Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: /NGSZmWov29DWEsO4XkbP9hf46iqFSJMdck/vU6I3iM=
Subject key identifier: 08:5F:0F:5A:F7:E9:B2:FC:1A:EB:D8:97:CD:3A:1E:F4:E6:2E:B3:47
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 019E1F47C0AD70BF01E3E73EC5958AE8EF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 12CF
Signing time: Wed 13 May 2026 03:00:56 +0000
Manifest this update: Wed 13 May 2026 03:00:56 +0000
Manifest next update: Thu 14 May 2026 03:00:56 +0000
Files and hashes: 1: LDms8nxe60K6COjjp_csNfhmghs.roa (hash: Q5tvWtDVNBkz/BRp4dl8220S6HSORZZf3f/jyOpji8U=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: jkaYrbbfsgjDWkJOZI/DeMs0tYJ6oRJAp29ugcGzVsw=)
3: T6VYQnhnQYETwVj8BZYLRwwLS3U.roa (hash: C4QUjsV9O/nqAXRjoFy9pa8X3S9h9F1PXPJew5ITvec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:c0:ad:70:bf:01:e3:e7:3e:c5:95:8a:e8:ef:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: May 13 03:00:56 2026 GMT
Not After : May 14 03:00:56 2026 GMT
Subject: CN=085f0f5af7e9b2fc1aebd897cd3a1ef4e62eb347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:12:5f:5d:97:49:89:df:c5:74:a2:99:af:56:
0e:60:91:e9:8e:8a:c7:8a:01:c9:91:8d:a7:0f:f0:
8f:17:e9:be:52:da:76:ee:08:e9:ad:33:1c:d0:2a:
81:67:eb:9c:72:2a:c8:7c:a0:c4:d3:b2:5c:69:a0:
a8:cf:69:40:dc:dc:21:a3:77:b8:40:d9:76:58:c3:
28:ca:f2:ef:f9:31:1c:1e:30:62:59:3c:aa:f6:c2:
2f:f5:d2:1f:91:c0:d2:c6:74:5b:c2:af:5b:68:b0:
93:b8:d9:40:f1:37:50:5d:00:30:56:da:a1:e6:e3:
8d:06:f1:62:e3:64:3a:83:e5:1a:79:de:ac:27:18:
c2:b9:b0:29:a8:31:d8:20:d2:a3:62:11:7c:84:db:
3d:b8:4b:f0:9c:d6:4c:13:64:a1:ec:93:e6:ed:80:
62:a1:df:b8:d3:43:2d:bc:6c:2a:dd:58:7f:d3:6b:
e2:b2:fe:01:db:1e:02:7d:ee:0a:c9:6c:f2:a3:c4:
42:5d:b8:d6:69:be:57:8d:5c:cb:b5:06:d1:3a:5c:
a8:7c:06:a7:5f:0d:cb:2e:79:06:83:2d:48:95:10:
27:24:9b:a6:dc:bf:84:89:c4:02:81:46:c7:60:f0:
00:95:22:96:97:6e:23:ad:c0:12:38:f3:47:2c:7f:
d7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5F:0F:5A:F7:E9:B2:FC:1A:EB:D8:97:CD:3A:1E:F4:E6:2E:B3:47
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:a5:d2:81:ba:76:d3:41:3a:de:18:81:61:0b:b1:75:49:b4:
69:6c:8d:2c:42:51:f3:b4:a1:4c:7e:f0:56:46:3b:10:c2:32:
83:aa:64:42:05:4d:e8:c2:3c:0c:2a:03:fc:c6:90:40:7e:a3:
50:16:f2:e6:4e:71:81:47:57:ce:39:1a:65:37:fd:ee:d8:8e:
ad:9a:05:12:f3:f8:10:b4:fa:79:e8:d0:76:22:09:40:8d:6f:
1d:04:08:3d:01:8d:41:1a:78:db:4d:d8:6b:f8:b4:c6:f4:af:
3f:15:aa:58:3c:8e:4e:da:43:bf:d1:2d:a4:7c:38:ee:b9:e0:
5f:0b:2b:65:28:93:b0:14:cb:2f:cf:eb:c2:8d:c3:57:40:09:
20:6c:57:2e:01:1a:84:15:5c:85:8f:aa:61:00:63:c7:f8:b0:
f8:2e:4d:e7:b2:e5:24:1d:bf:86:a8:6d:53:33:ef:31:9e:42:
73:aa:7b:68:d5:f0:70:18:24:a8:7f:f5:20:a2:1b:54:4e:99:
53:bf:63:69:5c:80:c7:02:ce:ee:dc:ee:9d:1a:1b:9c:bb:5a:
93:66:09:1b:36:69:8a:b9:f2:eb:8a:07:93:35:77:16:3b:eb:
9c:4a:fe:30:ff:d7:db:89:0a:55:1b:9e:f7:08:b7:83:78:ca:
a3:4c:7c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:06:07 2026 by rpki-client