Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: z/TxOG5LUTA1uMUsLT2nxRmbdZi1j5hiGmSJtDdooTA=
Subject key identifier: 66:6A:65:91:49:BA:FC:D4:FF:59:E9:B3:06:48:8F:33:8D:A3:C0:92
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 019D07B01CDEC4D2C875F068E820FA62570B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 1761
Signing time: Thu 19 Mar 2026 20:01:15 +0000
Manifest this update: Thu 19 Mar 2026 20:01:15 +0000
Manifest next update: Fri 20 Mar 2026 20:01:15 +0000
Files and hashes: 1: EWG2pnEixDgrHqKUr2g1EGP2zPY.asa (hash: ZdIG829wBmdAI+Aw8LWYuzyxjjwX6kLllCejRAZydCY=)
2: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: bKeyIr4pkgQCNmy4PHt4OsM3HeUDnS8491fIjQQIDxw=)
3: sfEXc4wY-pXhuYqaE9QZpaIZSqY.roa (hash: njFcyKEx7yKnKI3LIuKB6v9ru42euT2yptaAKjD9IBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:b0:1c:de:c4:d2:c8:75:f0:68:e8:20:fa:62:57:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Mar 19 20:01:15 2026 GMT
Not After : Mar 20 20:01:15 2026 GMT
Subject: CN=666a659149bafcd4ff59e9b306488f338da3c092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:bc:8e:f0:91:e6:4c:8e:ad:d6:d0:42:4f:
bf:85:fd:31:7b:01:a5:fd:91:de:f7:30:5f:a9:c1:
66:f9:8b:65:f1:a3:7b:f5:81:aa:69:3d:4c:22:3e:
8b:ef:b3:60:9d:a0:e4:f9:b1:c8:4c:cc:27:c1:4a:
67:f4:92:bd:18:59:08:a5:2b:76:e8:37:8c:bd:02:
6a:c0:5c:3d:ab:3a:91:88:ff:cc:88:9e:90:aa:49:
a6:17:7c:24:4d:45:8a:9b:5c:61:44:56:c1:24:d3:
a2:d7:45:53:22:74:45:2a:d7:5f:57:53:a2:5b:b5:
4a:f6:db:bc:d8:3c:8e:e7:2d:3f:96:ec:55:ca:50:
b0:82:0e:6f:ec:1b:85:ff:47:78:25:2e:9c:a7:49:
70:3c:9c:18:f9:36:2e:c4:57:ff:63:ce:86:2f:21:
89:15:3e:a6:4c:76:7b:74:bf:8a:36:49:7d:c8:11:
73:b1:f0:17:00:a5:8b:09:6e:ff:ad:00:46:53:47:
00:8f:a0:37:e2:bd:9d:30:28:06:0e:eb:c0:df:fe:
40:f3:7a:37:ed:73:64:33:ff:b2:bb:52:2f:0a:36:
3a:ff:3c:84:b2:6b:d9:f2:fa:a6:ee:6c:4c:4e:8b:
9b:45:ec:6a:09:ed:99:3d:f8:a6:df:9a:ed:60:f5:
a0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6A:65:91:49:BA:FC:D4:FF:59:E9:B3:06:48:8F:33:8D:A3:C0:92
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:de:18:ff:97:f6:49:a0:f8:d8:29:10:b5:59:a0:d8:a4:a4:
4a:ed:65:73:f5:47:4e:a3:77:b8:05:98:d8:12:96:9c:00:e0:
83:bc:df:9d:31:ef:aa:2f:a5:54:ea:d5:ff:5f:0b:06:33:5f:
de:66:c9:da:a7:b1:e8:e4:5d:29:01:28:c9:ec:06:85:8d:a4:
ed:e3:45:e0:b2:b2:16:66:1e:9c:e2:1e:67:26:a6:e0:02:41:
4a:c6:9f:1e:21:aa:f9:2c:bf:04:14:39:2b:ec:74:b9:21:16:
a2:f5:fd:16:e4:af:b5:85:5f:ed:28:42:5f:70:a9:2d:14:8d:
74:af:c9:fd:f8:ce:29:9b:fd:83:b8:94:b0:de:21:dd:de:d3:
e3:d4:c2:6b:7e:2d:52:1b:95:04:d8:97:1c:16:5b:fe:75:0f:
b4:ac:d3:5d:c2:6c:d4:b9:fe:a0:95:a3:95:13:fd:ce:ec:2d:
f5:bd:e7:92:83:46:ee:f3:7c:d8:7a:5c:46:71:8f:4a:4d:65:
3f:f0:b3:34:04:fc:47:d9:05:0d:91:f1:83:13:be:6c:d5:16:
bd:a1:1c:22:06:9b:da:a6:9d:04:dc:34:bf:20:06:59:c6:9a:
96:58:87:9d:f8:f2:e1:51:77:06:f0:d3:10:35:ac:02:44:e5:
de:0c:69:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 06:06:19 2026 by rpki-client