Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
File: PsY-XbBDXC0-dKayitPZww1qjO4.mft (raw, json)
Hash identifier: fBEuUbSTuB3GWfTO332RxtoYF/u40EBAuN+PsSzT1vs=
Subject key identifier: 7A:8B:10:06:27:E7:FD:F8:DD:EF:BE:A5:E3:F8:89:AF:CF:40:7C:F2
Authority key identifier: 3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
Certificate issuer: /CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Certificate serial: 019F92117597E094E53C09EBBD658144CBE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
Manifest number: 11D6
Signing time: Fri 24 Jul 2026 03:00:45 +0000
Manifest this update: Fri 24 Jul 2026 03:00:45 +0000
Manifest next update: Sat 25 Jul 2026 03:00:45 +0000
Files and hashes: 1: PsY-XbBDXC0-dKayitPZww1qjO4.crl (hash: CHil5saN3ZVQ15LbJU4QE+b9ppR+O+opc5486pemeTo=)
2: e4Y82jz5m9Po29WmrpJsedcmzmk.roa (hash: uEEEYOKhA29NBvJQq3WwP47mr+GKJzQ+1OrC0QbpDj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:75:97:e0:94:e5:3c:09:eb:bd:65:81:44:cb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Validity
Not Before: Jul 24 03:00:45 2026 GMT
Not After : Jul 25 03:00:45 2026 GMT
Subject: CN=7a8b100627e7fdf8ddefbea5e3f889afcf407cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:b4:59:8e:af:29:93:a0:f4:04:14:6a:87:
51:0d:f5:68:dc:97:2c:e5:0e:ef:b3:2e:f8:dd:26:
ee:3d:ec:db:9b:f0:5e:4a:00:ad:87:b8:22:00:7e:
27:cf:58:0b:4b:c1:09:bc:53:4a:7c:49:ab:34:ec:
25:54:33:6c:52:04:cb:1e:0f:e1:77:70:f4:e1:cc:
ed:7d:b1:92:b0:45:a8:17:37:52:d7:cc:e7:5e:86:
15:1f:b3:21:8e:36:11:4e:f6:0b:8a:ae:22:ed:e9:
2a:5b:89:93:63:c7:c0:9e:9d:f9:49:90:3a:2f:0b:
ed:35:fd:7f:91:fe:4b:c4:2c:8d:2a:5e:e4:95:fb:
49:07:aa:e4:e0:41:87:69:24:86:38:31:89:2f:81:
34:c9:13:c2:7c:1d:32:96:25:61:63:f4:59:68:bf:
a4:ee:c7:7e:ca:bd:ad:c3:64:5f:62:64:6c:66:24:
c9:86:c9:6f:28:e9:3e:d9:05:87:7a:69:72:32:e7:
8a:fd:73:6c:48:25:c1:fc:56:2d:88:1a:72:be:4a:
64:c7:a7:af:fb:a4:90:57:8a:38:1f:c4:87:fd:4b:
1c:79:e2:13:94:6d:fc:fd:92:fb:61:3c:8b:14:bb:
64:da:a8:6c:f1:31:a1:8c:c1:dc:fe:6c:db:21:5f:
f1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8B:10:06:27:E7:FD:F8:DD:EF:BE:A5:E3:F8:89:AF:CF:40:7C:F2
X509v3 Authority Key Identifier:
keyid:3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:58:70:2f:1a:ec:52:10:2b:08:05:25:ae:47:df:8f:0a:24:
b0:54:b3:08:1b:b8:be:31:55:8f:b1:91:11:07:fd:cc:07:64:
d6:37:f4:04:85:d8:33:8a:c2:99:aa:39:6f:ed:cd:49:97:49:
b4:c3:d2:54:55:f5:1f:e5:a8:7f:29:2c:af:8c:30:d4:2b:9c:
6a:59:4c:35:37:5c:87:9c:50:64:79:39:90:fb:55:00:2e:cc:
a9:82:72:55:d9:96:91:06:56:e0:fa:ea:ec:61:17:50:bd:bc:
35:db:8d:64:16:e7:08:5e:e1:d3:c9:ba:56:ee:af:86:62:92:
9e:e9:94:4a:74:f1:30:9b:44:97:bc:7a:93:97:b9:e5:89:24:
dd:45:3f:d2:f5:46:8d:97:4c:63:e1:10:6d:ab:d4:a3:14:23:
e9:6a:6a:f0:6e:bc:92:42:35:e4:80:2c:3c:b9:bd:4e:86:cb:
73:fa:e1:7d:78:1d:28:30:70:d3:95:53:fa:13:1c:a5:55:73:
e4:7f:5b:de:28:e6:80:3d:66:c3:c5:0d:9b:6e:9f:08:d4:47:
06:6b:43:a8:93:a8:90:1a:af:e6:dd:95:7b:53:6d:1b:cf:92:
f6:50:99:6b:35:63:03:cb:3c:89:5f:09:c1:05:dc:6b:5c:43:
54:89:50:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEXWX4JTlPAnrvWWBRMvoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzYzZTVkYjA0MzVjMmQzZTc0YTZiMjhhZDNkOWMzMGQ2
YThjZWUwHhcNMjYwNzI0MDMwMDQ1WhcNMjYwNzI1MDMwMDQ1WjAzMTEwLwYDVQQD
Eyg3YThiMTAwNjI3ZTdmZGY4ZGRlZmJlYTVlM2Y4ODlhZmNmNDA3Y2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscG0WY6vKZOg9AQUaodRDfVo3Jcs
5Q7vsy743SbuPezbm/BeSgCth7giAH4nz1gLS8EJvFNKfEmrNOwlVDNsUgTLHg/h
d3D04cztfbGSsEWoFzdS18znXoYVH7MhjjYRTvYLiq4i7ekqW4mTY8fAnp35SZA6
LwvtNf1/kf5LxCyNKl7klftJB6rk4EGHaSSGODGJL4E0yRPCfB0yliVhY/RZaL+k
7sd+yr2tw2RfYmRsZiTJhslvKOk+2QWHemlyMueK/XNsSCXB/FYtiBpyvkpkx6ev
+6SQV4o4H8SH/UsceeITlG38/ZL7YTyLFLtk2qhs8TGhjMHc/mzbIV/x/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqLEAYn5/343e++peP4ia/PQHzyMB8GA1UdIwQY
MBaAFD7GPl2wQ1wtPnSmsorT2cMNaozuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNZLVhiQkRYQzAtZEtheWl0UFp3dzFxak80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS80NmQ5NDMtOGNiZC00MWEyLWI5ZjIt
NTIwNThmOGE5YTFhLzEvUHNZLVhiQkRYQzAtZEtheWl0UFp3dzFxak80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS80NmQ5NDMtOGNiZC00MWEyLWI5ZjItNTIwNThmOGE5YTFh
LzEvUHNZLVhiQkRYQzAtZEtheWl0UFp3dzFxak80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFhwLxrs
UhArCAUlrkffjwoksFSzCBu4vjFVj7GREQf9zAdk1jf0BIXYM4rCmao5b+3NSZdJ
tMPSVFX1H+Wofyksr4ww1CucallMNTdch5xQZHk5kPtVAC7MqYJyVdmWkQZW4Prq
7GEXUL28NduNZBbnCF7h08m6Vu6vhmKSnumUSnTxMJtEl7x6k5e55Ykk3UU/0vVG
jZdMY+EQbavUoxQj6Wpq8G68kkI15IAsPLm9TobLc/rhfXgdKDBw05VT+hMcpVVz
5H9b3ijmgD1mw8UNm26fCNRHBmtDqJOokBqv5t2Ve1NtG8+S9lCZazVjA8s8iV8J
wQXca1xDVIlQwg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:02 2026 by rpki-client