Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
File: Psn7DRNVKq0E86qutY1N1OfPQPA.mft (raw, json)
Hash identifier: do4kH78A2CnU1GKhFopN/7MYVymiMxB+gD6QcSDtFUI=
Subject key identifier: 2E:EA:C8:7D:77:4A:2B:41:7D:37:6C:F0:A2:F8:BB:78:E7:BC:26:18
Authority key identifier: 3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
Certificate issuer: /CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Certificate serial: 01A180ABC3E63B495AE0461F12C55F020C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
Manifest number: 1ACC
Signing time: Wed 28 Oct 2026 04:01:42 +0000
Manifest this update: Wed 28 Oct 2026 04:01:42 +0000
Manifest next update: Thu 29 Oct 2026 04:01:42 +0000
Files and hashes: 1: 0NnQ6CmrMCqMwE4mOtRw-a44dsw.roa (hash: TDRg0BsJgLqYwmE7Ufn9LFqM+sISiM819H/0xE9q97Q=)
2: 89gAXlmOp4s5pcIUP0Qh2jRO2ho.roa (hash: +R39xsw0TMLfUYX3g2vNYR+A7feupsksUHvMB8jY4CA=)
3: Psn7DRNVKq0E86qutY1N1OfPQPA.crl (hash: 5+C8sgxSZtSUZ0tIAn8FJj5ip4Srr5AdrNIjfCw4TLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:c3:e6:3b:49:5a:e0:46:1f:12:c5:5f:02:0c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Validity
Not Before: Oct 28 04:01:42 2026 GMT
Not After : Oct 29 04:01:42 2026 GMT
Subject: CN=2eeac87d774a2b417d376cf0a2f8bb78e7bc2618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:15:74:06:17:bc:80:2a:2e:d7:22:6a:a9:
61:2f:97:3e:9b:1f:46:7a:a4:87:df:79:15:b1:11:
32:9e:86:54:66:19:a7:e1:72:7c:d4:fb:69:08:2c:
ca:c8:5e:0a:e2:f9:35:c3:9e:35:70:b4:34:88:fb:
dc:1b:05:86:45:1d:be:8e:39:90:54:2f:50:fc:b5:
3f:ce:92:ce:d6:c6:c7:6e:57:96:7c:df:f7:4a:0f:
31:80:ee:e4:ce:76:99:da:52:c8:4e:c5:c4:54:67:
fa:81:6d:c5:21:c9:ab:be:97:be:a1:01:3b:31:0b:
35:f5:2c:55:79:ec:7e:ef:c5:b9:9d:27:59:35:fb:
05:55:fc:6e:71:46:33:52:cb:93:e4:7a:76:cf:a5:
6d:c5:ba:6a:29:ce:80:3b:f0:83:87:29:02:d3:e6:
fe:66:a7:69:3a:87:72:0e:8d:55:2b:bc:ad:b0:81:
c0:88:23:5d:6b:c1:c8:50:50:a3:07:a8:87:48:0f:
b3:cf:85:9e:a4:e5:c9:1d:fd:d2:af:87:7f:f5:44:
57:6e:f3:35:b2:b0:2a:20:3a:4c:eb:37:54:85:64:
f8:2c:8a:88:ff:45:2b:6a:08:9c:24:2c:bd:5a:41:
b3:fc:c9:54:f9:59:e1:54:cb:d0:c0:e5:81:10:c9:
53:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EA:C8:7D:77:4A:2B:41:7D:37:6C:F0:A2:F8:BB:78:E7:BC:26:18
X509v3 Authority Key Identifier:
keyid:3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:56:7e:cf:e8:94:c7:25:28:d9:08:32:20:d8:f9:4b:ac:15:
50:07:b1:35:37:a6:5c:bf:c0:30:5d:e5:f9:2e:9a:3c:3a:b7:
6e:73:7a:df:e2:49:dc:20:4e:4e:24:5c:b0:ba:94:0e:47:e5:
f4:97:85:4b:ad:78:fc:f5:ee:dd:c1:f9:04:3e:f3:a5:a0:19:
b9:f6:e1:99:4f:a2:37:d0:86:7b:7c:fe:7a:70:2c:9f:79:da:
cb:39:6d:d0:e9:85:75:bb:57:a9:a8:8a:48:b3:0c:98:3f:78:
2c:97:db:c1:1a:81:d5:9f:4d:4d:6a:f3:13:85:cf:22:c2:1f:
50:56:91:3e:5b:2f:72:56:cd:d3:07:6a:c8:9a:00:ad:a1:9b:
80:d7:6d:ce:1c:65:22:bb:4c:d8:98:06:b3:5c:65:85:4c:5b:
dc:07:95:90:07:e1:f5:c1:d3:9d:f6:68:cc:64:48:e6:75:1b:
28:c2:67:94:8d:1d:83:c6:2e:58:ac:fe:45:80:e5:4c:67:63:
0e:fa:6a:d8:2f:11:00:2b:25:18:52:a4:45:03:82:7b:df:1d:
1d:4c:e3:7e:66:0f:e2:71:18:d8:57:f4:c7:df:b7:b6:74:74:
bd:0f:aa:47:9e:10:6f:d5:fa:58:54:37:bc:45:02:44:1a:bf:
b8:9f:5a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:54 2026 by rpki-client