Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: p0iFV6AgDUrlgjdRRll+5CtqISLtDdrLvTAobhHOAc4=
Subject key identifier: 0D:87:86:EE:EB:F4:3C:7A:A4:1E:DF:F8:06:64:F4:EB:68:B9:B9:99
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 019FCC018B989F2518888BFDF7A96B119BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 13AD
Signing time: Tue 04 Aug 2026 09:01:20 +0000
Manifest this update: Tue 04 Aug 2026 09:01:20 +0000
Manifest next update: Wed 05 Aug 2026 09:01:20 +0000
Files and hashes: 1: LDms8nxe60K6COjjp_csNfhmghs.roa (hash: Q5tvWtDVNBkz/BRp4dl8220S6HSORZZf3f/jyOpji8U=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: cRcOdXdAL+mZBX8fUwv6bDayiRuD6yfSHEDL21xOg9U=)
3: T6VYQnhnQYETwVj8BZYLRwwLS3U.roa (hash: C4QUjsV9O/nqAXRjoFy9pa8X3S9h9F1PXPJew5ITvec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:01:8b:98:9f:25:18:88:8b:fd:f7:a9:6b:11:9b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Aug 4 09:01:20 2026 GMT
Not After : Aug 5 09:01:20 2026 GMT
Subject: CN=0d8786eeebf43c7aa41edff80664f4eb68b9b999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e7:38:f0:86:32:83:71:b0:b8:9c:d7:34:db:
53:f7:4b:0b:c9:38:25:c6:12:d8:7a:0f:8f:4f:8b:
cd:e3:d8:ee:75:03:0c:20:d7:49:1b:8d:28:3e:2e:
20:02:b1:d2:11:48:70:1a:02:d9:5b:30:eb:8c:b2:
09:e5:3c:d7:56:ab:fc:b6:c3:3d:32:93:0b:18:02:
6b:c3:38:24:81:e5:03:e7:fd:62:9b:9c:0e:a2:10:
c0:99:4a:b5:b1:9a:3f:7e:53:a0:75:e4:9b:67:48:
13:b7:f1:88:38:c3:cf:98:45:b0:9f:c9:07:f6:fe:
fc:83:58:c6:d5:22:dd:48:58:38:8f:9d:d6:0e:d2:
43:2d:ed:ee:10:06:98:49:a7:c1:36:4c:b6:05:5c:
9e:f9:7d:11:ff:85:69:cc:a5:cd:73:2d:4b:ef:4b:
ca:68:c0:dd:f4:dd:b3:f2:1a:a4:02:e5:82:ad:b4:
d1:71:5c:54:a1:39:f3:cd:f9:95:d6:b2:7c:66:74:
f8:85:43:72:a2:7e:59:6d:72:b4:a3:14:97:83:67:
61:8e:21:82:80:bc:34:48:54:ca:26:d1:b9:5d:fa:
14:c5:59:fd:d4:2d:90:b8:0b:76:2e:bb:77:0c:26:
ff:ee:ae:5f:9d:2a:7c:6e:f8:13:f9:07:ac:3d:d2:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:87:86:EE:EB:F4:3C:7A:A4:1E:DF:F8:06:64:F4:EB:68:B9:B9:99
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c6:14:39:e5:a3:eb:e6:95:b7:6e:0b:e7:c2:cb:4b:26:f4:
9c:1b:b7:11:13:66:e3:84:62:9f:2d:be:ef:4e:ec:72:39:c6:
4f:29:33:a6:d8:bc:20:35:e6:6b:ac:59:36:04:00:d4:e3:dc:
ba:c0:d1:3d:82:ea:a6:22:c3:b0:5b:b9:4e:5d:ab:b0:29:ea:
18:d3:ad:56:db:07:3f:e5:6f:c8:c8:93:1d:e1:01:db:3a:a6:
45:cb:bb:a9:e5:1c:9f:69:5b:07:7a:7e:4d:e1:19:d3:32:09:
85:f8:52:f1:a5:e5:d4:7b:c4:5c:09:76:be:e2:1d:29:06:ff:
70:05:23:b5:49:9f:91:75:84:09:b2:c9:07:fe:eb:a8:87:6a:
5b:d7:0a:bf:8b:93:9f:f1:8e:c8:ca:3b:b4:54:fb:82:f1:f0:
da:f8:cc:75:66:29:01:d3:45:ad:e7:98:50:5c:41:d1:20:06:
b4:d5:25:c9:68:05:74:0b:c5:f1:93:62:52:91:cf:03:e5:b6:
78:93:a1:f5:cf:be:46:32:42:f3:65:cd:eb:af:cb:0c:09:08:
54:2d:0b:98:28:40:34:c6:a4:2b:3a:3a:21:ef:96:aa:66:22:
df:08:a9:27:a1:9c:3a:bc:77:b0:65:82:7c:22:6c:34:1f:93:
3c:6e:45:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:57:22 2026 by rpki-client