Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: 6btlMelXVfsq3q+dv1tlHWXkLaVkPAv2Qb/jg8wntYs=
Subject key identifier: 44:9D:3B:B5:15:BD:35:7A:89:15:6D:CE:F8:FA:15:B3:5F:88:ED:FF
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 019E91022207E10714D1D8ED6B9CC00A3031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 0FEF
Signing time: Thu 04 Jun 2026 05:01:36 +0000
Manifest this update: Thu 04 Jun 2026 05:01:36 +0000
Manifest next update: Fri 05 Jun 2026 05:01:36 +0000
Files and hashes: 1: 4yIaOD2NMt2VBGmVwUq_OiRtg_A.roa (hash: kgy/jwMb361XAjDurvjXKgIsxESxjz3mkWg8JfDokdo=)
2: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: ZGF4MkzN/qHY1ihRWvPyp+PCUg0WjviXTOqy8OHXZIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:02:22:07:e1:07:14:d1:d8:ed:6b:9c:c0:0a:30:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Jun 4 05:01:36 2026 GMT
Not After : Jun 5 05:01:36 2026 GMT
Subject: CN=449d3bb515bd357a89156dcef8fa15b35f88edff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b3:22:b4:a7:da:84:84:87:b5:2a:3d:26:db:
8c:da:ca:49:43:43:83:17:82:d2:9f:8c:67:c9:71:
3f:d5:1b:65:0e:d0:d0:68:17:3a:2d:8d:bc:74:54:
a5:d6:f9:a5:4b:30:51:63:40:8d:b8:3e:d5:23:63:
06:5c:df:42:b9:06:28:b3:4b:9a:78:28:e3:24:90:
72:bf:db:56:70:42:49:75:bc:f4:1c:a8:01:3b:1e:
bf:0d:d8:6d:86:59:3d:26:06:30:72:39:6d:aa:c5:
bb:4a:56:e0:87:cd:06:e7:ac:3d:aa:5e:38:e2:ad:
64:c1:c2:18:20:61:43:f5:9e:c5:23:70:3b:03:0c:
a7:47:0d:20:df:94:1d:14:85:8c:63:b4:03:06:6e:
5a:da:b2:16:b2:63:ab:65:c9:49:1e:0b:b3:86:34:
7c:cf:8f:96:62:fd:b4:bc:8c:5b:14:1c:99:72:37:
17:8e:7a:02:9d:42:55:c8:e0:14:1f:8d:d3:2d:45:
ef:86:5f:91:33:6c:a6:f3:7c:f7:a8:9f:2f:a4:da:
1b:a5:0f:a7:36:07:65:48:17:76:2f:df:14:54:97:
eb:53:11:d3:45:8e:f5:2b:59:05:59:4e:f2:e1:ee:
50:86:56:b6:02:7b:70:da:7d:f3:c7:70:aa:b8:3c:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9D:3B:B5:15:BD:35:7A:89:15:6D:CE:F8:FA:15:B3:5F:88:ED:FF
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2d:1c:24:d9:bc:96:fe:f6:7d:76:69:72:82:22:d5:d1:a4:
97:20:d4:e8:c4:98:40:c5:92:93:f9:28:31:e1:a5:23:77:b5:
60:9a:db:2f:c8:33:a0:0c:dd:80:0b:78:c8:6f:57:3d:b8:56:
d3:ba:d2:f6:f5:86:aa:41:2c:e9:c4:ec:86:1a:07:24:9e:cc:
11:28:a1:8a:19:dd:07:2e:91:26:cb:f3:32:84:8c:7f:ff:22:
a3:1f:d9:90:5b:04:79:6b:65:80:68:99:59:1d:ce:0c:8f:dc:
72:b2:3c:72:3a:a7:45:29:e6:07:ba:d4:e8:34:c3:68:80:c3:
2d:85:26:c0:8e:43:66:51:22:0b:14:6b:b7:75:5f:0a:e4:0f:
94:29:b7:84:52:0f:4c:4e:52:7b:68:27:d7:40:22:e2:72:16:
d8:49:49:2a:79:0b:85:6f:0a:66:99:66:d6:c7:92:64:91:35:
d4:a5:8f:5b:f5:19:4c:cb:b5:ca:71:77:1f:83:92:54:f3:50:
5e:60:ac:5d:54:7d:37:9f:a2:4b:ec:2f:c7:b5:2d:40:16:3a:
7e:cd:dd:9a:68:f6:57:16:50:51:33:78:ad:3a:90:bf:06:2e:
19:19:cb:0e:40:e6:77:f1:dd:d6:b2:4d:4e:a1:8c:7b:38:76:
d4:d9:0a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:17 2026 by rpki-client