Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: VIuYcsP/xE/Ta5wIJcoxHiDwgSBqUieevJ6JbUQQqdw=
Subject key identifier: C8:AC:9E:3C:8B:2F:BA:E5:5F:A8:2B:F0:F3:68:5B:A0:EC:DA:40:AA
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 01A10E4C9DEDD52342232BD7E609DBB00A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 1139
Signing time: Mon 05 Oct 2026 23:01:04 +0000
Manifest this update: Mon 05 Oct 2026 23:01:04 +0000
Manifest next update: Tue 06 Oct 2026 23:01:04 +0000
Files and hashes: 1: 4yIaOD2NMt2VBGmVwUq_OiRtg_A.roa (hash: kgy/jwMb361XAjDurvjXKgIsxESxjz3mkWg8JfDokdo=)
2: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: nhzGpdVSiQ3tDAVnJ9zSpo48FJ8jDzMqf3s9wX7zqTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:4c:9d:ed:d5:23:42:23:2b:d7:e6:09:db:b0:0a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Oct 5 23:01:04 2026 GMT
Not After : Oct 6 23:01:04 2026 GMT
Subject: CN=c8ac9e3c8b2fbae55fa82bf0f3685ba0ecda40aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b6:c8:f7:cd:86:5e:50:35:62:16:f7:00:99:
ea:77:87:25:19:f2:c0:cc:df:cf:13:1c:c4:7c:31:
b4:ca:0d:41:83:ea:9c:95:70:93:4d:ea:c2:bd:a1:
7e:0c:e1:25:99:73:0e:a2:9e:b4:d3:96:99:72:9d:
3e:5d:b2:bf:87:77:d8:34:d3:e1:3f:7c:b8:25:53:
39:c9:4e:af:3f:47:d7:f9:2d:cc:8c:f3:f1:a7:00:
e3:06:6b:ba:36:30:d5:6c:cd:cc:81:d4:ed:7e:f7:
66:96:01:2e:97:d9:25:e5:d2:5d:2e:55:4c:4a:86:
d2:b0:3d:49:0e:ea:78:d6:78:d8:2d:ea:5f:b9:bb:
d7:ed:4a:7a:4c:e0:71:d2:13:9e:cb:37:37:d5:11:
cb:9e:a2:f5:e5:ea:70:6f:3a:c5:6f:67:16:5b:fc:
3c:76:6f:15:95:dc:c5:d6:51:29:93:ac:fe:60:bd:
d7:9f:d2:25:c3:b6:8d:82:d4:42:2e:8a:36:8b:27:
9a:67:ce:69:3c:87:29:1a:63:99:89:76:d9:0e:e3:
26:c6:8a:c6:3e:d7:30:83:bf:a5:a5:1b:a8:9c:05:
e2:14:34:2a:92:99:73:64:e6:f3:7d:b5:6e:87:05:
c1:56:43:38:48:a2:67:65:e0:04:39:cf:a4:c6:f9:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AC:9E:3C:8B:2F:BA:E5:5F:A8:2B:F0:F3:68:5B:A0:EC:DA:40:AA
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2a:cc:60:84:0a:10:b2:eb:86:40:df:e1:52:71:9b:77:04:
d9:1e:54:bc:20:5c:66:3c:6a:0c:e9:62:f4:42:33:49:c4:f9:
1e:5a:63:b3:a0:c5:59:39:75:42:00:62:d6:e3:74:7a:e5:27:
ad:43:86:b1:6d:6f:b7:58:e5:2c:dd:97:0b:21:15:b2:1b:6a:
79:94:a2:66:45:ef:fb:df:30:97:1a:6d:d7:4e:c5:93:24:f5:
88:42:23:c1:86:7b:6d:d8:ea:56:34:18:27:2a:c9:d6:2c:60:
71:32:0b:39:36:92:67:66:20:f2:d6:21:a5:64:4a:0f:79:5d:
f2:c8:67:b8:7c:14:5e:61:8d:ee:81:f9:3e:54:b2:87:44:4d:
28:2a:23:cf:0c:67:26:98:e9:02:9e:49:96:c5:0a:2f:2d:50:
31:ba:0a:6d:31:2c:f0:4e:66:f5:93:b2:28:e8:1c:e2:a9:f3:
86:b1:dc:b4:58:38:59:fa:9d:90:ec:4a:76:44:c5:24:23:5c:
e4:64:df:0e:38:24:29:6c:1a:46:8b:32:d3:f0:ac:8b:09:dc:
b5:7c:e7:37:4b:e3:71:8a:6f:c9:cd:99:1f:1c:d1:d5:05:81:
f0:48:22:27:58:46:9a:39:0c:5b:bf:f2:a7:2e:43:ea:bb:bc:
a0:a9:c7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:17:36 2026 by rpki-client