Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
File: PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json)
Hash identifier: SFaVhiaBia0wzKi+pBhAGI9jcXW7IetMV0onQPCBQck=
Subject key identifier: 29:88:1F:FA:6F:83:A1:17:00:30:61:5F:9B:0B:83:83:50:DC:CE:51
Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Certificate issuer: /CN=3d2384b784f197ea03dac2feda7895fc4b740729
Certificate serial: 01A0EA40F06CDCBD879A37241E47B598B7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
Manifest number: 1A7F
Signing time: Mon 28 Sep 2026 23:01:59 +0000
Manifest this update: Mon 28 Sep 2026 23:01:59 +0000
Manifest next update: Tue 29 Sep 2026 23:01:59 +0000
Files and hashes: 1: 9nNyzPySymEM7sc2oK89zLOdPps.roa (hash: REW3iMc5Rvj/cI6qbWCaSFdTmGA7s4x31HfoeK6bal8=)
2: GTg7W8NKWzw0dLf4M8dHxEchex0.asa (hash: N/dEnbH4PB15J8zC5BacpoiTth6pe2p/5hlRo3rWCag=)
3: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: I6Jt7oX+qjHtkQeRmWTNHoUuS5VEb5K0oeeKKcONTj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:f0:6c:dc:bd:87:9a:37:24:1e:47:b5:98:b7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729
Validity
Not Before: Sep 28 23:01:59 2026 GMT
Not After : Sep 29 23:01:59 2026 GMT
Subject: CN=29881ffa6f83a1170030615f9b0b838350dcce51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:61:eb:af:ee:12:3c:e8:73:02:de:51:1a:
06:68:8a:4c:1b:7a:22:4f:d3:e0:f5:0b:8a:9b:ec:
d1:72:d2:50:62:81:3d:09:92:e3:f5:aa:e5:a5:8a:
40:27:0d:a9:58:cd:73:e6:1f:04:90:2c:a6:d5:d4:
47:d3:44:1e:24:5e:8a:05:9f:e6:01:d9:d7:77:f7:
d1:6d:d1:5a:38:96:f8:98:6a:68:1b:b9:38:aa:15:
cb:57:67:92:63:4e:d1:2c:48:fe:8f:ea:36:57:ef:
ed:e5:a7:6d:22:b1:32:9d:3b:9a:9b:c9:9f:2a:eb:
ee:db:ad:63:a6:50:bc:99:59:cd:f9:12:81:ec:b0:
45:4e:44:f9:b6:a3:0e:5f:5c:eb:77:1e:72:7d:31:
22:03:be:8c:c7:7c:55:c1:25:2d:d3:b1:e5:be:5f:
26:bf:71:8b:9a:1c:ce:e1:c9:35:61:2b:0c:aa:43:
9f:e3:00:74:7b:cd:e7:b3:68:bb:99:08:e7:ef:16:
ed:cb:05:34:31:9f:65:74:09:22:0b:2f:26:ca:ed:
aa:d4:79:5a:4d:af:43:dd:ab:4c:3e:a9:34:8d:e6:
13:78:28:6a:19:78:a3:33:fb:9b:33:6d:39:9f:44:
14:ca:55:3b:3d:11:24:61:ec:5d:d3:32:b0:2d:4e:
5a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:88:1F:FA:6F:83:A1:17:00:30:61:5F:9B:0B:83:83:50:DC:CE:51
X509v3 Authority Key Identifier:
keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d0:e0:be:a3:bf:43:2c:ee:29:ee:6e:73:5b:31:ed:99:3a:
0f:c4:46:87:9d:13:17:21:9f:27:b0:47:9c:85:95:df:e1:6c:
78:82:0d:25:16:d9:5e:cc:55:0b:9c:8e:2b:60:a6:a4:c6:36:
f6:7f:79:8c:07:5f:c1:20:04:0f:b2:95:72:f9:1a:a2:13:52:
ba:c1:4b:20:f4:f3:71:8c:fe:e0:af:f6:c8:63:cf:7b:07:a6:
4d:d0:f4:02:ce:a5:8c:4a:c1:e3:37:2c:0e:41:dd:66:4b:b3:
ac:6b:59:e1:e5:61:c1:3d:e2:9d:bd:71:15:65:38:45:79:3f:
2a:e9:c8:61:e6:d3:61:c2:b0:4e:ba:0d:ad:fb:5a:17:c3:7a:
a7:1d:ab:65:e5:3e:f7:fd:83:b9:ba:ae:b7:77:d7:cf:88:87:
93:40:97:e6:d6:50:1d:76:55:b4:29:5a:09:d0:5e:67:3f:08:
c1:a8:a3:4c:f7:dd:cf:aa:0c:d5:4d:11:20:42:73:d5:89:bd:
e3:c8:c3:f5:9f:91:86:c1:a4:e0:0c:43:32:59:c1:43:97:90:
4f:0e:60:be:28:48:f3:4f:cb:2d:58:47:78:59:c2:17:b0:ae:
1f:77:a8:df:7a:c9:9c:2b:25:2f:fa:4c:36:d3:a5:44:7c:04:
4b:c8:c2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:21:32 2026 by rpki-client