Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: +gH0zuc+8rAVQU6koBVBhFWzf7qJ7U6G35W6LDizqJY=
Subject key identifier: 3C:55:AD:F0:58:74:9F:EA:68:6F:32:6D:33:DA:05:57:05:AB:60:17
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 01A0CD4848F8D93B3046081A6C9488E6B169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 1956
Signing time: Wed 23 Sep 2026 08:01:01 +0000
Manifest this update: Wed 23 Sep 2026 08:01:01 +0000
Manifest next update: Thu 24 Sep 2026 08:01:01 +0000
Files and hashes: 1: J7ygwSzolnxGNbzMScyOPU5oo1U.asa (hash: uRkTFamZ6RfUST+pVlAWRJRGt5ZACmghNKXhVG0bm80=)
2: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: cIKC9xt/YaIeEQVeY9ttlZjojkXxZa8E/VMB80Zv9wc=)
3: sfEXc4wY-pXhuYqaE9QZpaIZSqY.roa (hash: njFcyKEx7yKnKI3LIuKB6v9ru42euT2yptaAKjD9IBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:48:f8:d9:3b:30:46:08:1a:6c:94:88:e6:b1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Sep 23 08:01:01 2026 GMT
Not After : Sep 24 08:01:01 2026 GMT
Subject: CN=3c55adf058749fea686f326d33da055705ab6017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:92:bc:91:03:c1:cb:4c:4c:95:58:9e:3d:b3:
65:86:0c:c8:14:12:16:01:18:b1:26:a4:9c:fe:04:
90:a5:28:a4:8b:b7:06:1b:16:1e:43:5e:7f:8b:16:
e8:66:d9:26:d6:99:39:ae:eb:4c:c2:75:0b:0c:8f:
48:d3:8e:27:6e:37:aa:5a:db:60:1c:4b:09:00:50:
ea:36:5e:4f:7d:67:f2:b6:cf:b2:b1:32:e2:2c:bc:
40:7b:2e:9f:c4:42:f8:94:b1:c2:9b:fb:ad:e7:4b:
9b:c2:4e:5e:fe:6b:7c:ce:a4:0a:b3:03:63:44:0d:
98:61:79:d9:9a:f1:0c:ae:54:52:2d:98:57:60:8e:
3c:4d:b2:67:ba:d8:0e:6d:0c:23:c5:e1:a3:81:31:
a4:5c:5e:10:2a:5b:2d:fe:d3:5c:b3:0d:d2:11:80:
d1:95:89:d0:bb:88:82:07:cf:e1:21:9a:78:51:0a:
32:48:af:ad:77:df:ef:4b:6e:ee:1b:b6:31:85:1a:
ed:29:2c:0a:fd:03:33:78:b2:7d:c5:97:08:4f:4e:
ca:1d:ba:37:20:61:6e:32:81:eb:66:a1:de:4d:73:
d6:f5:90:4f:cf:3a:d4:f7:89:7e:93:94:f8:ca:67:
69:30:00:d6:44:9a:54:29:a4:5a:97:a9:8b:11:d0:
b3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:55:AD:F0:58:74:9F:EA:68:6F:32:6D:33:DA:05:57:05:AB:60:17
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:26:30:45:dd:56:44:48:87:cc:73:a4:3c:68:37:4d:c5:26:
02:96:6e:c6:97:97:d1:b6:29:78:1f:2e:2e:dd:1e:81:e9:a9:
74:85:0b:90:b3:ae:05:be:d4:9c:4a:c3:63:19:dd:a2:39:a3:
f3:f3:95:45:68:55:7a:6e:18:da:87:f7:83:25:c6:39:cd:3c:
2f:ce:54:31:1f:14:8d:68:10:40:bc:0e:74:89:71:cc:13:8f:
74:44:bb:e6:79:56:e7:82:08:f3:f6:03:ed:8e:7e:52:a5:23:
01:be:23:24:f8:14:c9:0e:62:81:a5:ce:9b:8b:14:a1:99:61:
f6:02:fa:ea:a5:04:3d:b0:e5:d7:11:43:f9:d7:92:1c:7e:50:
95:6b:22:15:ec:66:80:3c:4a:2c:11:73:15:8f:63:b6:f8:a8:
04:04:c3:9c:40:7c:ee:af:39:3c:d1:11:0c:f3:c4:d1:e7:fa:
7b:40:78:c5:c0:bc:23:b0:44:1d:b5:39:da:0d:ca:78:cf:7c:
03:75:91:af:d8:88:5c:d5:fc:20:59:c8:1c:0a:b5:2c:9c:f6:
bf:68:50:05:03:e7:c5:cb:83:5a:05:2a:90:8a:47:1f:58:71:
d0:a9:0a:b5:c6:8f:bf:65:5e:a8:9b:38:df:bf:6f:7e:a1:45:
ff:dc:d5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:57:04 2026 by rpki-client