Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: 0uqtwlVVQCMTv6+1tGOiq+XAYxAXP1wYzVvGJ8ZiygA=
Subject key identifier: 26:98:4C:33:06:CC:19:B7:FF:B6:7C:55:C5:5C:AD:E6:B6:74:8B:CF
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 01A1DF834F4DFD615F9C4C29A2465FC38403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 19E4
Signing time: Sun 15 Nov 2026 14:01:26 +0000
Manifest this update: Sun 15 Nov 2026 14:01:26 +0000
Manifest next update: Mon 16 Nov 2026 14:01:26 +0000
Files and hashes: 1: J7ygwSzolnxGNbzMScyOPU5oo1U.asa (hash: uRkTFamZ6RfUST+pVlAWRJRGt5ZACmghNKXhVG0bm80=)
2: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: aRcXUIN6t1HORSWnml5DG4oSkJ1hL+TT9FLC1+W/Epg=)
3: sfEXc4wY-pXhuYqaE9QZpaIZSqY.roa (hash: njFcyKEx7yKnKI3LIuKB6v9ru42euT2yptaAKjD9IBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:4f:4d:fd:61:5f:9c:4c:29:a2:46:5f:c3:84:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Nov 15 14:01:26 2026 GMT
Not After : Nov 16 14:01:26 2026 GMT
Subject: CN=26984c3306cc19b7ffb67c55c55cade6b6748bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:2b:57:e6:b5:d7:b4:9b:7c:ff:1b:51:bd:
86:c9:8a:43:ad:f7:3a:e1:b1:1a:59:85:d5:54:5d:
8d:be:a7:1c:ec:66:03:18:31:b5:90:be:ef:2e:e3:
da:72:2d:71:d5:5d:08:49:5d:c5:cb:68:06:e3:86:
ed:67:a1:d3:b1:66:36:80:7e:ec:25:e5:2f:c0:51:
c2:e4:3a:aa:f3:cf:ad:8e:e0:30:08:97:a2:d3:26:
e7:b2:f8:5c:3c:2e:23:45:8c:2e:48:de:54:c3:c1:
de:bc:2e:e7:f7:9e:63:f3:8e:d6:d5:77:72:ac:be:
85:85:1a:8b:82:8f:22:f9:36:e6:8b:c8:c7:6d:21:
17:7e:0f:ff:ac:08:bd:b1:4f:ac:bb:f5:24:38:2e:
59:7f:cc:44:1f:e8:b0:78:28:ac:08:29:77:1d:35:
ad:4c:a0:ab:59:b1:3d:1d:0a:e9:c7:7c:7a:9e:59:
84:44:ad:21:28:5b:46:fa:c6:00:7f:fa:c6:4e:8d:
42:d4:02:8a:d7:e7:d0:b4:ea:d3:6a:e4:97:ca:ca:
0a:76:52:23:bf:22:72:1e:ed:b1:05:1b:44:fc:93:
e5:6e:ea:81:38:28:3f:7e:56:83:34:77:51:d4:5f:
10:35:1d:bd:eb:b8:b4:ee:79:2b:ae:a2:7e:6c:cf:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:98:4C:33:06:CC:19:B7:FF:B6:7C:55:C5:5C:AD:E6:B6:74:8B:CF
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6e:3c:c0:3f:13:78:31:e9:75:02:9c:0e:8d:e2:0a:7e:4a:
28:b3:9b:55:5a:60:7c:5a:be:55:7b:1d:0e:ac:65:92:0b:cc:
a9:3e:0f:fb:0d:b3:4a:c2:55:4f:8a:aa:1f:72:d4:81:25:4b:
a3:6d:86:e4:59:a0:bf:f3:07:48:4e:36:a9:bc:09:5d:73:06:
61:4f:95:ec:34:40:5a:18:13:a5:ed:36:52:65:19:11:38:cb:
93:1c:69:90:76:e7:77:42:67:bf:d7:69:ac:7c:69:fe:e1:24:
ba:c1:28:44:b6:f2:e4:0b:62:92:08:d9:1e:7f:27:68:77:d7:
b5:90:47:9b:7e:21:e6:ca:24:09:e0:88:8b:04:d2:8e:02:3c:
68:2a:c9:f6:1f:65:52:9c:3e:f8:d6:4d:e5:9b:1d:48:e5:af:
c4:f3:56:7a:78:8b:68:01:3e:f7:95:47:bf:f7:75:77:36:bf:
fa:80:a6:58:15:3f:83:11:68:25:67:27:7e:fd:21:3d:19:b0:
da:b9:46:c3:e0:cc:bf:52:15:86:0d:8b:2a:75:cd:ea:56:f7:
e7:22:73:cf:d4:9e:bd:d8:a5:72:c3:99:e3:e3:21:fd:b1:b4:
b2:d2:62:6c:bc:c4:b1:fb:c5:34:7b:4c:23:02:0a:5d:49:48:
b8:fa:b5:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfg09N/WFfnEwpokZfw4QDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzE0Y2M2MDdkMWYwMjgzODQ4ZjlhODE1ZGJlNjc1ZTIz
MzlhN2UwHhcNMjYxMTE1MTQwMTI2WhcNMjYxMTE2MTQwMTI2WjAzMTEwLwYDVQQD
EygyNjk4NGMzMzA2Y2MxOWI3ZmZiNjdjNTVjNTVjYWRlNmI2NzQ4YmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+orV+a117SbfP8bUb2GyYpDrfc6
4bEaWYXVVF2Nvqcc7GYDGDG1kL7vLuPaci1x1V0ISV3Fy2gG44btZ6HTsWY2gH7s
JeUvwFHC5Dqq88+tjuAwCJei0ybnsvhcPC4jRYwuSN5Uw8HevC7n955j847W1Xdy
rL6FhRqLgo8i+Tbmi8jHbSEXfg//rAi9sU+su/UkOC5Zf8xEH+iweCisCCl3HTWt
TKCrWbE9HQrpx3x6nlmERK0hKFtG+sYAf/rGTo1C1AKK1+fQtOrTauSXysoKdlIj
vyJyHu2xBRtE/JPlbuqBOCg/flaDNHdR1F8QNR2967i07nkrrqJ+bM8MVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaYTDMGzBm3/7Z8VcVcrea2dIvPMB8GA1UdIwQY
MBaAFD7BTMYH0fAoOEj5qBXb5nXiM5p+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNGTXhnZlI4Q2c0U1Btb0Zkdm1kZUl6bW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83NTRiZDYtZmQ2YS00ZGM2LWE5Mjct
NzY5YTBjNWVlYTBkLzEvUHNGTXhnZlI4Q2c0U1Btb0Zkdm1kZUl6bW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83NTRiZDYtZmQ2YS00ZGM2LWE5MjctNzY5YTBjNWVlYTBk
LzEvUHNGTXhnZlI4Q2c0U1Btb0Zkdm1kZUl6bW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASW48wD8T
eDHpdQKcDo3iCn5KKLObVVpgfFq+VXsdDqxlkgvMqT4P+w2zSsJVT4qqH3LUgSVL
o22G5Fmgv/MHSE42qbwJXXMGYU+V7DRAWhgTpe02UmUZETjLkxxpkHbnd0Jnv9dp
rHxp/uEkusEoRLby5AtikgjZHn8naHfXtZBHm34h5sokCeCIiwTSjgI8aCrJ9h9l
Upw++NZN5ZsdSOWvxPNWeniLaAE+95VHv/d1dza/+oCmWBU/gxFoJWcnfv0hPRmw
2rlGw+DMv1IVhg2LKnXN6lb35yJzz9SevdilcsOZ4+Mh/bG0stJibLzEsfvFNHtM
IwIKXUlIuPq18w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:15:28 2026 by rpki-client