Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: 9VAG8Cee6w4h7k3g84t4p64VuuUGl7qr0/6jj7F+6rM=
Subject key identifier: 1F:69:36:EB:CD:B5:EA:68:98:E0:B4:E4:54:B9:C8:22:40:11:3C:88
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 019F86445DC0DC44C57AEFB0C0C664222465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 106E
Signing time: Tue 21 Jul 2026 20:00:55 +0000
Manifest this update: Tue 21 Jul 2026 20:00:55 +0000
Manifest next update: Wed 22 Jul 2026 20:00:55 +0000
Files and hashes: 1: 4yIaOD2NMt2VBGmVwUq_OiRtg_A.roa (hash: kgy/jwMb361XAjDurvjXKgIsxESxjz3mkWg8JfDokdo=)
2: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: 3qqppZ8pA6ltpnMdgftz+5vEyBWK4TwuPlpdcyis+C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:5d:c0:dc:44:c5:7a:ef:b0:c0:c6:64:22:24:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Jul 21 20:00:55 2026 GMT
Not After : Jul 22 20:00:55 2026 GMT
Subject: CN=1f6936ebcdb5ea6898e0b4e454b9c82240113c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:25:93:dd:4e:45:db:5d:72:3f:34:67:96:
18:d1:1c:dc:db:a5:18:fd:8d:9c:9e:12:00:d1:e7:
7b:75:56:39:0e:64:43:b4:84:91:2c:5e:67:49:ec:
b5:91:2d:61:85:92:a6:4b:aa:14:fb:50:e1:e9:1d:
4e:82:ce:f3:0f:fe:4c:2b:cc:79:3d:89:e0:c6:13:
b2:7a:d6:87:34:3c:98:c8:db:c6:88:b6:65:4c:76:
d2:1b:a9:3b:3a:dd:7a:8e:4f:42:e3:67:81:25:e8:
61:7f:b9:19:2f:0f:a4:b8:b4:51:47:07:20:0a:17:
0e:8b:9e:40:fd:a6:53:33:6a:21:b8:e2:cb:fa:c6:
18:ce:12:11:ec:49:9c:4c:64:b1:e8:19:d0:8f:05:
56:1c:80:34:fb:32:71:a4:85:3a:a5:31:a6:95:a3:
ce:73:64:38:9a:ef:6b:35:34:f3:5b:15:8a:88:68:
f3:64:56:2b:5c:5e:b2:a1:40:ef:9a:7a:dc:c2:4d:
d8:60:24:b9:5c:72:f1:6d:b9:bf:c6:70:1d:1d:46:
b3:f6:8c:00:a9:b3:9f:7c:e3:eb:aa:b5:30:73:56:
b4:cc:20:86:98:23:12:14:75:c1:1b:fa:76:fc:91:
bd:04:58:90:70:36:bf:23:05:c0:f2:fa:c3:0d:c7:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:69:36:EB:CD:B5:EA:68:98:E0:B4:E4:54:B9:C8:22:40:11:3C:88
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e0:a8:4c:a4:4a:c9:c0:30:97:dd:38:29:62:9b:aa:5f:46:
03:7f:25:5f:19:72:90:21:3d:b5:55:82:a8:71:18:df:b2:e3:
6f:38:06:39:00:58:8c:7d:a6:43:cd:6f:aa:62:5f:85:cc:0b:
d0:5b:d4:73:39:f4:87:38:3a:ef:34:6e:25:10:c4:94:6e:bc:
fb:bb:03:a4:ab:a8:65:16:d2:f2:de:d9:a2:0b:af:e8:12:b4:
8b:51:3f:5b:29:c3:40:2e:c1:46:5c:bf:8a:ca:1a:63:9b:b6:
04:c5:0b:ff:fe:6d:63:d6:ed:f1:b9:93:e4:f8:ae:76:d8:15:
ce:f4:a6:3f:c2:aa:39:a2:8d:1b:63:82:6b:15:74:a3:41:8e:
23:12:01:b0:db:13:af:28:7d:d7:f7:50:46:99:e6:1b:9a:ac:
c0:a3:77:b2:97:06:24:ae:cf:c9:c6:66:03:fa:e8:e4:3b:7d:
8a:8d:5a:53:82:5c:90:d6:ed:ff:e3:14:e8:99:b2:b5:7e:d4:
f7:45:06:a8:01:7e:ee:68:ba:58:77:86:00:5d:47:e6:52:05:
d3:18:32:61:c5:ea:86:eb:4e:a3:4b:97:70:ff:61:19:4d:d4:
3c:f7:d7:04:81:2f:7b:ee:38:dd:eb:85:1f:ac:0e:4c:32:81:
da:bf:da:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:01:57 2026 by rpki-client