Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: prohf70kDI5WOQXjNeeKyo8Q+use0T59Xev/Acfl9Kg=
Subject key identifier: D1:DA:6A:34:25:4A:A8:50:B8:BF:39:EF:9F:EE:26:63:76:D3:BB:FC
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 019D26962B571743763B235F647E8221E753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 1771
Signing time: Wed 25 Mar 2026 20:01:08 +0000
Manifest this update: Wed 25 Mar 2026 20:01:08 +0000
Manifest next update: Thu 26 Mar 2026 20:01:08 +0000
Files and hashes: 1: EWG2pnEixDgrHqKUr2g1EGP2zPY.asa (hash: ZdIG829wBmdAI+Aw8LWYuzyxjjwX6kLllCejRAZydCY=)
2: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: qGVe2XMs8xJDFVpm1/XYpq6CFaTATiKdmuq27SpmaqU=)
3: sfEXc4wY-pXhuYqaE9QZpaIZSqY.roa (hash: njFcyKEx7yKnKI3LIuKB6v9ru42euT2yptaAKjD9IBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:2b:57:17:43:76:3b:23:5f:64:7e:82:21:e7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Mar 25 20:01:08 2026 GMT
Not After : Mar 26 20:01:08 2026 GMT
Subject: CN=d1da6a34254aa850b8bf39ef9fee266376d3bbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:b4:38:43:9e:90:c2:2a:4b:12:81:c1:71:
74:ac:17:dc:b1:d9:44:bd:43:ea:a5:29:f0:5b:c9:
02:72:25:c1:99:24:09:0e:46:a1:b2:38:f0:75:b8:
ed:e6:dc:76:fb:9a:f7:95:98:c8:13:c6:a6:70:f6:
4b:f4:15:cf:4a:c5:3f:bd:99:65:0c:e1:69:22:e7:
65:70:b2:00:ca:41:cb:a2:84:a9:17:11:11:8f:9d:
87:b0:1d:07:9a:44:8d:0a:55:c9:1b:d5:ba:b8:22:
71:97:31:8e:25:3b:03:0e:8b:4f:b2:0c:08:1e:d5:
34:c9:8f:d4:28:83:f3:53:14:1a:69:09:f0:a6:24:
25:7b:4f:d2:cb:08:a9:f9:75:62:0e:18:d6:e0:5e:
e5:8a:9d:1b:ed:99:b7:19:a6:ba:da:66:57:9f:ce:
73:96:56:6c:4c:d6:0e:21:24:0c:d7:e9:bb:c1:95:
9f:9c:f9:9a:fa:2e:a2:16:f6:95:69:00:a1:29:0c:
26:6b:df:85:00:95:4d:0f:09:e7:05:09:01:9f:d7:
0c:a8:99:34:29:bd:de:41:2e:88:4c:c8:28:5b:8a:
63:fd:09:dc:cc:b3:92:79:03:64:92:f0:e7:14:0d:
69:ae:c9:5b:7e:73:a2:47:32:0c:b6:4b:68:17:6f:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DA:6A:34:25:4A:A8:50:B8:BF:39:EF:9F:EE:26:63:76:D3:BB:FC
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ab:6d:1b:60:fd:ec:b6:f1:e4:cb:e8:f8:20:83:8b:1b:6d:
37:6b:fa:3d:7c:d7:72:93:09:d6:bc:54:88:b9:c3:1a:bc:72:
9c:f9:af:59:cd:92:93:a6:68:7f:d4:95:6b:c0:30:58:7b:72:
b6:44:72:04:61:f7:2a:78:20:45:5d:20:b2:d1:1f:be:31:ac:
c6:0d:8b:72:c2:1d:6c:8d:64:f7:54:c1:70:ab:40:33:ea:33:
2f:cf:41:a5:8e:8b:a8:1e:9c:ab:18:0e:75:7b:de:d2:3f:e3:
6d:8d:38:d9:8e:b0:e5:47:d2:c9:10:6e:02:b0:9c:e5:d4:ca:
32:1e:20:42:32:f1:fb:a0:e7:fb:6b:69:5e:43:75:71:9b:a2:
a2:64:da:90:6a:91:11:ab:da:bb:77:93:2b:3d:2e:cd:fc:06:
ed:2d:df:d2:6f:46:c4:bd:2c:0e:b2:a5:55:9b:fc:ed:a0:99:
e3:69:1b:1b:bf:10:be:df:4f:a9:b9:92:34:f1:88:00:76:31:
b1:b1:4f:3e:56:74:c0:22:98:66:98:11:ff:e5:69:e9:33:ee:
39:8d:66:6c:40:ee:6f:17:8d:b2:46:73:15:c4:bc:44:46:c5:
af:c0:91:90:0a:a1:ce:78:33:d2:34:80:5e:d0:36:0d:6b:65:
af:11:5b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:49:30 2026 by rpki-client