Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: 3TN5FTjGBEkziALKbJm8BhLGMB4+MUnvYOawAa7wUbE=
Subject key identifier: 18:F3:04:4A:F6:CB:B5:E9:98:4E:D6:83:2F:3E:1B:82:7C:8D:70:95
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 019DF8A883A70D6A91FE6AA422AD11D3BCA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 12BB
Signing time: Tue 05 May 2026 15:01:26 +0000
Manifest this update: Tue 05 May 2026 15:01:26 +0000
Manifest next update: Wed 06 May 2026 15:01:26 +0000
Files and hashes: 1: LDms8nxe60K6COjjp_csNfhmghs.roa (hash: Q5tvWtDVNBkz/BRp4dl8220S6HSORZZf3f/jyOpji8U=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: JliBjiicBaG+veK1w3y93IfrgmJuVN6K7R7mC9cljVw=)
3: T6VYQnhnQYETwVj8BZYLRwwLS3U.roa (hash: C4QUjsV9O/nqAXRjoFy9pa8X3S9h9F1PXPJew5ITvec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:a8:83:a7:0d:6a:91:fe:6a:a4:22:ad:11:d3:bc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: May 5 15:01:26 2026 GMT
Not After : May 6 15:01:26 2026 GMT
Subject: CN=18f3044af6cbb5e9984ed6832f3e1b827c8d7095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ce:c3:eb:72:c8:c8:ff:b9:07:49:4e:79:98:
3f:af:e3:5d:23:97:c5:11:c5:49:1b:50:29:17:1b:
cd:d1:73:2e:42:1e:f7:e4:60:1c:a9:e6:a6:5d:dc:
b3:a0:6e:98:8f:4e:da:94:6b:bd:08:2b:2f:68:b1:
df:c2:ff:4e:bb:83:04:6d:e2:dc:83:cd:82:50:70:
4b:bc:99:58:ec:d9:98:17:ec:23:a3:4a:23:1f:5e:
38:11:5c:6e:57:26:10:6b:f3:6c:77:ce:3f:bb:ee:
92:fe:3d:b5:2b:d9:77:e0:66:e5:76:9d:0b:7c:15:
cb:75:76:7e:0c:56:40:fc:77:51:27:0c:d9:91:fe:
c4:fb:e8:90:fa:9f:17:1c:c9:d5:91:68:af:75:79:
2f:40:d1:74:2e:48:ac:62:71:7e:3c:40:ac:c4:a1:
4a:0a:51:d7:ac:47:e0:49:21:21:d6:32:ed:69:fa:
cf:22:13:64:98:d7:2a:b5:98:2d:98:9d:d9:91:e8:
76:b2:6a:51:e2:e3:f4:29:b7:70:ed:22:ed:5a:38:
e5:4d:4b:14:59:6b:81:33:ff:47:60:a0:0a:60:92:
1f:f9:39:b7:5d:4b:20:b3:fd:08:b3:48:fa:42:8d:
f8:e6:b6:b4:a3:7f:d5:f7:67:e4:e9:00:be:03:5b:
ca:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F3:04:4A:F6:CB:B5:E9:98:4E:D6:83:2F:3E:1B:82:7C:8D:70:95
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:54:62:1e:d3:19:f8:d9:b3:b1:c6:3f:2c:9c:49:b2:3d:70:
a7:17:76:e4:53:ec:27:4c:29:c6:e3:5e:c8:1f:1b:23:3f:71:
29:bd:82:35:fe:12:e9:5d:13:32:91:9f:78:12:7d:4c:26:31:
c5:95:3d:c6:ec:97:f5:3d:12:6f:5b:83:18:e0:6a:1f:68:b6:
91:78:9c:5b:ac:1e:4d:bb:50:55:3e:2e:f2:28:3f:d7:cb:dd:
93:d0:9c:8c:e7:d2:94:d2:bf:82:3f:e8:92:56:f3:55:10:b2:
38:66:53:78:39:ca:3b:d1:73:29:7b:2e:91:ec:09:8e:ee:6e:
05:39:2f:19:1a:c5:17:3a:dc:01:6d:06:59:14:de:19:80:f3:
08:31:75:28:d3:a9:12:af:dd:5e:5f:ad:41:00:6c:ff:e3:77:
2f:8e:9d:4a:fc:9b:81:64:af:e9:ab:9b:9d:47:9f:09:4e:58:
8c:28:1e:e1:9f:18:d9:8d:e5:f5:04:e5:62:e2:c3:34:da:0e:
bd:dd:43:83:99:69:43:c9:cb:7f:3b:39:69:78:f8:18:ad:a1:
a9:42:2c:b4:c0:1a:0e:4f:f9:c2:29:3e:f2:74:c6:53:6f:20:
5b:dd:dc:5a:0c:a2:27:82:27:b3:00:8b:5b:a8:6d:33:ca:86:
32:48:3f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 00:20:50 2026 by rpki-client