Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: h1Cje1tWOZJ83nGKQLMkk0Ee3T8p0zcZK0LR/AidSpc=
Subject key identifier: DD:86:02:90:D4:E0:36:43:9F:A3:90:EB:5B:99:FE:73:5C:EB:25:97
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 019F93C94C63D38EFABECE2C3D4CF6967898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 1075
Signing time: Fri 24 Jul 2026 11:01:10 +0000
Manifest this update: Fri 24 Jul 2026 11:01:10 +0000
Manifest next update: Sat 25 Jul 2026 11:01:10 +0000
Files and hashes: 1: 4yIaOD2NMt2VBGmVwUq_OiRtg_A.roa (hash: kgy/jwMb361XAjDurvjXKgIsxESxjz3mkWg8JfDokdo=)
2: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: 39ywPCxs1tO6vtRmdpzxlht9XejtbjIOfL580jlPmA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:4c:63:d3:8e:fa:be:ce:2c:3d:4c:f6:96:78:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Jul 24 11:01:10 2026 GMT
Not After : Jul 25 11:01:10 2026 GMT
Subject: CN=dd860290d4e036439fa390eb5b99fe735ceb2597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f8:48:ae:04:06:56:28:1a:a6:10:69:5c:14:
86:f0:85:a4:da:2e:fc:a3:07:38:31:d5:2c:15:89:
d8:49:36:d0:d8:f5:be:b5:ba:0e:f7:90:69:61:2b:
b9:ac:d3:08:d9:b3:6c:64:e6:0d:3b:32:be:a6:cb:
b6:77:15:e8:bc:a7:ad:99:5d:2d:3e:98:56:42:96:
07:0a:23:07:c1:88:db:ee:95:5b:50:02:52:be:6a:
81:06:7b:6c:c9:c9:61:17:95:5e:90:c3:3e:7f:3d:
65:b3:61:20:c5:56:8c:58:ed:04:85:d7:3a:b9:f8:
b6:58:2f:64:2f:84:cb:fc:21:6b:dd:42:54:bf:69:
62:b0:f0:d2:8a:30:e4:90:c0:49:cc:f4:b4:35:87:
ca:e5:fe:65:44:98:8f:2f:4a:25:80:bd:27:fc:15:
c3:32:0c:d4:8e:b0:cf:18:53:39:d5:ee:e1:35:f9:
af:f0:5f:29:83:57:c7:cb:3e:8f:97:1a:5b:d3:72:
8f:a4:e3:4e:1d:b0:df:8c:e1:6c:04:c2:27:6f:f9:
0c:f0:d3:ec:22:fe:cb:cd:b5:1c:3c:f4:60:1a:c5:
5f:09:2c:e5:6d:35:72:f7:39:2e:2e:3e:cb:a8:13:
e9:a0:dd:b4:81:a5:29:5a:57:07:a2:a1:ca:2c:76:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:86:02:90:D4:E0:36:43:9F:A3:90:EB:5B:99:FE:73:5C:EB:25:97
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:df:6f:fa:22:cf:42:06:45:88:ac:2a:bb:29:7f:07:ae:f7:
da:bc:75:18:9e:20:0f:96:46:d7:69:73:77:2f:49:42:fd:5b:
d7:94:d5:08:b6:a6:61:80:b6:d3:a3:16:6f:4c:40:3b:b3:9a:
d5:bb:ce:7c:f8:12:34:ab:52:5e:15:88:93:57:81:7b:d4:b0:
f7:f7:03:23:a5:20:e2:30:c8:c6:c0:35:8d:a4:ea:51:d8:c6:
af:e6:63:cc:75:9b:f6:52:6c:ff:6c:fa:21:81:86:a0:ff:11:
a7:13:b0:12:63:77:de:85:be:83:4e:4b:3e:4c:52:72:6f:2e:
57:4d:b7:c2:d7:54:85:7b:17:43:91:40:71:33:d5:a5:18:3b:
62:e0:cf:df:39:9b:12:c6:d4:ee:0a:0c:45:33:f3:1e:99:63:
df:d9:90:fd:cd:55:d1:02:5c:c6:d7:ac:c8:92:78:14:4c:fb:
3d:02:2b:c8:ef:ff:3e:89:0a:f5:bd:46:6e:e1:aa:61:79:09:
06:c6:88:bb:29:8f:76:c4:14:71:50:df:5d:78:2a:51:e1:14:
fa:6d:d0:92:94:96:78:59:89:70:5c:e2:d7:fb:41:18:f6:67:
77:20:bc:59:f7:b9:22:db:44:bb:d6:b0:af:b1:70:19:3c:f8:
da:41:c6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:52:07 2026 by rpki-client