Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: Zp1OTnZve+UiBPey0LFvhcxfw7TxVcfsrc8zXWjXGlM=
Subject key identifier: DE:82:C7:EE:58:F9:53:AF:5E:DE:79:1E:1C:41:12:0A:BE:19:18:30
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 01A0B5AD47397002F97B094232529611FD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 1426
Signing time: Fri 18 Sep 2026 18:00:27 +0000
Manifest this update: Fri 18 Sep 2026 18:00:27 +0000
Manifest next update: Sat 19 Sep 2026 18:00:27 +0000
Files and hashes: 1: LDms8nxe60K6COjjp_csNfhmghs.roa (hash: Q5tvWtDVNBkz/BRp4dl8220S6HSORZZf3f/jyOpji8U=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: 9Hay2W0M94fTaajyeiteoRJ59tNfpt4oqpnm5S9gt4A=)
3: T6VYQnhnQYETwVj8BZYLRwwLS3U.roa (hash: C4QUjsV9O/nqAXRjoFy9pa8X3S9h9F1PXPJew5ITvec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:ad:47:39:70:02:f9:7b:09:42:32:52:96:11:fd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Sep 18 18:00:27 2026 GMT
Not After : Sep 19 18:00:27 2026 GMT
Subject: CN=de82c7ee58f953af5ede791e1c41120abe191830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:71:36:c9:4b:99:52:e4:53:f7:2e:4a:c3:1c:
ce:f5:d3:a4:d6:2f:91:04:fb:33:6f:c8:7d:2a:48:
a4:a8:c3:16:e0:22:f2:cd:55:36:73:44:07:84:75:
9a:3c:11:78:1d:3f:e6:a4:ad:ee:74:14:8f:77:6a:
b1:5e:16:dd:95:3a:df:36:4b:9c:bb:cc:27:a2:31:
da:a2:e1:66:b2:99:87:00:b7:7d:42:db:59:31:2f:
fc:da:c2:fd:a7:6c:1c:fd:4d:7e:af:ee:55:f9:59:
cb:ef:f5:ad:2e:9b:e7:ad:2e:81:1b:cb:ab:c2:e5:
56:3b:1c:a0:91:93:33:0f:4d:f0:cd:3e:7e:86:fe:
24:30:0c:62:92:be:4d:33:92:ef:b1:ec:5e:b9:84:
5b:85:53:f8:91:7b:14:9f:c3:10:2c:a2:99:66:f5:
23:9a:2f:0d:0f:b3:0e:7d:c6:70:bd:49:a5:01:9a:
cd:7e:7b:e4:74:69:e3:28:ac:07:8e:2d:70:8d:31:
d8:f1:f3:af:4b:7f:24:df:07:74:25:bd:da:f2:cc:
a1:81:a1:93:b1:4f:48:84:47:93:e9:41:1a:f0:09:
e0:b5:7e:fd:82:4c:3e:35:94:4f:f4:50:d2:9e:0f:
ef:9a:ef:26:6d:cd:8c:b8:6d:7f:e0:5c:f6:81:01:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:82:C7:EE:58:F9:53:AF:5E:DE:79:1E:1C:41:12:0A:BE:19:18:30
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a4:19:a3:4f:6b:ed:f9:d1:c8:3c:a2:d8:32:45:fc:15:70:
0d:c1:dc:c0:e1:6c:5e:58:b3:ce:b1:d4:4b:cf:ac:d5:b9:a4:
4e:08:e7:d1:c5:39:e1:67:3b:c0:cc:6b:a9:97:7a:a6:db:27:
d8:06:8d:35:5c:12:47:db:b3:8c:4c:5c:40:3b:b5:90:b9:e3:
b3:40:9f:c9:fd:1e:39:0c:a7:16:fb:50:c7:e3:33:e0:e9:92:
0c:ed:e3:df:96:d1:c2:6c:9f:0a:4b:f6:b4:a9:78:ab:62:e6:
75:ef:3e:21:f4:8b:f4:fc:85:ba:88:cd:ff:79:f1:11:59:8d:
83:fb:e9:5d:36:dd:fa:40:a3:4f:15:2f:6f:d0:ff:0a:16:05:
71:08:d4:73:13:a7:88:94:e1:0c:8a:cb:cd:4d:4c:03:bc:86:
0f:f0:8f:0f:50:a3:1c:3c:bb:fa:a6:99:3f:da:92:11:7d:c3:
b4:ed:9b:3d:75:2a:e5:e3:9c:11:2e:a8:16:c1:01:28:22:4a:
83:41:f1:bc:b2:24:bc:21:8a:c2:43:1a:fc:24:ea:5e:9a:1b:
ab:f0:8b:24:2e:4e:83:fc:7f:87:22:6a:e1:3d:2e:e1:1c:2b:
e0:7d:2f:5c:aa:d2:2c:97:a9:3e:86:19:b2:fe:af:db:35:cb:
c9:2b:9a:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC1rUc5cAL5ewlCMlKWEf0xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlY2Q1M2M2NjQyNGMzZjM2OWNhODhlZTdhZjc2YWRiMjVl
MTg0NTEwHhcNMjYwOTE4MTgwMDI3WhcNMjYwOTE5MTgwMDI3WjAzMTEwLwYDVQQD
EyhkZTgyYzdlZTU4Zjk1M2FmNWVkZTc5MWUxYzQxMTIwYWJlMTkxODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53E2yUuZUuRT9y5KwxzO9dOk1i+R
BPszb8h9KkikqMMW4CLyzVU2c0QHhHWaPBF4HT/mpK3udBSPd2qxXhbdlTrfNkuc
u8wnojHaouFmspmHALd9QttZMS/82sL9p2wc/U1+r+5V+VnL7/WtLpvnrS6BG8ur
wuVWOxygkZMzD03wzT5+hv4kMAxikr5NM5LvsexeuYRbhVP4kXsUn8MQLKKZZvUj
mi8ND7MOfcZwvUmlAZrNfnvkdGnjKKwHji1wjTHY8fOvS38k3wd0Jb3a8syhgaGT
sU9IhEeT6UEa8AngtX79gkw+NZRP9FDSng/vmu8mbc2MuG1/4Fz2gQENbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6Cx+5Y+VOvXt55HhxBEgq+GRgwMB8GA1UdIwQY
MBaAFD7NU8ZkJMPzacqI7nr3atsl4YRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNjVhZGEtNGQ0YS00MDRkLTg3MDAt
YzIyNTY4MDRlOTIyLzEvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNjVhZGEtNGQ0YS00MDRkLTg3MDAtYzIyNTY4MDRlOTIy
LzEvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6QZo09r
7fnRyDyi2DJF/BVwDcHcwOFsXlizzrHUS8+s1bmkTgjn0cU54Wc7wMxrqZd6ptsn
2AaNNVwSR9uzjExcQDu1kLnjs0Cfyf0eOQynFvtQx+Mz4OmSDO3j35bRwmyfCkv2
tKl4q2Lmde8+IfSL9PyFuojN/3nxEVmNg/vpXTbd+kCjTxUvb9D/ChYFcQjUcxOn
iJThDIrLzU1MA7yGD/CPD1CjHDy7+qaZP9qSEX3DtO2bPXUq5eOcES6oFsEBKCJK
g0HxvLIkvCGKwkMa/CTqXpobq/CLJC5Og/x/hyJq4T0u4Rwr4H0vXKrSLJepPoYZ
sv6v2zXLySuaNA==
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:08:07 2026 by rpki-client