Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: s77l+i/POWxfmCaSmaj/bS95wAJZp7BhRh9L2IMDpN4=
Subject key identifier: FD:59:40:2B:B9:92:44:85:52:C2:06:3D:4F:DC:05:0B:2F:CA:4B:8C
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 019E1DC74D7318DB70018FD938D5FC6D2975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 17F1
Signing time: Tue 12 May 2026 20:01:01 +0000
Manifest this update: Tue 12 May 2026 20:01:01 +0000
Manifest next update: Wed 13 May 2026 20:01:01 +0000
Files and hashes: 1: EWG2pnEixDgrHqKUr2g1EGP2zPY.asa (hash: ZdIG829wBmdAI+Aw8LWYuzyxjjwX6kLllCejRAZydCY=)
2: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: hx3FkNHg+51ujGssiLTgsd4KAdqXsCfnCRqIv444v7Y=)
3: sfEXc4wY-pXhuYqaE9QZpaIZSqY.roa (hash: njFcyKEx7yKnKI3LIuKB6v9ru42euT2yptaAKjD9IBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:4d:73:18:db:70:01:8f:d9:38:d5:fc:6d:29:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: May 12 20:01:01 2026 GMT
Not After : May 13 20:01:01 2026 GMT
Subject: CN=fd59402bb992448552c2063d4fdc050b2fca4b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:89:c5:aa:eb:32:86:08:75:9e:86:f9:bb:
1d:6c:f0:a4:69:30:a0:45:ab:8f:83:40:8c:e9:9b:
65:00:04:1a:33:af:7e:29:d3:10:f5:36:7d:5c:2e:
ef:f7:3a:13:44:b3:e8:1e:d1:10:c9:e6:30:1f:fa:
2b:06:bc:02:77:1a:5a:22:39:99:ad:70:ce:7c:16:
45:68:67:7f:89:46:e0:d1:cc:52:b5:b6:b3:e7:e9:
01:8d:fb:73:44:16:c0:f4:f8:33:95:51:f5:e6:1d:
c7:eb:96:f0:bd:fa:ac:d9:96:92:e8:c6:32:4b:cc:
af:35:52:ca:be:77:c9:e5:64:5d:57:57:d4:c1:f3:
3b:a4:a3:df:4a:da:18:94:6e:b5:53:0a:f6:5e:7c:
b9:d5:0d:f9:a0:af:77:53:60:37:66:1b:da:b1:61:
00:d0:a1:a9:7f:8e:35:68:9d:96:50:4f:79:f8:22:
e2:6e:7c:94:04:4a:3f:5a:c3:d6:e3:49:c5:f5:f1:
66:e4:4a:8f:d2:c5:e8:51:75:29:d9:aa:33:41:c7:
d0:28:66:9a:a9:1c:0a:e6:41:e3:44:57:e4:82:55:
5a:b1:fd:9e:9a:85:21:b8:42:35:03:ad:60:74:6c:
ef:b8:1d:2e:aa:3c:4a:19:af:c1:e6:f3:44:e0:94:
be:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:59:40:2B:B9:92:44:85:52:C2:06:3D:4F:DC:05:0B:2F:CA:4B:8C
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a8:50:46:92:c8:e6:65:e5:cd:1b:69:2b:ac:2f:8f:fd:32:
55:62:df:37:a7:16:ef:5c:27:0b:14:d6:e7:07:74:23:76:ca:
70:12:ad:cb:98:ac:2a:ba:7b:26:36:ec:ac:e0:30:96:76:18:
bc:a3:8c:04:40:46:9e:46:15:2c:91:11:25:ca:3f:a7:e0:a9:
c4:f2:51:d3:51:c8:e8:ed:4f:97:fd:93:b2:54:17:f4:8d:5d:
dd:bc:70:85:8b:a1:49:04:ed:01:19:94:a1:2c:3a:75:fa:f7:
fa:03:95:a2:3a:f1:6c:67:c4:5d:e2:71:84:a4:6d:0e:e1:bd:
52:cc:30:97:fb:5d:94:ac:3e:d3:fb:f4:86:63:39:9b:d5:a9:
46:7f:76:f1:b2:b2:d7:c3:e1:e9:c6:31:fb:a4:24:72:f7:ce:
c1:80:12:14:5f:ec:d8:6b:66:25:11:af:0a:03:03:9c:cd:9c:
8f:b8:97:c4:d8:be:63:2b:cf:a8:b8:e3:a8:3b:5d:ba:e8:c0:
07:69:a2:96:a8:3d:47:cb:65:27:63:2c:d7:86:5f:6d:b4:ec:
d9:a1:f4:7d:c4:e1:b7:22:74:2e:88:6b:98:86:03:54:59:67:
f1:11:cd:ac:66:dd:d5:0e:58:15:72:6b:f1:63:55:14:95:a3:
43:93:92:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx01zGNtwAY/ZONX8bSl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzE0Y2M2MDdkMWYwMjgzODQ4ZjlhODE1ZGJlNjc1ZTIz
MzlhN2UwHhcNMjYwNTEyMjAwMTAxWhcNMjYwNTEzMjAwMTAxWjAzMTEwLwYDVQQD
EyhmZDU5NDAyYmI5OTI0NDg1NTJjMjA2M2Q0ZmRjMDUwYjJmY2E0YjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYSJxarrMoYIdZ6G+bsdbPCkaTCg
RauPg0CM6ZtlAAQaM69+KdMQ9TZ9XC7v9zoTRLPoHtEQyeYwH/orBrwCdxpaIjmZ
rXDOfBZFaGd/iUbg0cxStbaz5+kBjftzRBbA9PgzlVH15h3H65bwvfqs2ZaS6MYy
S8yvNVLKvnfJ5WRdV1fUwfM7pKPfStoYlG61Uwr2Xny51Q35oK93U2A3ZhvasWEA
0KGpf441aJ2WUE95+CLibnyUBEo/WsPW40nF9fFm5EqP0sXoUXUp2aozQcfQKGaa
qRwK5kHjRFfkglVasf2emoUhuEI1A61gdGzvuB0uqjxKGa/B5vNE4JS+YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1ZQCu5kkSFUsIGPU/cBQsvykuMMB8GA1UdIwQY
MBaAFD7BTMYH0fAoOEj5qBXb5nXiM5p+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNGTXhnZlI4Q2c0U1Btb0Zkdm1kZUl6bW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83NTRiZDYtZmQ2YS00ZGM2LWE5Mjct
NzY5YTBjNWVlYTBkLzEvUHNGTXhnZlI4Q2c0U1Btb0Zkdm1kZUl6bW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83NTRiZDYtZmQ2YS00ZGM2LWE5MjctNzY5YTBjNWVlYTBk
LzEvUHNGTXhnZlI4Q2c0U1Btb0Zkdm1kZUl6bW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqhQRpLI
5mXlzRtpK6wvj/0yVWLfN6cW71wnCxTW5wd0I3bKcBKty5isKrp7JjbsrOAwlnYY
vKOMBEBGnkYVLJERJco/p+CpxPJR01HI6O1Pl/2TslQX9I1d3bxwhYuhSQTtARmU
oSw6dfr3+gOVojrxbGfEXeJxhKRtDuG9Uswwl/tdlKw+0/v0hmM5m9WpRn928bKy
18Ph6cYx+6QkcvfOwYASFF/s2GtmJRGvCgMDnM2cj7iXxNi+YyvPqLjjqDtduujA
B2milqg9R8tlJ2Ms14ZfbbTs2aH0fcThtyJ0LohrmIYDVFln8RHNrGbd1Q5YFXJr
8WNVFJWjQ5OShQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:46:26 2026 by rpki-client