Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: QI8PAqeJnugvWPJE6YUhx9EvB1Ch208RiEpS544hpt0=
Subject key identifier: 22:FF:08:16:A6:9C:73:1C:63:A0:0C:B3:1E:01:20:4E:3C:1C:D1:E7
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 019E295DC183C170053204A6C958FCA36ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 17F7
Signing time: Fri 15 May 2026 02:01:10 +0000
Manifest this update: Fri 15 May 2026 02:01:10 +0000
Manifest next update: Sat 16 May 2026 02:01:10 +0000
Files and hashes: 1: EWG2pnEixDgrHqKUr2g1EGP2zPY.asa (hash: ZdIG829wBmdAI+Aw8LWYuzyxjjwX6kLllCejRAZydCY=)
2: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: dmdphbVjAb7F5K306dYszy+IGTMyCoGHKgxstKRcqvc=)
3: sfEXc4wY-pXhuYqaE9QZpaIZSqY.roa (hash: njFcyKEx7yKnKI3LIuKB6v9ru42euT2yptaAKjD9IBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:c1:83:c1:70:05:32:04:a6:c9:58:fc:a3:6e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: May 15 02:01:10 2026 GMT
Not After : May 16 02:01:10 2026 GMT
Subject: CN=22ff0816a69c731c63a00cb31e01204e3c1cd1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8b:85:57:61:af:d7:d2:fb:0e:3e:d9:01:0d:
02:14:7f:62:5c:82:89:28:34:74:8c:20:a9:32:f2:
c5:ff:6c:bc:2a:cb:7d:83:5b:15:3e:f7:52:f3:82:
e4:60:e9:26:dd:09:41:da:47:c6:26:5a:18:40:62:
ac:a0:44:46:3c:cd:4e:2a:cd:41:31:11:4b:64:03:
60:f5:59:c3:aa:38:5f:a0:0b:54:59:d9:2d:d5:c9:
61:dc:2d:22:10:36:cf:80:f9:c2:13:9f:05:a7:df:
3d:1e:4c:05:65:e9:a0:13:b6:0e:71:19:17:b3:54:
2a:f7:84:00:9b:dd:7e:30:db:3e:b3:6e:77:d4:ea:
e2:47:b2:2a:d1:93:94:73:81:96:df:62:16:2b:5e:
99:1c:13:ef:cc:dd:f5:54:9c:f6:89:1f:a4:d1:2e:
d9:92:13:9c:d6:ce:a3:aa:9a:40:3c:9c:a0:02:f5:
1c:a3:1e:bc:fb:3a:9a:db:6e:23:3e:ab:b1:ee:21:
1e:9e:ed:40:b2:00:8b:df:ef:0f:44:a5:e1:59:63:
b5:61:8c:56:29:c7:65:0a:a6:09:b8:b9:4c:26:0f:
19:9c:75:96:d9:ed:e7:6c:a2:1d:c0:3b:a5:4b:12:
98:90:c9:4b:55:c6:bd:f1:05:2a:90:a6:a6:2d:a2:
62:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FF:08:16:A6:9C:73:1C:63:A0:0C:B3:1E:01:20:4E:3C:1C:D1:E7
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:23:1c:76:2d:36:70:be:60:3d:e8:c7:b3:91:dd:72:fc:00:
01:50:82:f7:21:34:c1:d2:59:e0:0f:ce:00:97:2b:a6:23:0a:
9a:91:ef:3d:16:1e:6a:3c:98:64:db:e3:16:48:30:fd:22:74:
ae:e0:98:7b:1b:df:37:cc:04:fa:5c:4e:a2:ca:50:28:92:d1:
ff:f8:55:ac:27:03:9f:8b:8d:36:bc:a1:31:ba:7b:6e:45:75:
c3:32:c9:c9:8b:d7:40:51:07:46:19:ff:f5:07:02:fb:ac:f6:
4d:e8:55:fa:40:ed:23:cc:20:d2:e2:cb:aa:65:26:ce:91:3e:
54:0c:f2:05:36:fe:4b:7f:17:5c:47:b4:4e:4c:0a:a9:2b:cf:
a2:65:16:7d:0b:a3:75:ec:82:4c:d1:92:ee:66:36:5c:4e:2f:
7c:5a:7e:20:65:1a:85:57:f4:f7:5b:db:0c:e2:9b:38:98:52:
6c:5a:4d:ac:1f:ef:29:cc:84:be:a2:f9:fb:65:0e:43:9e:aa:
af:a6:98:ff:8b:29:b4:06:eb:7c:8e:ac:30:cc:2e:09:b4:27:
82:31:0f:f2:76:7f:00:39:93:fa:3e:32:e3:b1:25:ec:2d:bb:
e0:e4:ec:0e:8f:9b:64:84:3a:67:9d:c5:9c:6f:4f:54:89:7a:
7e:fc:78:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:31 2026 by rpki-client