Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
File: PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json)
Hash identifier: dR6NV1l+49prQMib2vwhmIMAAch0auuJXL8eaff4al4=
Subject key identifier: F9:17:B8:64:BF:F4:5D:06:DE:06:E8:97:EC:5B:6E:6A:94:A9:2F:EE
Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Certificate issuer: /CN=3d2384b784f197ea03dac2feda7895fc4b740729
Certificate serial: 01A0B80A0743BF59EDF64756C4B867BD623D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
Manifest number: 1A65
Signing time: Sat 19 Sep 2026 05:00:59 +0000
Manifest this update: Sat 19 Sep 2026 05:00:59 +0000
Manifest next update: Sun 20 Sep 2026 05:00:59 +0000
Files and hashes: 1: 9nNyzPySymEM7sc2oK89zLOdPps.roa (hash: REW3iMc5Rvj/cI6qbWCaSFdTmGA7s4x31HfoeK6bal8=)
2: GTg7W8NKWzw0dLf4M8dHxEchex0.asa (hash: N/dEnbH4PB15J8zC5BacpoiTth6pe2p/5hlRo3rWCag=)
3: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: oSLIBj6K8HVlkH6lUvfPoAPmNnTwMVZV9tnwZn5juXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:0a:07:43:bf:59:ed:f6:47:56:c4:b8:67:bd:62:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729
Validity
Not Before: Sep 19 05:00:59 2026 GMT
Not After : Sep 20 05:00:59 2026 GMT
Subject: CN=f917b864bff45d06de06e897ec5b6e6a94a92fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:e5:d4:1e:23:cf:04:b3:09:b4:9c:4a:0d:
5c:2a:f3:dc:8d:00:44:d5:9d:e4:52:d5:1c:a4:2b:
49:84:89:bb:e3:9a:c3:ff:96:85:a6:68:97:0e:42:
ab:32:60:ab:47:5c:5a:0a:74:31:d5:e4:6f:fe:16:
d7:8b:2d:e7:65:9b:b6:a2:1b:b8:18:1f:03:61:bb:
8f:37:1a:5b:08:b3:06:85:67:c4:27:ef:04:f2:77:
f2:96:48:16:69:f5:1e:70:6d:8f:b2:09:3c:6b:bc:
65:c2:91:19:c4:b5:27:a6:93:70:ec:46:28:7c:9c:
6a:63:f3:cf:15:3f:06:76:33:40:a9:da:61:0f:8e:
63:32:e6:1d:ba:e1:34:7b:2a:31:15:df:43:f7:93:
af:30:74:65:56:fa:f2:d8:4b:10:6e:73:7a:75:4b:
7e:d8:67:45:3d:b6:5b:0c:e1:aa:17:39:89:69:8e:
7f:01:cd:2b:2f:0b:32:39:da:54:f9:e3:50:0b:41:
16:a8:25:f9:c4:76:de:d3:71:c2:8d:f8:20:24:7b:
1a:64:72:0b:02:24:6d:59:1c:15:23:ba:bd:42:5a:
3e:70:6a:04:74:b9:f9:d9:29:db:6f:0c:24:c1:bf:
c7:d3:c7:10:c2:d0:63:48:3f:36:6c:e2:a0:f2:e4:
21:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:17:B8:64:BF:F4:5D:06:DE:06:E8:97:EC:5B:6E:6A:94:A9:2F:EE
X509v3 Authority Key Identifier:
keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:80:06:92:07:73:39:13:15:66:80:2f:96:98:2a:55:01:9f:
e8:0b:14:82:db:13:84:1e:1d:85:17:31:81:a6:3f:f2:73:96:
ec:07:f5:b7:b0:99:da:03:43:22:97:ad:fb:3a:77:f3:9e:21:
f5:ae:1c:66:90:38:ab:48:75:ef:ba:cb:f2:c6:83:fe:93:58:
e7:05:e2:17:ba:ee:3f:af:8d:41:ee:92:ea:b1:f2:e7:77:be:
7a:28:4f:e9:1c:0b:0b:dc:dd:be:e6:77:f8:aa:05:d8:e5:31:
65:9c:96:c4:03:5b:7a:05:00:4e:b9:a2:0b:8a:56:61:fe:e2:
9d:5b:09:78:88:89:b9:01:8a:ee:c8:11:79:18:5d:3d:f3:f8:
35:b8:1f:46:2c:87:fa:8b:4f:07:f3:51:aa:c7:12:4c:6f:d3:
63:47:e3:69:7d:a9:ec:02:80:83:62:6a:69:6f:96:55:c6:1b:
59:85:76:52:b9:b6:e7:42:cd:e8:6d:19:44:4d:8c:f9:e0:53:
9b:cc:4c:d5:fc:6a:97:46:ae:c1:60:dc:08:d0:7c:10:00:82:
f4:b4:ad:36:be:c4:ae:78:e1:a7:df:1f:64:3c:f0:25:71:a4:
70:39:69:db:ed:bb:9a:5c:c5:ec:ee:b1:4f:84:a0:b7:2a:45:
43:b2:20:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:48:18 2026 by rpki-client