Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: pyiVVWSg4szXUdu6BM66tCfqK7fX0F1np5QD4UA8RzI=
Subject key identifier: B4:61:D2:63:30:94:89:2F:69:71:4C:AC:DB:79:86:E4:C8:13:FC:3C
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 019D10E9E3169C11BFE086E4D3D2144588F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 1243
Signing time: Sat 21 Mar 2026 15:00:56 +0000
Manifest this update: Sat 21 Mar 2026 15:00:56 +0000
Manifest next update: Sun 22 Mar 2026 15:00:56 +0000
Files and hashes: 1: LDms8nxe60K6COjjp_csNfhmghs.roa (hash: Q5tvWtDVNBkz/BRp4dl8220S6HSORZZf3f/jyOpji8U=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: EDsu+oBiaAmQT+5s/bdi7xfuGMVC5J+o2ZM3X+HyLDc=)
3: T6VYQnhnQYETwVj8BZYLRwwLS3U.roa (hash: C4QUjsV9O/nqAXRjoFy9pa8X3S9h9F1PXPJew5ITvec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:e9:e3:16:9c:11:bf:e0:86:e4:d3:d2:14:45:88:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Mar 21 15:00:56 2026 GMT
Not After : Mar 22 15:00:56 2026 GMT
Subject: CN=b461d2633094892f69714cacdb7986e4c813fc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:c2:fc:8d:e1:ab:bf:cb:80:8c:1e:29:54:
a3:ae:1d:63:68:54:55:fa:3a:41:2c:56:51:ab:0b:
4d:02:45:f0:88:a3:bc:f6:ac:79:03:5b:cd:db:f8:
e0:99:6e:51:a4:72:3f:1a:8a:0a:b8:da:50:e8:f1:
97:d6:87:0a:e5:bd:95:a9:f1:db:05:84:7e:75:f2:
9e:74:ce:17:09:e6:ad:bc:e0:95:80:62:af:f8:64:
00:ab:50:26:aa:a4:50:f8:a9:f3:42:ce:bb:a3:9b:
05:d8:b1:c6:b9:33:38:fc:c0:7d:67:bd:7f:71:e6:
84:05:cd:cb:80:41:68:13:08:8d:31:eb:a7:ae:5f:
6c:6a:39:55:56:9f:be:09:bf:65:5e:6b:92:df:15:
28:42:51:8e:28:65:4b:a2:d2:28:f3:96:c5:8c:f5:
ed:36:d9:00:45:89:eb:2f:24:8b:08:79:d3:fe:76:
2e:2a:05:85:ce:ef:25:96:4a:19:88:b6:f4:30:a8:
7d:fb:6b:45:0c:6d:98:f8:27:7b:f1:7c:d1:2a:f0:
28:5e:10:82:b3:cd:4e:bc:ce:3f:d1:87:ca:d7:92:
9a:b6:b5:02:40:6d:83:c1:ec:27:a9:cf:ef:54:08:
8e:2f:73:45:a8:d4:cb:ba:48:72:a0:5a:6e:50:e0:
98:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:61:D2:63:30:94:89:2F:69:71:4C:AC:DB:79:86:E4:C8:13:FC:3C
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0e:cc:01:04:8a:62:cc:cc:d3:29:ba:ad:0b:ef:b6:98:df:
35:eb:1e:31:8c:a4:2a:85:69:18:84:3e:5a:43:9c:92:6b:f5:
76:b7:ec:a3:a7:29:af:b8:56:38:18:9a:18:0a:44:c2:8d:22:
7d:69:4f:34:93:5c:1b:56:3b:e8:ee:c5:01:13:3f:46:72:de:
a7:4e:20:03:f3:70:0a:75:e5:de:23:56:36:3d:51:52:0a:65:
db:f0:ee:8c:18:8a:8b:87:9b:94:69:4f:bf:67:33:05:c3:79:
ad:6b:57:6a:95:d2:ef:29:c9:27:8d:18:49:1c:3e:12:56:ce:
93:9a:76:9d:34:f1:67:06:39:97:14:db:45:c6:b7:f6:80:ec:
a0:ab:03:b7:54:0a:07:7e:1e:ef:d3:fb:40:3e:5d:b9:ec:60:
d7:a8:59:46:64:62:8f:71:13:5f:06:f4:3b:bd:75:43:ee:ef:
ff:79:a3:57:21:bb:5f:d5:2c:11:d5:06:70:f4:f0:59:b4:27:
66:c9:35:63:f6:9a:05:f7:b6:e3:e8:31:4a:fd:4a:47:69:e8:
61:a2:9e:f7:17:54:66:e7:a6:eb:f1:4c:ec:34:4c:3c:e0:27:
88:a4:4a:8a:fc:89:79:89:a2:8a:01:f6:04:d1:b3:06:ce:64:
b7:74:50:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 18:39:30 2026 by rpki-client