Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: AYCS2zNknf/EQmLDi9KgJk7LoWG8FvqmDTDW720Bp0A=
Subject key identifier: E1:FA:40:A1:1C:BD:20:82:12:40:48:9C:E2:7B:59:61:AB:59:FC:FF
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 019EE2549F0EC158701E6CD2EA16282D1D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 1334
Signing time: Sat 20 Jun 2026 00:00:56 +0000
Manifest this update: Sat 20 Jun 2026 00:00:56 +0000
Manifest next update: Sun 21 Jun 2026 00:00:56 +0000
Files and hashes: 1: LDms8nxe60K6COjjp_csNfhmghs.roa (hash: Q5tvWtDVNBkz/BRp4dl8220S6HSORZZf3f/jyOpji8U=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: QIsycw9JN3gzPwrCTw2TOYvGlCkLjv50UD9xupwhw2w=)
3: T6VYQnhnQYETwVj8BZYLRwwLS3U.roa (hash: C4QUjsV9O/nqAXRjoFy9pa8X3S9h9F1PXPJew5ITvec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:54:9f:0e:c1:58:70:1e:6c:d2:ea:16:28:2d:1d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Jun 20 00:00:56 2026 GMT
Not After : Jun 21 00:00:56 2026 GMT
Subject: CN=e1fa40a11cbd20821240489ce27b5961ab59fcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:c8:c8:86:63:d6:d5:bd:a5:da:19:33:b2:
68:e2:5d:bc:b9:29:06:41:c6:38:f8:fe:68:d9:30:
db:c6:4c:02:b1:11:4c:d2:df:dd:64:ad:a0:f8:87:
c5:14:85:c9:4b:21:00:b0:e7:58:90:87:5b:3d:a6:
78:3c:f3:26:a1:53:20:a4:08:74:15:93:5e:ed:31:
18:64:c6:d6:ca:c9:49:d8:34:52:7a:6b:a7:4a:5d:
70:13:25:49:e9:60:86:7e:fb:7e:6b:7e:ba:8f:84:
5a:bf:a3:a2:1e:4b:1e:ce:35:e8:e3:3d:b2:cb:c7:
1e:c5:48:0b:c5:b1:21:ec:32:06:04:45:f6:ac:aa:
3c:5b:96:f4:87:5f:6e:62:10:d9:d8:e0:8e:42:9a:
ff:34:d9:eb:b8:08:34:77:7c:f0:e4:99:6e:29:c3:
a1:73:96:0b:1d:07:4e:c0:97:88:c4:bf:53:65:e5:
d6:58:85:f2:77:09:d3:6a:3a:34:15:93:b4:1e:0d:
5c:ad:74:e7:80:4c:b9:d1:fc:02:24:d4:b5:2c:20:
43:ef:7e:1b:bb:0d:c3:53:30:e4:d5:98:47:65:5f:
ff:07:cb:08:8c:6f:81:58:1b:49:4c:03:68:17:7e:
db:ac:a3:17:22:56:25:aa:e9:6e:a8:09:c3:b4:79:
0e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FA:40:A1:1C:BD:20:82:12:40:48:9C:E2:7B:59:61:AB:59:FC:FF
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d7:e9:e9:8d:02:90:9a:5c:6b:5c:cd:72:a2:28:91:97:a1:
a7:cb:ac:cc:da:b0:85:97:80:ee:e5:75:59:46:94:c9:3a:fa:
1e:f5:1c:07:72:f4:ac:b9:9d:a8:6f:1b:46:ad:ad:dd:fb:e1:
90:0c:89:42:eb:e1:84:f8:88:e0:a9:94:62:76:01:c3:15:ce:
1a:94:c6:1b:c7:fc:97:73:6c:b8:79:29:3b:73:b8:7c:75:31:
9d:5b:be:7d:a3:52:53:8b:9c:aa:bb:0a:14:f1:08:38:71:d4:
ea:ba:06:2c:7d:7f:c1:47:9b:52:8f:5a:5c:c0:a2:ac:7b:2b:
57:dc:b8:89:6f:59:7b:ad:3d:2f:b5:57:b2:42:3e:41:20:90:
d7:55:b2:17:69:5a:70:fc:0f:3e:f9:dc:a9:70:05:05:82:9d:
a0:22:6d:42:78:f1:a8:be:09:ab:21:a1:19:a6:22:45:6f:ba:
6a:31:3b:5f:b2:d7:fa:d7:37:18:51:ab:22:f0:9f:8c:d6:89:
76:44:83:04:3d:23:ce:10:ac:59:fd:43:6a:d6:f7:aa:cc:2a:
62:8c:7a:53:eb:19:74:64:f0:55:98:95:5d:c3:c7:77:89:68:
cc:f0:de:5f:6c:16:38:d3:99:8a:97:85:e2:67:7e:42:2f:93:
54:f9:f5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:03:01 2026 by rpki-client