Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
File: PSGIrVl7WKqllwA_jwhDSWxsfJM.mft (raw, json)
Hash identifier: QfUOCTbPypUaUgefsCDGusZCjAV7d1/hGfU8O/Z+XtQ=
Subject key identifier: 2A:F8:68:AB:3A:3F:81:DA:79:98:DA:4A:D8:5A:0D:D2:D7:82:BD:25
Authority key identifier: 3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
Certificate issuer: /CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Certificate serial: 019D37F74144B3744AB33609ED366BB3179B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
Manifest number: 1192
Signing time: Sun 29 Mar 2026 05:00:44 +0000
Manifest this update: Sun 29 Mar 2026 05:00:44 +0000
Manifest next update: Mon 30 Mar 2026 05:00:44 +0000
Files and hashes: 1: PSGIrVl7WKqllwA_jwhDSWxsfJM.crl (hash: KDnAVqyEMg0lTVu4BzgAV4dEsymYnVf8lTXmy7I+7A8=)
2: waMm6aRoYzmoT03rFXzSaG9sXI8.roa (hash: wCPLOFOiPH4Ub8JICY70w09W8Lg30ExvC/If13jz90k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:41:44:b3:74:4a:b3:36:09:ed:36:6b:b3:17:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Validity
Not Before: Mar 29 05:00:44 2026 GMT
Not After : Mar 30 05:00:44 2026 GMT
Subject: CN=2af868ab3a3f81da7998da4ad85a0dd2d782bd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:59:a2:f1:41:3d:e0:65:ff:28:5a:bc:51:e1:
88:2d:95:af:2b:06:7f:7a:cd:25:26:b0:b5:83:bd:
83:01:90:8b:5f:cd:6e:0e:d9:2f:2d:1d:9d:24:fa:
13:83:37:c5:8d:44:c5:5d:2c:11:b6:6a:3e:8b:df:
fc:1b:be:b9:9a:ec:e0:1e:38:03:94:49:bf:07:a9:
4d:14:c8:22:e9:d5:7f:26:f0:c5:13:99:e9:e9:3f:
af:32:54:62:42:1e:93:9e:43:5e:93:c8:f1:67:b9:
fb:5f:43:66:6c:a3:62:a1:91:5f:1f:eb:4f:01:77:
48:ff:69:df:92:5b:75:1d:38:99:aa:b1:12:ed:be:
62:da:62:38:33:90:d6:ef:91:e8:e5:d3:cb:de:cd:
f8:70:a8:09:45:93:88:c1:78:0f:d7:01:98:d9:22:
35:5d:ed:70:36:f2:b3:df:aa:5b:fb:e4:f1:7f:11:
44:b9:56:29:74:5e:78:54:70:85:c8:da:0b:b4:13:
d5:17:1d:22:3e:87:ff:64:f7:5a:24:2d:b0:2d:0c:
5f:69:8c:a0:06:ba:9e:a1:2b:38:42:45:f6:f9:f2:
32:03:95:d5:c4:e2:a2:43:0c:97:b2:bc:d9:5b:a4:
6b:1f:c4:00:c8:2d:53:5c:b8:a2:ee:02:99:b4:d1:
c3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F8:68:AB:3A:3F:81:DA:79:98:DA:4A:D8:5A:0D:D2:D7:82:BD:25
X509v3 Authority Key Identifier:
keyid:3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8b:1d:e4:de:be:95:eb:5f:e3:84:b6:84:2c:4d:4b:f6:6e:
3e:6e:ef:0a:1f:86:9b:c2:95:2c:c5:6b:0c:58:75:cd:e1:2e:
22:b7:40:5b:85:23:a0:5f:cb:e4:5a:69:be:1b:a2:3f:83:5a:
9d:8a:7f:50:ca:9e:37:8b:ce:33:30:76:1d:cb:0f:ce:da:6d:
ed:30:ed:21:55:a7:12:96:b5:8a:7d:46:72:e0:b9:9b:38:3f:
17:ff:ee:2b:11:bc:95:d3:49:85:f2:3c:4f:fd:2e:f3:68:fb:
0e:e7:39:19:b5:5e:8e:8a:7f:d6:97:f0:c8:cb:8a:ee:eb:e4:
39:19:21:9f:07:c8:6e:85:54:d8:cb:4c:e3:e9:35:52:81:03:
05:1e:5a:f6:bb:a8:5b:09:e1:37:5c:13:1b:c8:cc:c1:df:94:
5f:d4:5c:e2:66:38:37:ad:ee:ff:b4:22:77:6d:7f:6f:e8:3c:
5a:4b:89:e5:5a:e7:43:9f:40:b0:30:73:13:2a:7a:40:6c:71:
da:c3:89:0d:8f:4c:53:a8:5e:e9:29:0f:d9:40:e2:a4:e5:31:
70:0a:46:84:dc:b0:19:4e:35:5f:f9:5d:a5:73:a0:bb:d7:4e:
8b:a0:10:f7:73:fa:85:00:d8:79:d7:92:38:89:91:70:e6:9f:
68:2f:5a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:44 2026 by rpki-client