Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
File: PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json)
Hash identifier: qfz3nFn6drHgqOMKs4HosfF4RvsG7hPajFGygrtX0PM=
Subject key identifier: 13:63:58:82:32:0E:FE:C3:FD:20:45:8E:29:0A:23:5F:62:FC:18:CA
Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Certificate issuer: /CN=3d2384b784f197ea03dac2feda7895fc4b740729
Certificate serial: 019D3909D58E13641FC24A4860E3BACDB5D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: 9nNyzPySymEM7sc2oK89zLOdPps.roa (hash: REW3iMc5Rvj/cI6qbWCaSFdTmGA7s4x31HfoeK6bal8=)
2: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: XBa/UjfTa8XD7MDTeEz71YNFVpqHHgOvHtf2T3lzPP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d5:8e:13:64:1f:c2:4a:48:60:e3:ba:cd:b5:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=13635882320efec3fd20458e290a235f62fc18ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b4:02:41:99:b8:ed:1c:c5:90:78:5e:d4:34:
d4:4b:80:4a:0d:d1:07:69:19:6d:31:11:7b:dd:8c:
71:03:ef:5e:31:06:49:8c:e8:89:22:32:8b:b4:e2:
8b:53:ad:90:cd:60:9d:24:20:83:7d:d9:bc:c0:25:
a6:ff:86:3e:09:34:02:58:df:06:36:cc:87:a8:08:
cc:56:66:87:08:9d:d0:75:3e:e7:0d:03:7f:56:c2:
9b:75:a5:6d:14:50:05:8f:a1:f7:da:01:8f:6d:66:
27:27:11:2c:bf:d0:a1:91:4b:80:47:98:a8:96:8d:
76:b0:05:95:a0:ca:6c:ed:83:a7:8f:dc:85:27:a8:
76:bb:fd:2f:b5:be:a2:cc:a6:23:1c:83:f9:bd:bd:
c6:98:5e:58:2a:00:c5:ec:8d:ac:8c:1e:0b:57:4c:
6c:50:4b:92:a8:5a:bc:7c:d2:82:a1:c0:e5:15:5d:
84:52:72:7e:93:a5:cf:a7:b8:85:3c:73:3a:5a:90:
c1:43:0b:8e:f2:25:4d:43:43:52:62:b3:71:3f:7a:
1b:53:fb:c4:0b:0b:25:a3:3c:54:c4:b0:e6:09:91:
9b:ab:fd:bf:83:1c:03:dd:2b:c4:8d:44:0e:1d:d7:
56:c4:2c:83:b9:0f:60:f5:17:a6:00:5a:93:68:68:
7a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:63:58:82:32:0E:FE:C3:FD:20:45:8E:29:0A:23:5F:62:FC:18:CA
X509v3 Authority Key Identifier:
keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ae:65:b9:ce:81:21:a6:9f:fa:14:42:98:cc:fe:6e:59:37:
ee:56:2f:e0:3e:34:6d:6b:96:e0:6b:d4:d8:55:ed:32:35:d7:
53:59:1b:97:aa:c4:49:7b:c7:b8:80:fe:6b:e4:ee:0b:36:d6:
b1:4e:70:e2:db:75:53:bf:34:da:e8:e8:65:53:d5:34:47:98:
bc:f2:ec:60:12:1c:91:7d:27:d1:3e:41:07:f5:31:a9:f6:43:
6a:3e:9e:eb:c8:37:53:44:ad:a9:6c:f7:2a:f6:2a:b8:a7:cf:
e2:39:ab:80:e2:b1:52:ce:24:5a:20:2c:01:1e:f3:ab:a1:f9:
3b:fd:29:09:4e:7e:46:03:68:81:4c:c5:40:1e:88:68:38:0e:
7a:cf:8a:4f:e3:59:72:f5:97:bf:f3:0d:ec:1a:c3:c7:1e:33:
57:58:9b:a0:d8:8d:94:b7:c7:74:95:0f:56:a1:01:07:da:ea:
68:42:60:bd:0f:c6:a0:50:b6:71:e4:92:ef:a4:16:2e:2b:7c:
e7:3d:ef:f5:61:24:5b:41:2d:78:6a:3d:82:c4:08:96:76:89:
e5:84:e9:8d:95:0a:e7:bc:37:25:d3:19:5a:80:cf:24:86:93:
93:44:73:25:73:25:03:86:a3:08:43:82:18:9f:72:e3:1f:0d:
8d:75:18:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:33 2026 by rpki-client