Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
File: Psn7DRNVKq0E86qutY1N1OfPQPA.mft (raw, json)
Hash identifier: Vkh5xWjUPHllV1uv5FM/lqlrjxnUqXlZ/B8HCMQhS+E=
Subject key identifier: 90:25:F5:3E:F4:67:62:E6:CB:17:20:E2:06:28:83:BB:65:82:06:95
Authority key identifier: 3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
Certificate issuer: /CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Certificate serial: 019D39AED7A0CF9777ABA8DD71E07CA6C316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 13:00:52 +0000
Manifest this update: Sun 29 Mar 2026 13:00:52 +0000
Manifest next update: Mon 30 Mar 2026 13:00:52 +0000
Files and hashes: 1: 0NnQ6CmrMCqMwE4mOtRw-a44dsw.roa (hash: TDRg0BsJgLqYwmE7Ufn9LFqM+sISiM819H/0xE9q97Q=)
2: 89gAXlmOp4s5pcIUP0Qh2jRO2ho.roa (hash: +R39xsw0TMLfUYX3g2vNYR+A7feupsksUHvMB8jY4CA=)
3: Psn7DRNVKq0E86qutY1N1OfPQPA.crl (hash: ZYCp+hRP27NZkL2fM+4IS9I3NYx8/+zHqguJwPuQgKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d7:a0:cf:97:77:ab:a8:dd:71:e0:7c:a6:c3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Validity
Not Before: Mar 29 13:00:52 2026 GMT
Not After : Mar 30 13:00:52 2026 GMT
Subject: CN=9025f53ef46762e6cb1720e2062883bb65820695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:44:4a:2d:24:0a:2c:02:bb:38:c2:21:bc:87:
ec:d9:3c:aa:5b:33:6a:61:5f:91:e3:5b:8d:0d:4f:
8d:26:3c:e6:12:22:d1:3f:7c:9f:39:90:6b:c9:36:
be:cd:a9:a4:03:07:de:97:94:b1:60:89:d7:44:f3:
ac:bf:e6:76:bc:6d:d1:d7:0c:c3:ae:ce:30:5b:df:
16:df:b0:ba:ca:45:57:b3:b9:c5:63:a7:b4:d4:08:
e1:d4:6b:d0:79:45:58:f2:99:5d:ea:3c:f3:fa:cd:
b5:bc:a9:02:dc:0a:f0:0e:10:c8:7b:bf:50:ed:a6:
ff:cc:47:41:4f:12:5f:84:bf:26:5a:5b:36:87:20:
4c:c2:eb:70:a6:aa:9f:83:56:eb:2a:0a:a6:18:ed:
b5:67:c2:c4:ad:1c:01:c5:b1:57:c4:ed:e5:58:eb:
77:b8:83:d1:55:b9:83:eb:02:c4:db:14:8d:5b:95:
6c:aa:c9:7b:2f:f5:19:1a:08:8e:ed:a4:9c:52:13:
1b:39:71:e2:3a:ac:18:c5:d2:df:d4:b1:c1:0e:bb:
d2:a6:0b:75:3e:e1:0b:7d:04:39:b9:08:12:12:b2:
2b:d3:73:71:7d:4c:e9:30:98:05:0b:5e:52:e8:75:
ab:c7:7d:76:26:d9:e9:40:4a:06:d5:43:b6:f6:d3:
36:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:25:F5:3E:F4:67:62:E6:CB:17:20:E2:06:28:83:BB:65:82:06:95
X509v3 Authority Key Identifier:
keyid:3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4d:3a:90:d4:aa:b8:12:d3:54:5a:e7:8a:43:61:28:64:0d:
9c:89:cd:53:22:2d:2d:08:69:7a:5c:a9:19:30:b7:3c:08:e8:
e8:37:a8:cf:9f:60:76:1d:f9:a6:ca:21:4c:1a:70:1f:c0:8d:
6a:22:d3:b0:9b:fc:76:c9:6e:46:31:4b:a3:67:f4:72:4e:83:
ee:16:12:99:c4:76:2c:27:fd:f2:6e:83:79:bd:50:e8:4f:ca:
de:a1:2b:0f:3b:55:00:9e:b7:44:70:cf:e5:5c:c1:a0:d2:63:
de:ce:4d:d5:e2:17:48:6a:21:08:38:df:2a:41:df:12:11:6a:
dd:25:7f:64:10:e1:20:f7:e1:a2:7a:75:10:4d:ae:60:e7:38:
e9:e1:38:ff:fc:e2:bb:04:2e:60:cf:dd:ef:a4:77:93:7d:40:
e5:9f:62:a9:1a:1b:7d:af:dc:13:ae:cd:13:1a:3a:a5:0d:05:
3e:d8:0c:90:60:35:c9:7f:fb:67:6a:4e:a3:e5:91:c9:38:4f:
a1:4f:0d:2d:15:03:c5:3e:68:a7:98:55:88:67:5a:35:c8:70:
20:45:40:4b:2b:95:0b:69:24:8f:ed:1f:10:bb:b0:5a:64:08:
5c:02:72:03:ed:dd:dd:a9:de:52:55:7e:74:88:3d:9b:22:8d:
71:26:e5:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rtegz5d3q6jdceB8psMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzlmYjBkMTM1NTJhYWQwNGYzYWFhZWI1OGQ0ZGQ0ZTdj
ZjQwZjAwHhcNMjYwMzI5MTMwMDUyWhcNMjYwMzMwMTMwMDUyWjAzMTEwLwYDVQQD
Eyg5MDI1ZjUzZWY0Njc2MmU2Y2IxNzIwZTIwNjI4ODNiYjY1ODIwNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kRKLSQKLAK7OMIhvIfs2TyqWzNq
YV+R41uNDU+NJjzmEiLRP3yfOZBryTa+zamkAwfel5SxYInXRPOsv+Z2vG3R1wzD
rs4wW98W37C6ykVXs7nFY6e01Ajh1GvQeUVY8pld6jzz+s21vKkC3ArwDhDIe79Q
7ab/zEdBTxJfhL8mWls2hyBMwutwpqqfg1brKgqmGO21Z8LErRwBxbFXxO3lWOt3
uIPRVbmD6wLE2xSNW5Vsqsl7L/UZGgiO7aScUhMbOXHiOqwYxdLf1LHBDrvSpgt1
PuELfQQ5uQgSErIr03NxfUzpMJgFC15S6HWrx312JtnpQEoG1UO29tM2JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAl9T70Z2Lmyxcg4gYog7tlggaVMB8GA1UdIwQY
MBaAFD7J+w0TVSqtBPOqrrWNTdTnz0DwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNuN0RSTlZLcTBFODZxdXRZMU4xT2ZQUVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82Y2NhYjMtNDc5Yi00ZGE4LWFlOTgt
MmNiNmUzZmRmOWNkLzEvUHNuN0RSTlZLcTBFODZxdXRZMU4xT2ZQUVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82Y2NhYjMtNDc5Yi00ZGE4LWFlOTgtMmNiNmUzZmRmOWNk
LzEvUHNuN0RSTlZLcTBFODZxdXRZMU4xT2ZQUVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW006kNSq
uBLTVFrnikNhKGQNnInNUyItLQhpelypGTC3PAjo6Deoz59gdh35psohTBpwH8CN
aiLTsJv8dsluRjFLo2f0ck6D7hYSmcR2LCf98m6Deb1Q6E/K3qErDztVAJ63RHDP
5VzBoNJj3s5N1eIXSGohCDjfKkHfEhFq3SV/ZBDhIPfhonp1EE2uYOc46eE4//zi
uwQuYM/d76R3k31A5Z9iqRobfa/cE67NExo6pQ0FPtgMkGA1yX/7Z2pOo+WRyThP
oU8NLRUDxT5op5hViGdaNchwIEVASyuVC2kkj+0fELuwWmQIXAJyA+3d3aneUlV+
dIg9myKNcSblIw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:20 2026 by rpki-client