Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: yiH9fsA3tdn7sE20CWjo2TipVGePNvAC5QfGtTu6y8g=
Subject key identifier: 92:EB:19:99:2F:E5:05:3C:AC:6A:18:01:E5:C1:CC:98:9D:4B:C9:B7
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 01A1788335056CA6D8BDC452E3A21694E3FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 1170
Signing time: Mon 26 Oct 2026 14:00:27 +0000
Manifest this update: Mon 26 Oct 2026 14:00:27 +0000
Manifest next update: Tue 27 Oct 2026 14:00:27 +0000
Files and hashes: 1: 4yIaOD2NMt2VBGmVwUq_OiRtg_A.roa (hash: kgy/jwMb361XAjDurvjXKgIsxESxjz3mkWg8JfDokdo=)
2: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: zsuOfc7+fkqrsd2BABhcLfQiCk8S5xosfWBJ0hCn1ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:35:05:6c:a6:d8:bd:c4:52:e3:a2:16:94:e3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Oct 26 14:00:27 2026 GMT
Not After : Oct 27 14:00:27 2026 GMT
Subject: CN=92eb19992fe5053cac6a1801e5c1cc989d4bc9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6a:e0:b1:32:f0:b4:d4:8a:63:71:80:bd:74:
13:3d:31:68:b4:f0:21:38:1e:d2:2c:ba:e7:b4:67:
f8:97:52:77:1d:55:c8:dc:38:f2:50:4b:f9:8d:4f:
44:f9:18:a0:cf:5b:ba:ae:e0:f7:3c:09:40:1e:c5:
aa:c0:b8:f0:0b:79:60:53:5d:2c:51:e6:fb:a1:8f:
3a:a5:03:94:ca:be:21:4f:60:65:4d:0d:c9:6e:69:
d6:23:44:29:ff:c5:f7:eb:f6:81:8a:6b:25:79:83:
db:fe:80:94:89:d5:cf:1c:85:17:3c:73:86:97:f5:
2a:7b:2e:cb:ca:2a:9d:8e:92:01:f8:7c:bb:84:88:
92:81:25:75:ba:93:fc:ce:90:26:86:a5:80:e1:70:
08:80:d3:0a:62:3f:a9:3e:39:af:64:ff:a3:2a:71:
f1:49:57:1e:b8:1c:26:3b:75:f0:25:81:8e:22:ed:
17:24:7b:d0:17:ee:45:86:c4:f0:c6:cd:15:f2:5c:
23:30:09:50:de:89:52:0c:55:a8:b2:21:42:9f:01:
7c:ee:e1:cd:ed:f9:2e:3d:6f:a0:6d:3a:86:bc:4c:
0e:39:ae:c2:8c:64:83:5f:72:6d:99:06:19:87:00:
e4:08:68:07:34:22:e4:0b:94:0c:88:61:89:2d:ca:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EB:19:99:2F:E5:05:3C:AC:6A:18:01:E5:C1:CC:98:9D:4B:C9:B7
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:38:f0:5d:2f:e7:85:ed:fb:e9:51:e4:30:b5:79:1b:4c:74:
a1:43:da:34:a7:3e:0f:87:d7:d7:dc:00:f2:65:eb:df:92:18:
95:4d:85:de:c8:4b:cc:bd:7f:4b:48:2c:16:f6:a0:a1:a0:cd:
e9:39:dd:05:3c:f7:db:68:d9:4a:93:7f:44:cf:f7:08:ad:3e:
b2:7e:36:34:d5:ad:3b:a9:b6:89:66:b6:89:8b:8a:85:10:66:
41:9d:12:4d:b7:01:9b:1b:15:56:71:55:cb:df:43:6f:52:bb:
4a:82:6d:0f:16:d1:e6:7a:16:d3:4a:d4:5f:03:d1:33:df:75:
eb:00:10:87:a4:26:29:d9:fc:4b:45:10:a3:84:c6:62:87:03:
3e:91:85:ca:32:9c:3d:ee:bc:d5:e2:69:d1:ae:10:84:f6:76:
1e:99:4c:8a:17:79:93:c9:a4:ae:ca:d2:5e:46:4b:09:8f:fe:
f5:84:27:55:22:69:63:66:9f:bc:f6:fa:14:0f:93:9c:ca:16:
f1:de:65:cc:58:2a:3b:1d:c4:d9:fd:16:ad:3c:20:63:49:39:
8e:02:b3:6b:15:6e:a0:92:a0:78:7f:48:59:b1:51:80:38:b5:
91:8c:30:2d:2f:34:aa:4e:1c:56:4c:62:ec:78:d2:53:e2:27:
be:22:b1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:59:10 2026 by rpki-client