Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: bBQhiMCUByaPIFoh5qtvVIOPZgrGu8S8u6GHlp2pHUk=
Subject key identifier: 5F:35:03:85:F5:F0:75:9F:E8:67:62:81:F7:4D:40:65:5A:A5:8B:B0
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 019D3752CDCB8486289CCE397D707F716C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 0F3C
Signing time: Sun 29 Mar 2026 02:01:06 +0000
Manifest this update: Sun 29 Mar 2026 02:01:06 +0000
Manifest next update: Mon 30 Mar 2026 02:01:06 +0000
Files and hashes: 1: 4yIaOD2NMt2VBGmVwUq_OiRtg_A.roa (hash: kgy/jwMb361XAjDurvjXKgIsxESxjz3mkWg8JfDokdo=)
2: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: S7ZTsgSvNnOfHNkjAR1iEPPo2k2CMvlq4KONWQyBPxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:cd:cb:84:86:28:9c:ce:39:7d:70:7f:71:6c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Mar 29 02:01:06 2026 GMT
Not After : Mar 30 02:01:06 2026 GMT
Subject: CN=5f350385f5f0759fe8676281f74d40655aa58bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:9d:38:06:8b:84:a6:04:34:f2:b2:cf:33:
a5:bc:b2:48:96:a5:e1:d0:74:fa:d2:75:6b:62:a9:
9e:3f:e4:0d:57:6c:b2:a3:46:89:89:46:ad:e7:21:
10:12:79:f2:7c:aa:da:b8:f1:6f:26:fe:81:6e:3c:
96:8f:23:a6:3d:7c:84:43:b8:e3:b4:24:32:8e:10:
65:74:a3:cf:a9:a3:a4:64:29:3e:ef:f9:19:e5:85:
5f:1e:bd:43:a8:62:29:7b:43:de:9c:fe:c5:99:72:
6b:36:6f:06:fd:92:5c:cf:55:f4:3e:07:8c:62:c9:
73:4a:ee:6c:c3:9e:d1:ca:3e:6c:e8:2b:40:12:69:
24:ea:61:d7:ee:34:99:f8:42:70:ae:51:75:44:d9:
b7:b8:d9:2c:f1:11:16:11:3b:53:dc:6c:e5:d2:5d:
9c:69:73:53:55:79:32:22:da:df:ab:ea:2d:41:37:
e7:9a:cf:57:ea:7c:69:c5:17:3f:69:87:d8:18:a8:
76:ef:e9:48:73:99:4a:5b:e5:82:6c:14:0e:b1:70:
7a:fb:e1:24:8c:e4:d5:19:b7:8d:82:ae:0d:84:d3:
e1:e1:09:09:2f:ef:f6:a8:80:d2:db:bf:c5:61:31:
9c:50:e4:22:32:83:17:ee:93:1c:d5:85:3e:62:1c:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:35:03:85:F5:F0:75:9F:E8:67:62:81:F7:4D:40:65:5A:A5:8B:B0
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ba:08:8e:d1:04:a1:69:61:1e:35:4e:7d:17:9a:6f:01:73:
47:bf:cc:70:18:d7:3f:36:14:f8:c7:ae:b9:f9:e2:99:4f:f9:
94:c6:3a:bd:d7:8a:40:8d:69:a6:5e:9d:8e:ee:46:d7:0e:bc:
01:e3:7d:49:25:55:a2:e6:01:a6:4e:52:4c:bc:a8:a8:96:1c:
a6:31:82:0c:ca:75:65:a6:f1:80:12:f3:9f:bf:7c:45:8a:cb:
12:d6:87:f9:88:20:aa:05:48:a6:00:06:22:0f:96:2f:c5:36:
e7:13:16:4c:c2:9b:0b:b3:7f:04:c0:e6:a0:7a:4e:e8:ed:7f:
1a:7f:a1:12:df:6a:65:16:01:82:a4:65:fe:7a:b2:88:2b:25:
7c:e2:43:66:65:37:4b:8d:15:e5:c7:d6:44:8d:5c:00:e6:12:
e8:c1:64:55:0c:af:78:78:dd:9a:2b:06:25:c1:f0:73:ac:b9:
b7:e8:af:a2:e5:43:87:df:bc:cc:6c:c7:60:dc:f4:32:03:60:
a4:c5:d2:8b:96:73:5b:41:6e:a3:af:1b:93:7b:15:8b:7a:80:
ef:cc:3e:1b:1a:48:34:11:30:0c:b5:c4:20:42:a6:6c:5b:fe:
21:d9:33:bd:26:e4:e8:64:6e:ab:b0:1f:dd:c7:11:8d:6d:44:
f1:8a:5e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:38 2026 by rpki-client