Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
File: PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json)
Hash identifier: lL4X7gCnZARE+nMpus5Y5mMNs6lJ9luwv40iEd1bOao=
Subject key identifier: B7:14:09:B0:7F:1A:00:23:9A:4A:33:24:E0:0F:3B:3C:17:CB:0E:35
Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Certificate issuer: /CN=3d2384b784f197ea03dac2feda7895fc4b740729
Certificate serial: 019D9B878033D8E03342549CFFA33B482944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 13:00:41 +0000
Manifest this update: Fri 17 Apr 2026 13:00:41 +0000
Manifest next update: Sat 18 Apr 2026 13:00:41 +0000
Files and hashes: 1: 9nNyzPySymEM7sc2oK89zLOdPps.roa (hash: REW3iMc5Rvj/cI6qbWCaSFdTmGA7s4x31HfoeK6bal8=)
2: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: RTuYA0/T3Rk1BcfON5LvdbC+nJeR7YqVhKwASC1jh9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:80:33:d8:e0:33:42:54:9c:ff:a3:3b:48:29:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729
Validity
Not Before: Apr 17 13:00:41 2026 GMT
Not After : Apr 18 13:00:41 2026 GMT
Subject: CN=b71409b07f1a00239a4a3324e00f3b3c17cb0e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:c8:53:70:31:8c:5a:07:ca:f7:bf:98:da:
bd:66:08:13:82:06:b9:7a:27:63:eb:72:08:81:f0:
0b:54:bf:f6:89:56:12:6d:b7:7e:5d:0e:51:37:c4:
78:cc:3d:68:12:1a:f6:e5:ce:ae:1e:59:ac:14:43:
c4:ea:04:a6:de:25:56:a3:db:ef:c5:6f:89:6d:86:
bd:b5:fb:bd:c3:23:06:42:c3:e0:81:9b:0c:1e:c8:
39:dd:7b:67:00:02:02:af:ec:e2:63:3d:4c:6b:60:
b6:91:66:c1:89:42:4e:22:67:4b:c0:db:f8:49:9f:
66:7f:71:fd:5a:aa:48:c2:a8:f7:4a:5b:a0:68:aa:
ad:81:d2:b3:00:9b:06:4a:7e:2d:fa:2d:9a:80:02:
72:bf:70:2b:18:83:05:a4:69:a9:b0:eb:6e:9a:11:
30:c3:41:1d:d0:91:23:82:5e:e9:2b:1a:77:6f:d8:
fb:ae:75:e2:bf:ae:ac:13:b0:00:62:48:a9:90:2d:
f7:5a:da:b6:88:1b:ea:8d:3d:04:96:b1:b6:f3:3e:
69:fd:2c:9f:48:2a:51:d8:08:2e:6d:42:dc:da:9d:
21:85:4d:ed:48:eb:76:c6:70:59:eb:12:0f:38:b0:
e2:9c:13:20:30:4d:99:fb:33:60:ff:25:28:cb:1a:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:14:09:B0:7F:1A:00:23:9A:4A:33:24:E0:0F:3B:3C:17:CB:0E:35
X509v3 Authority Key Identifier:
keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:50:1c:79:7a:51:99:da:d5:6b:6b:2b:92:90:2f:99:50:51:
0d:0f:9b:67:12:27:9e:7c:ec:63:54:99:c1:a1:96:a7:57:ee:
f5:e5:1c:e1:59:ab:ed:24:2c:71:46:c0:c4:05:e8:38:7e:8a:
49:73:83:e9:3c:4d:92:f0:6a:8f:82:5a:18:2e:5b:9e:dc:eb:
1c:82:2c:c1:92:d6:bd:cb:8b:4d:49:fb:fe:97:20:b7:51:f6:
4e:fc:27:aa:56:ac:7d:8a:49:75:5e:a4:b3:5c:2f:ed:82:32:
57:b3:75:8a:22:34:cb:d3:2e:0b:7c:4b:05:6d:c4:9f:01:aa:
31:cd:77:88:0b:83:cc:dd:49:f1:ad:55:39:99:b8:b1:ef:4e:
b9:b2:8b:56:90:d2:8c:e9:cd:cb:a9:d7:d9:b3:7b:6b:5c:b2:
9a:b1:3f:61:7d:fb:55:03:0c:a0:8e:e8:30:77:7f:b8:02:e8:
80:b7:3a:96:d4:70:b4:bf:29:06:30:97:52:52:06:41:92:45:
a2:dd:50:6b:81:eb:11:7b:65:6a:d2:8e:93:28:e1:9b:1c:a5:
b6:a5:0c:3b:24:eb:4e:a4:e5:39:b5:cf:a1:ea:30:7a:cc:3a:
e9:cb:92:0a:73:c1:80:13:c2:ee:2b:45:85:38:f4:e9:1f:b2:
9d:5d:e9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:52 2026 by rpki-client