Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/42e19a-e13a-4998-99ae-ea9619beb56e/1/Ps7T04aszVVp_7F6tjE5um1Hteo.mft
File: Ps7T04aszVVp_7F6tjE5um1Hteo.mft (raw, json)
Hash identifier: 7YRtTRDh9oZgZ70/Wga9a08HHfhqdCuY+l2AsNZVxj4=
Subject key identifier: DB:8F:39:D4:01:E9:BC:FF:4F:51:06:77:9B:7C:F8:D5:55:50:C8:56
Authority key identifier: 3E:CE:D3:D3:86:AC:CD:55:69:FF:B1:7A:B6:31:39:BA:6D:47:B5:EA
Certificate issuer: /CN=3eced3d386accd5569ffb17ab63139ba6d47b5ea
Certificate serial: 019D27DF6037D82D49F5325601FD4B5980BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps7T04aszVVp_7F6tjE5um1Hteo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/42e19a-e13a-4998-99ae-ea9619beb56e/1/Ps7T04aszVVp_7F6tjE5um1Hteo.mft
Manifest number: 01EA
Signing time: Thu 26 Mar 2026 02:00:43 +0000
Manifest this update: Thu 26 Mar 2026 02:00:43 +0000
Manifest next update: Fri 27 Mar 2026 02:00:43 +0000
Files and hashes: 1: 0ytIcMc7s2KoW63HVSZx59FHMA4.roa (hash: y6w2/4+MhPYuFogumAKM5UC/Y1Ii8rBrK+24Be22zc4=)
2: Ps7T04aszVVp_7F6tjE5um1Hteo.crl (hash: 0FZatXABmZTS656ksJ4MtX0IT4I50t+pWuH8XuuA5Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/42e19a-e13a-4998-99ae-ea9619beb56e/1/Ps7T04aszVVp_7F6tjE5um1Hteo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/42e19a-e13a-4998-99ae-ea9619beb56e/1/Ps7T04aszVVp_7F6tjE5um1Hteo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps7T04aszVVp_7F6tjE5um1Hteo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:60:37:d8:2d:49:f5:32:56:01:fd:4b:59:80:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eced3d386accd5569ffb17ab63139ba6d47b5ea
Validity
Not Before: Mar 26 02:00:43 2026 GMT
Not After : Mar 27 02:00:43 2026 GMT
Subject: CN=db8f39d401e9bcff4f5106779b7cf8d55550c856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:94:21:86:87:59:36:b3:10:10:34:c2:77:
0d:ae:0d:24:e8:46:24:a2:6f:68:b1:11:33:0b:1e:
69:40:13:39:7b:28:f8:d3:5e:35:62:81:8e:24:b2:
a2:a1:1d:db:8b:c1:f3:b3:c2:e9:c0:13:34:fd:1e:
8f:5b:2d:53:22:63:56:92:db:a9:1f:90:78:b1:9f:
92:66:fd:ea:c5:25:18:6c:9f:65:14:c8:7a:99:27:
95:c5:b7:35:62:ef:6f:5d:46:9f:85:15:86:37:e8:
70:cd:7a:34:9a:12:c0:1b:e8:36:bd:91:41:44:b6:
96:fb:1f:37:40:ec:5b:20:e0:10:29:56:36:12:cc:
d6:01:ae:97:59:ac:e7:2b:e4:b1:8c:eb:99:f3:a6:
aa:f1:26:07:6d:84:97:67:e6:06:2e:6d:00:11:7f:
b6:7a:01:2d:40:9d:28:0c:59:0e:e2:34:61:eb:21:
f4:1f:75:ba:be:b2:1a:92:72:9b:94:6d:55:0c:65:
9e:a3:3f:85:9e:f4:5d:1e:41:2b:5a:aa:2e:e5:1c:
79:98:80:fd:79:08:a6:2a:b0:63:9b:68:52:4d:e6:
fa:d4:68:24:70:60:01:4a:11:86:d4:f7:7e:b4:49:
63:80:bb:10:4f:57:f4:47:73:92:e3:be:2e:75:4a:
43:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8F:39:D4:01:E9:BC:FF:4F:51:06:77:9B:7C:F8:D5:55:50:C8:56
X509v3 Authority Key Identifier:
keyid:3E:CE:D3:D3:86:AC:CD:55:69:FF:B1:7A:B6:31:39:BA:6D:47:B5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps7T04aszVVp_7F6tjE5um1Hteo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/42e19a-e13a-4998-99ae-ea9619beb56e/1/Ps7T04aszVVp_7F6tjE5um1Hteo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/42e19a-e13a-4998-99ae-ea9619beb56e/1/Ps7T04aszVVp_7F6tjE5um1Hteo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fb:99:03:b7:9d:56:78:4f:4c:cf:10:c7:47:27:ce:b5:59:
d0:9c:3c:a0:06:67:21:52:fe:ab:57:e1:c0:7c:ba:f8:cc:0b:
b5:cd:02:d2:df:bb:55:95:60:af:f3:5b:36:ab:01:2c:9b:d5:
31:07:14:10:0b:b0:2c:5d:7f:c1:46:ff:d0:f7:41:85:f2:b0:
7f:49:f8:c2:16:ad:e8:91:aa:23:94:ac:9c:1a:c8:5c:d6:bb:
6e:34:9c:cf:2a:b1:bc:c3:02:d3:df:b6:4a:3d:27:39:db:13:
78:37:63:d2:c3:08:5f:85:ee:7d:c8:6b:9f:fc:d2:e3:23:79:
45:97:36:30:00:e8:0a:83:03:94:d7:bc:bf:2f:2b:ac:36:65:
a2:e6:2b:02:9f:59:92:d9:a0:e0:8b:8e:8a:d1:01:8d:55:98:
12:6c:85:0b:f2:fc:8e:87:91:27:7a:12:10:d8:b6:02:e5:5b:
15:66:4f:13:88:60:a7:33:de:58:75:b2:db:03:df:f4:61:93:
86:13:95:a2:a1:da:4f:7e:7f:ea:f2:63:48:31:82:03:39:d2:
97:51:81:74:9c:a4:78:65:36:ae:c8:13:37:96:47:b7:0b:4f:
12:d7:9e:c0:a8:55:56:69:ee:69:99:cf:78:37:d3:5a:d4:a9:
63:2a:43:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:03 2026 by rpki-client