe2p/5hlRo3rWCag=)
3: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: KZ0f4pTjeT1N05ug+L/ygbxdDRAw+Bq0G1shDkn6Bv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:64:1e:05:02:c9:55:99:4b:98:61:fe:25:02:30:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729
Validity
Not Before: Sep 28 05:01:55 2026 GMT
Not After : Sep 29 05:01:55 2026 GMT
Subject: CN=866c0356f9307f74f885d70b3c600598cf5313cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:48:19:87:9d:5b:84:31:e4:ff:bd:99:b6:
49:e0:2d:8a:fb:fd:b6:68:79:4f:df:a4:76:d0:13:
3b:1b:5d:fa:46:ad:5b:53:fe:eb:e0:1d:ba:e7:b2:
3d:c9:6f:95:43:10:5c:08:36:74:26:90:70:5c:ef:
31:43:7c:69:18:44:3b:89:50:a9:4a:a6:6c:17:6e:
d0:02:74:9a:b3:88:c4:35:62:72:f5:a2:4c:b4:bb:
b6:05:3a:c2:a7:37:20:13:3b:ed:f1:ad:f4:b5:1c:
21:50:69:a2:d4:85:d3:57:b7:a4:84:ec:d4:be:7a:
96:c2:c5:cd:cf:26:09:49:a8:48:0c:8b:68:0d:31:
53:9e:bb:c6:42:27:cd:5d:99:bd:6d:da:99:82:e3:
c8:97:6a:a5:e7:b1:b4:e9:93:d0:6c:c7:9e:d9:71:
88:2d:48:67:65:db:3d:31:00:3c:72:e2:48:78:d3:
64:eb:50:42:50:66:1d:9f:3f:5e:74:4e:40:8b:35:
32:ef:26:7e:9b:bf:4b:f1:c7:15:2a:d0:11:ef:6f:
87:be:52:df:82:20:bf:7f:00:92:0f:52:01:87:7c:
21:b8:63:19:17:c6:31:fc:43:a8:11:19:a4:a7:46:
09:bb:6a:f3:fa:cb:b9:b4:c1:ed:9d:da:99:b2:1e:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6C:03:56:F9:30:7F:74:F8:85:D7:0B:3C:60:05:98:CF:53:13:CF
X509v3 Authority Key Identifier:
keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:02:11:fb:10:32:b1:06:2f:20:f1:f3:da:6c:a6:3a:6d:d6:
69:35:90:b3:60:88:81:0b:6b:ce:a6:09:b3:6d:0e:8f:74:e8:
fb:c3:cb:c3:ec:3f:06:fe:8d:8f:49:2d:a9:0d:e8:29:99:b0:
d8:1e:8a:b3:31:7e:d4:ce:03:a6:db:07:cf:e6:99:ca:f1:9b:
5e:eb:81:58:92:93:1a:0a:b1:af:2b:7f:02:83:0a:a6:46:68:
1e:6b:bd:45:64:47:7e:97:db:1e:46:56:c5:dc:5a:bd:cc:7f:
64:30:a3:f5:19:88:39:ec:98:9d:99:62:3f:55:c9:fe:29:25:
d0:00:b7:6e:09:c8:50:ea:95:df:51:5c:3a:9c:ec:2a:e5:59:
6f:b7:3a:2b:6e:7e:17:fd:b1:13:e6:c8:68:75:dd:58:d9:ab:
72:8d:84:ec:75:03:ab:c7:c0:0f:22:af:19:3d:62:2e:bc:ae:
44:19:fa:00:50:12:c9:1b:15:f9:2d:9a:5b:ee:68:6d:a8:b8:
c9:ac:66:14:5c:ae:80:18:2a:65:e1:55:1c:db:ae:03:03:c7:
fd:e1:e3:b0:fa:32:59:04:01:cc:b4:f7:d6:c9:d0:55:06:7d:
8d:21:6d:d8:7e:ad:5c:e3:9b:a9:48:e3:1c:c3:15:02:b2:76:
c0:a6:65:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:25:17 2026 by rpki-client