Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: qivpXxrTR1GaYgy8sWobPh/DbpRyvVoEK0C5eAyNc1c=
Subject key identifier: 5F:09:EF:5E:7E:68:B6:C7:B7:06:CB:EA:C5:FA:D1:60:3B:02:D8:0B
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 01A03E5F96B73DB1A2ED6CA4FF421249F839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 190C
Signing time: Wed 26 Aug 2026 14:00:46 +0000
Manifest this update: Wed 26 Aug 2026 14:00:46 +0000
Manifest next update: Thu 27 Aug 2026 14:00:46 +0000
Files and hashes: 1: J7ygwSzolnxGNbzMScyOPU5oo1U.asa (hash: uRkTFamZ6RfUST+pVlAWRJRGt5ZACmghNKXhVG0bm80=)
2: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: ZYDif+XYAw7TN7e/L5H0u5rFyRarikKipA15vKKuSCI=)
3: sfEXc4wY-pXhuYqaE9QZpaIZSqY.roa (hash: njFcyKEx7yKnKI3LIuKB6v9ru42euT2yptaAKjD9IBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:96:b7:3d:b1:a2:ed:6c:a4:ff:42:12:49:f8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Aug 26 14:00:46 2026 GMT
Not After : Aug 27 14:00:46 2026 GMT
Subject: CN=5f09ef5e7e68b6c7b706cbeac5fad1603b02d80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:40:e0:9c:3c:33:c3:3e:c3:86:9f:a0:06:
2b:d0:a6:3c:47:68:56:38:12:4c:25:d9:ce:52:30:
ca:f4:0b:7f:7f:b5:a6:a2:10:34:fd:8a:13:e8:32:
ee:a1:59:4f:61:c6:10:dc:73:ea:8c:3a:59:c5:35:
72:f6:7d:a3:0c:07:be:c7:c2:27:e6:07:b9:3b:86:
99:d5:d0:b6:ea:45:89:01:8e:32:55:36:7e:81:14:
7d:4f:12:52:d4:94:b4:74:29:90:d4:4c:11:1a:1d:
49:c6:e8:70:d9:9f:7d:4e:78:3f:af:0c:eb:93:d5:
a6:23:41:d4:33:e3:82:7f:9b:a9:c6:41:70:24:29:
f2:1b:b2:d3:03:ef:34:58:5b:e5:e5:ec:ce:c0:e4:
d3:f5:65:00:c3:cc:e0:58:59:bf:5b:80:86:c8:8a:
7d:7e:c1:e2:01:65:7f:33:f2:ad:6f:c9:9e:60:df:
45:de:70:e7:c8:a7:d8:9b:25:26:64:1f:a4:8f:db:
03:5f:ed:b8:8c:27:4f:2c:11:c2:24:ec:26:03:ad:
d1:41:7a:60:09:53:13:5d:d8:90:a0:45:c2:65:6d:
1d:35:db:e9:51:94:96:b9:be:bf:cf:d5:d6:06:a7:
c6:19:34:7e:80:aa:76:f6:47:ee:cf:3c:7b:b7:0b:
3e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:09:EF:5E:7E:68:B6:C7:B7:06:CB:EA:C5:FA:D1:60:3B:02:D8:0B
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c7:61:3e:5c:e3:0d:c8:65:70:8a:9b:cf:83:48:6c:3d:fa:
de:ff:1c:d3:7f:f7:26:1f:2b:75:4d:fc:01:57:50:33:8c:e9:
d4:25:ff:a6:33:c7:3e:cf:74:1b:bc:19:7b:0d:c5:21:7d:35:
cf:fa:b5:ca:ca:4f:4f:e7:ca:e6:26:3d:dc:19:49:c1:5e:af:
2d:e0:73:19:f9:f5:1c:e3:75:0e:58:ef:34:c6:1f:5a:c0:6b:
b1:c0:60:26:6e:fe:ea:c7:97:99:5a:a5:3b:3d:dd:25:40:8b:
2b:54:71:3a:47:90:c6:6c:e0:a8:94:a8:f0:8f:a4:48:bd:21:
e0:7a:9c:bd:b1:89:e1:ad:ad:56:76:10:43:74:fc:8f:a7:1f:
45:76:54:75:fc:8d:2b:04:38:5b:6f:08:ed:60:f7:2c:cb:84:
9b:b3:32:97:39:46:99:8a:e3:36:d5:d6:06:70:1b:a9:97:80:
4c:9b:9b:b8:96:e1:17:61:c3:3e:29:8c:81:f8:57:27:ce:6b:
b6:ca:cc:82:98:ab:1a:d7:79:2f:f5:20:ec:e0:93:94:26:a2:
0b:14:22:cd:a2:fc:32:a9:6a:72:88:f8:80:9e:20:11:ab:b5:
02:a4:95:50:a1:f3:d1:52:32:29:ce:ec:90:5f:fa:bf:cd:c1:
81:89:36:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:06:41 2026 by rpki-client