Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json)
Hash identifier: +B4tPzz3ICvZbx8pdcDmJMXUqwWGOX+dziZuUx1/iyk=
Subject key identifier: 1E:7C:B1:55:43:AA:D8:E5:75:71:9A:DF:A1:A3:73:C7:C6:69:C1:D9
Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Certificate serial: 019D37C102734528F89681C7154AB4313456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
Manifest number: 15D3
Signing time: Sun 29 Mar 2026 04:01:28 +0000
Manifest this update: Sun 29 Mar 2026 04:01:28 +0000
Manifest next update: Mon 30 Mar 2026 04:01:28 +0000
Files and hashes: 1: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: fhYQGKNdLqRAYZTKLwDcimowWtVrPxESd4qX2QKSiZs=)
2: jA_MaskNZFY8z3uRE6NiAvucTrk.roa (hash: Vxa7/BRh9g/VVz94ZqeAg8BjOYIzREIfs64pIZKkHnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:02:73:45:28:f8:96:81:c7:15:4a:b4:31:34:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Validity
Not Before: Mar 29 04:01:28 2026 GMT
Not After : Mar 30 04:01:28 2026 GMT
Subject: CN=1e7cb15543aad8e575719adfa1a373c7c669c1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:78:5e:e8:0f:2e:ad:56:91:5b:33:40:ba:
b9:10:4d:3d:04:81:40:14:8d:c5:76:ba:66:bc:25:
41:4f:13:5b:ee:65:ff:a2:c3:90:c1:72:3e:15:e2:
2f:ae:e9:e2:11:5b:bf:8f:c0:7d:c5:20:97:ea:bd:
5e:4f:f6:c6:96:ae:14:30:43:8a:ec:5e:34:4c:77:
97:9a:ce:a8:6a:51:d3:e5:7d:be:7a:2d:0e:a7:fa:
b2:d3:db:59:0a:71:eb:83:2a:2e:74:fa:e0:fe:0f:
8a:56:11:35:22:4d:ef:a4:36:2f:07:21:e9:28:f0:
20:d7:24:b6:28:9c:76:77:63:3d:77:bf:c5:7f:6f:
27:37:81:dc:32:0e:a9:b3:ef:50:86:20:95:e1:0b:
97:a1:d8:bf:80:ee:df:f6:a1:53:13:29:1e:05:d7:
50:f5:f8:22:ff:6e:65:96:98:6c:38:22:56:be:55:
67:9c:dd:b1:5f:b8:3e:6b:11:8b:04:60:1d:4e:5f:
ea:d0:52:b3:c3:56:bd:75:60:ed:b5:c1:26:4c:f6:
0d:66:ed:7d:fc:75:0c:d0:82:f1:22:00:7e:51:af:
bd:16:c1:1a:24:e5:ee:f7:f5:11:a8:be:5d:fd:e7:
3b:55:6f:00:bb:98:51:23:e5:e8:14:93:8e:bc:17:
14:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7C:B1:55:43:AA:D8:E5:75:71:9A:DF:A1:A3:73:C7:C6:69:C1:D9
X509v3 Authority Key Identifier:
keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a1:98:96:96:ce:c7:4f:a4:ad:69:02:a7:1d:07:57:fd:ad:
3b:fe:dc:77:72:d8:ee:fd:41:ce:0d:3b:8c:45:5f:e6:95:50:
77:47:9b:a4:a5:a5:b6:c1:f1:91:dd:4e:7c:03:b0:bc:f6:1f:
6d:93:ae:62:62:4c:59:4e:1c:96:7a:f2:81:68:d8:66:44:3e:
f2:7b:3e:a4:15:f5:ee:96:72:19:ea:66:e0:eb:27:6e:e6:22:
d3:f7:34:7f:41:da:16:02:93:7c:ea:fe:6d:64:91:6c:93:7f:
c4:74:fd:9d:38:0e:d3:8a:6c:0a:fe:53:d3:5d:18:e8:c4:32:
34:17:32:d3:71:0d:12:35:5c:22:19:86:8a:79:50:d3:8c:0b:
82:b3:a9:1d:1a:b3:7c:f1:2e:a0:52:9c:30:af:71:97:3e:fb:
77:5a:ac:96:ac:6d:67:9b:bd:00:02:81:73:d5:c4:20:07:8c:
56:d5:a0:d7:15:1b:d9:39:cf:0e:2e:d9:52:9b:c0:43:32:2d:
cf:80:c6:e4:82:64:1a:34:91:ab:8a:c4:be:7d:38:53:98:fb:
a5:62:cd:89:6e:d2:51:e4:03:28:25:ed:0c:f2:16:bb:64:6d:
50:91:2a:14:44:8b:33:50:36:fb:e9:8f:cc:c8:18:ed:1f:83:
31:51:7d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:57 2026 by rpki-client