Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: 2Yym55gKAFe/8B17Th1fGOLcJZBVBwT0fNQM6T2E25I=
Subject key identifier: 26:29:FF:6B:8C:3E:4A:F1:F3:3C:83:93:37:93:BE:1F:EF:E2:AC:33
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 01A06E02F18DB595F08B5FD0FF3B37BDEF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 10E6
Signing time: Fri 04 Sep 2026 20:01:21 +0000
Manifest this update: Fri 04 Sep 2026 20:01:21 +0000
Manifest next update: Sat 05 Sep 2026 20:01:21 +0000
Files and hashes: 1: 4yIaOD2NMt2VBGmVwUq_OiRtg_A.roa (hash: kgy/jwMb361XAjDurvjXKgIsxESxjz3mkWg8JfDokdo=)
2: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: aZ72aTVdYlkqFirlPflkyjvwIYVQ4U1uh7n99f2gF9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:f1:8d:b5:95:f0:8b:5f:d0:ff:3b:37:bd:ef:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Sep 4 20:01:21 2026 GMT
Not After : Sep 5 20:01:21 2026 GMT
Subject: CN=2629ff6b8c3e4af1f33c83933793be1fefe2ac33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:0a:4b:ef:a5:f9:6a:2d:48:61:a0:ac:1f:
51:c3:1f:c9:31:9a:3e:bc:94:2a:74:46:84:ce:ed:
c3:aa:77:7f:be:5d:af:2d:4f:6d:63:5a:33:dd:a8:
a0:4f:74:48:be:6a:7f:d7:da:3c:c7:22:0e:7b:0c:
7f:71:11:30:e4:d3:55:c3:59:af:5c:2d:53:a9:a4:
f5:27:88:c1:72:e6:11:d6:89:68:48:2d:51:78:64:
8c:e6:e0:47:5a:b8:31:a3:93:5c:28:48:61:e6:6c:
0d:6c:8b:e8:0b:e0:28:57:65:3a:fa:bd:7f:cd:bc:
7e:d0:33:7a:89:80:e3:c4:34:b8:d1:b8:ae:84:f0:
98:2b:b1:9b:c5:a9:c6:c9:5f:8f:cb:14:6d:7b:cf:
67:05:70:90:31:ef:40:76:0e:b7:38:47:61:78:e7:
7a:51:d2:ec:4f:13:ad:5d:0e:ed:36:2e:9c:59:4f:
e3:b8:84:eb:d0:89:77:04:0a:60:a0:14:3a:d9:b2:
77:d8:80:d0:50:da:5a:a1:1c:2a:db:41:9c:8b:ce:
9e:05:81:ae:ca:21:d0:af:3e:02:3c:89:c2:f8:95:
56:76:14:1a:88:b1:ad:77:fc:1b:2f:a8:4a:67:02:
70:83:60:6c:9c:d9:f6:5a:f0:54:b3:e4:5d:d8:ad:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:29:FF:6B:8C:3E:4A:F1:F3:3C:83:93:37:93:BE:1F:EF:E2:AC:33
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d5:d3:c2:c2:dc:b7:d8:6f:f9:ce:76:15:3f:fa:e3:cd:8c:
53:15:53:86:d0:08:35:b8:5e:cc:45:3c:d0:0b:28:a6:20:94:
f9:a2:9d:cb:52:c5:df:50:56:94:87:c6:5c:83:30:d3:f7:97:
65:0b:2e:27:ba:8c:8a:61:23:d1:ab:9f:d0:fe:46:9f:2f:79:
5e:6e:4b:8e:38:6a:8e:b7:91:fe:15:e7:2b:2e:d8:a8:e0:d2:
6b:47:7e:54:5c:cb:ee:a5:19:33:64:9d:45:0e:9e:00:4e:08:
90:59:74:25:90:07:b3:78:d8:78:99:62:e8:b2:d9:eb:44:f7:
45:ff:07:15:95:25:02:2c:09:10:40:8b:36:87:66:cd:90:ed:
5a:44:4d:70:d6:73:4f:b9:e8:3e:39:28:34:1c:ff:8e:db:d1:
0c:ab:de:c1:59:c8:9e:66:0c:b6:af:0e:24:28:87:04:bc:9c:
85:7b:93:8f:af:71:85:14:10:3c:31:a6:6a:b1:87:1c:52:22:
8c:e5:9b:0e:e0:97:57:1a:71:14:43:c3:58:f0:20:3c:b0:d1:
12:fc:d0:4e:a4:a7:7a:7b:ff:9d:23:eb:0a:60:fe:da:f9:dc:
87:22:20:89:87:47:54:a9:5f:bf:ef:b8:8e:c9:e9:f7:aa:f6:
a0:b8:c8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:47:52 2026 by rpki-client