Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: iPujSEfT2hoCy3d4shfp1Ym6oF+CCYUgx5l2xRMEx+Y=
Subject key identifier: 7A:7C:A3:75:72:F0:1E:0C:8A:E7:20:D6:2F:66:B8:E4:64:42:AC:96
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 019F92111DCAF332C6DF00E146DFDB4E010F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 138F
Signing time: Fri 24 Jul 2026 03:00:22 +0000
Manifest this update: Fri 24 Jul 2026 03:00:22 +0000
Manifest next update: Sat 25 Jul 2026 03:00:22 +0000
Files and hashes: 1: LDms8nxe60K6COjjp_csNfhmghs.roa (hash: Q5tvWtDVNBkz/BRp4dl8220S6HSORZZf3f/jyOpji8U=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: Ex1OQ2okabWJ0lApT+G/cddAFh1UzereROtZa3G/qEY=)
3: T6VYQnhnQYETwVj8BZYLRwwLS3U.roa (hash: C4QUjsV9O/nqAXRjoFy9pa8X3S9h9F1PXPJew5ITvec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:1d:ca:f3:32:c6:df:00:e1:46:df:db:4e:01:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Jul 24 03:00:22 2026 GMT
Not After : Jul 25 03:00:22 2026 GMT
Subject: CN=7a7ca37572f01e0c8ae720d62f66b8e46442ac96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:7e:44:5e:ba:11:d4:b0:95:5d:8e:14:b8:
b8:4b:02:83:fa:1d:44:36:0a:2b:ea:a9:39:aa:e5:
35:ef:0e:c9:a1:7b:7b:6e:19:7f:c5:9a:cc:86:e4:
fc:6d:ca:5a:2b:8b:33:13:65:45:d7:bd:94:2c:21:
5e:60:2e:ff:02:7a:42:8a:96:11:03:b7:52:ac:82:
ff:32:12:c9:ce:aa:68:9d:0c:c2:9b:3c:21:ae:f3:
ba:a9:bc:9b:4d:ec:a5:92:c6:7b:5b:22:27:ee:0d:
5a:54:e8:4f:e5:d0:c3:fe:13:72:6a:5b:36:04:bb:
13:be:c7:ea:06:7e:6b:a7:a6:7e:dc:4b:9b:c5:e1:
d7:c1:ab:6b:f8:56:1b:0b:6b:7f:ab:9d:41:5d:23:
4d:c2:83:c1:7e:a9:f9:66:ac:47:b9:30:51:6b:7e:
1f:f5:dd:a0:73:9d:77:55:4d:9c:3a:a8:fd:3a:27:
4b:d4:93:4f:fd:ee:19:8f:76:df:24:bc:c2:51:4a:
db:54:dd:c1:a3:1a:52:35:89:1f:8a:ed:17:c3:1d:
91:9f:26:6c:da:b4:de:44:de:d1:3e:ab:1e:15:44:
90:9f:f9:28:fd:5e:07:53:e8:9c:ee:ba:85:f0:b0:
67:15:0c:68:5d:b4:4d:59:34:f4:ae:62:88:c1:84:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7C:A3:75:72:F0:1E:0C:8A:E7:20:D6:2F:66:B8:E4:64:42:AC:96
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ac:78:bb:0f:b0:c8:6e:62:bd:91:f9:dc:ff:59:40:e8:69:
1b:b5:6b:de:c0:7f:3a:a6:55:83:53:f3:53:6e:a7:6f:9f:ef:
ad:b3:8d:18:17:f6:a5:fc:c3:b3:ce:f0:db:54:32:24:bd:1f:
a0:f3:17:6f:45:de:2c:5e:b3:e4:43:e4:4d:fa:42:a5:b6:fc:
47:9d:ed:2a:34:10:50:2f:3a:26:8a:ea:d4:45:86:d9:7a:e9:
1e:8c:7f:79:c9:fe:5d:4d:58:a8:6e:6e:cb:c2:ef:f5:b0:14:
6c:50:46:02:b8:2d:ef:6d:80:3e:31:35:8d:91:67:09:de:e5:
63:bf:b3:da:05:9c:d7:94:18:93:86:16:e6:cc:35:2e:d5:54:
65:78:d1:8b:38:b0:f4:16:5b:08:0b:5f:67:a7:bf:74:b2:95:
1e:e5:d6:6a:07:29:97:d6:7f:68:b1:e9:0f:81:3b:f5:35:1e:
cf:54:eb:78:69:8c:03:07:b3:73:95:df:24:50:ee:c6:a7:73:
a8:27:b8:9d:20:4a:df:02:41:76:ef:08:af:b6:f6:d8:62:47:
e1:24:a9:7a:79:b2:87:d1:d3:32:95:fb:56:8a:1f:73:67:50:
2c:3c:95:94:8b:37:23:a4:4b:a8:04:33:88:29:33:37:6f:c0:
24:9a:be:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:02:06 2026 by rpki-client