
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: 3tkC/Gf13QRBJyBVrExNtkE1LfyQS7j1K2YTSZyECxM=
Subject key identifier: 99:34:1E:A6:B2:B3:68:0E:A7:CE:05:FD:78:19:53:BB:85:68:94:48
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 01A03C70F22CE7FD443CF30B632061C9A0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 190B
Signing time: Wed 26 Aug 2026 05:00:29 +0000
Manifest this update: Wed 26 Aug 2026 05:00:29 +0000
Manifest next update: Thu 27 Aug 2026 05:00:29 +0000
Files and hashes: 1: J7ygwSzolnxGNbzMScyOPU5oo1U.asa (hash: uRkTFamZ6RfUST+pVlAWRJRGt5ZACmghNKXhVG0bm80=)
2: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: PiwIQNzrg0R5n/MxvdY9F4EnW8UsZ2l2yHclnNSVkts=)
3: sfEXc4wY-pXhuYqaE9QZpaIZSqY.roa (hash: njFcyKEx7yKnKI3LIuKB6v9ru42euT2yptaAKjD9IBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:70:f2:2c:e7:fd:44:3c:f3:0b:63:20:61:c9:a0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Aug 26 05:00:29 2026 GMT
Not After : Aug 27 05:00:29 2026 GMT
Subject: CN=99341ea6b2b3680ea7ce05fd781953bb85689448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:9b:97:a9:a0:57:75:8a:2d:95:ee:82:9f:
ef:12:12:1e:62:57:d9:2e:8a:a8:ad:be:e0:55:c0:
f6:5a:98:7e:c7:5a:d3:66:73:38:43:d4:4c:0d:53:
82:cd:55:f4:eb:53:d5:4a:66:42:81:c0:e3:1c:a2:
57:68:83:49:35:ae:4a:9c:5f:bb:12:d8:84:4c:d1:
75:39:2f:fc:2b:b1:ed:65:07:6a:b1:dd:8c:36:ac:
f6:d1:d4:13:85:c7:70:f4:60:27:90:62:13:d1:47:
63:f9:4f:4a:15:63:e0:c0:75:76:1c:98:ac:07:47:
75:a5:86:5a:8f:10:de:5a:60:38:9a:5b:66:40:95:
ce:9f:48:a5:2b:98:a4:dd:8b:db:bf:a3:a3:df:a5:
1f:76:74:ac:81:d3:05:bd:36:62:9c:7e:9a:cb:61:
14:d0:34:62:8d:32:11:1c:34:fb:b0:db:15:c2:92:
93:24:d8:f2:57:db:0c:b1:b4:fb:c6:2b:84:56:f2:
6c:75:b6:40:6f:e9:6a:c7:27:61:45:c9:c3:c4:f3:
67:66:30:37:1c:a0:77:28:43:39:6e:a5:a9:c1:18:
c2:2f:2b:d8:20:c9:e0:c8:b8:f0:f7:55:bd:f6:84:
fb:fa:5a:1a:1c:34:4a:e9:ea:47:d5:82:c3:89:eb:
77:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:34:1E:A6:B2:B3:68:0E:A7:CE:05:FD:78:19:53:BB:85:68:94:48
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:88:c6:1e:43:de:e1:ce:73:f1:02:1d:80:3d:24:c8:6a:49:
ab:b1:8c:2a:cc:9c:66:fa:28:be:a3:53:90:ad:1a:ce:69:41:
20:54:0d:22:2e:d8:22:50:d2:e4:21:7b:4e:40:d5:92:52:86:
4e:6e:9f:c2:f4:1e:d0:d7:85:9e:e5:b0:af:40:96:92:3e:bd:
2f:c3:51:d5:5b:44:e2:83:fa:3a:9d:08:93:14:fd:6a:06:8f:
12:d0:52:6f:d3:27:fa:3c:95:65:76:9e:b7:f9:d2:29:b2:dc:
60:da:7c:2e:c8:ce:ef:fd:d9:8c:02:54:1e:de:10:10:90:3c:
e8:76:04:05:d7:02:1e:57:35:1f:05:08:99:4a:5a:52:0b:64:
68:3f:79:97:6a:79:df:9a:df:5b:46:b9:a4:b6:f0:70:a5:95:
6c:b7:de:e4:57:9a:10:36:76:ed:e2:be:68:41:3d:bd:ae:0f:
fa:79:c6:1f:6e:94:a3:5b:4d:f4:51:63:e3:8f:fa:f6:c8:a0:
23:b3:10:93:1a:d8:70:2f:8a:93:7a:86:ba:80:26:57:af:21:
43:5b:49:5c:2b:9a:d0:c3:0d:dd:27:01:a5:6f:67:7f:c2:ed:
5b:b2:1c:7b:01:0b:53:46:0f:83:0f:bb:52:4a:fa:c4:22:c4:
c5:18:d6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:04:04 2026 by rpki-client