Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: TwHx8QFmYMcpI8QHIa7T6fO3JNeXe7C5w2SsDPVRIbI=
Subject key identifier: EE:9B:BE:D1:0A:C3:B5:98:E0:EE:AD:92:CA:96:85:3C:04:C4:F4:25
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 01A0DA5F6F0C9973866DF3EA28F18B24EA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 1439
Signing time: Fri 25 Sep 2026 21:01:22 +0000
Manifest this update: Fri 25 Sep 2026 21:01:22 +0000
Manifest next update: Sat 26 Sep 2026 21:01:22 +0000
Files and hashes: 1: LDms8nxe60K6COjjp_csNfhmghs.roa (hash: Q5tvWtDVNBkz/BRp4dl8220S6HSORZZf3f/jyOpji8U=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: t3RpmGz58VtYF2Lb4kBjIRaBI2iEg+6YL+aZqRG9RmQ=)
3: T6VYQnhnQYETwVj8BZYLRwwLS3U.roa (hash: C4QUjsV9O/nqAXRjoFy9pa8X3S9h9F1PXPJew5ITvec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:6f:0c:99:73:86:6d:f3:ea:28:f1:8b:24:ea:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Sep 25 21:01:22 2026 GMT
Not After : Sep 26 21:01:22 2026 GMT
Subject: CN=ee9bbed10ac3b598e0eead92ca96853c04c4f425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:89:5e:e5:8e:90:18:dd:70:65:60:5b:03:
ea:d7:34:7c:dd:35:87:55:e1:f8:0b:93:23:fb:25:
a9:8f:fa:c4:de:90:2c:66:5c:cd:36:0c:fe:fe:5c:
47:7b:f5:8b:7f:6b:b9:72:db:f5:90:b2:51:6c:75:
94:14:69:a3:d6:70:51:c5:0a:cc:2b:37:91:56:7e:
ab:20:e6:fc:21:9c:ba:93:12:2d:da:fe:4c:0f:90:
0b:5f:cc:5e:41:35:0b:3d:00:e1:a8:2d:4b:7c:a2:
03:26:35:9f:f8:e2:ae:a9:06:ee:7d:f3:11:9c:7a:
8e:c1:92:9b:3b:84:1a:5a:e9:79:f1:fc:33:99:7a:
86:c6:96:20:c6:bf:33:1f:5e:ed:e5:2a:28:82:00:
42:60:e1:2b:e0:05:30:00:1f:c0:4c:9e:a7:c7:9f:
a9:c5:46:68:19:91:b9:a0:61:d5:00:c6:1c:16:06:
98:4c:1c:de:f6:a5:d9:07:b1:eb:59:55:14:00:39:
b5:97:d6:d2:a1:12:cc:de:65:23:d8:bd:91:be:6e:
d6:d2:09:e2:75:de:ab:20:53:00:46:72:9c:d2:a2:
d3:05:6f:28:f3:05:7f:0a:c4:39:a0:16:ff:7c:d3:
0a:b6:e0:5a:5d:17:77:2a:0e:41:20:00:e4:72:b3:
b9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9B:BE:D1:0A:C3:B5:98:E0:EE:AD:92:CA:96:85:3C:04:C4:F4:25
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7b:69:56:ae:93:9a:c2:40:57:c1:ad:2e:eb:ac:d8:be:1e:
ad:61:84:33:76:10:92:3d:bd:41:2a:31:7e:bc:5f:4e:4b:39:
16:ea:6c:6a:cf:d1:99:d8:c3:28:fe:b2:ee:2f:84:ea:1d:f4:
e1:ca:84:bf:4f:36:91:2c:95:77:22:f0:16:2e:de:c6:83:07:
a0:5d:1e:10:d2:4d:45:8b:14:79:45:bc:71:0c:a2:17:c3:51:
4f:59:07:76:3b:e5:13:cf:d2:7e:ac:d8:8e:5a:25:0f:3b:cd:
67:ee:f8:7d:83:d4:39:9f:01:26:33:98:73:f6:ce:61:13:c6:
16:66:c9:4a:58:e8:71:71:90:d9:fe:3c:38:51:9c:83:02:fb:
98:05:b4:c0:13:4d:de:d3:26:c9:22:7e:33:73:27:d4:49:d6:
b2:94:be:eb:25:d1:3e:c9:10:c4:0a:2f:83:42:6c:2c:75:78:
36:ab:c0:9a:72:cc:5d:f1:2e:ed:06:2e:49:8a:86:30:d9:e9:
c3:bb:9c:a4:cd:5f:d7:9a:24:3d:34:20:65:c3:c9:8f:cb:29:
02:49:b3:17:d6:f3:b0:31:dc:df:e8:c1:61:40:30:10:74:b0:
1d:60:59:99:c6:59:2b:65:cd:c9:dc:3f:c9:55:91:44:f5:3b:
95:da:ec:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:45:45 2026 by rpki-client