Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
File: pszH03YZ_dof84uT_s5gq9SYq4Q.mft (raw, json)
Hash identifier: qgel4WZCEhUqncg/vR6Cwub17HRgf69IAXKtM/Pms8A=
Subject key identifier: 66:89:26:E9:24:10:41:3E:CE:D1:A4:34:D6:1F:84:8D:88:70:1F:97
Authority key identifier: A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
Certificate issuer: /CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Certificate serial: 01A1A8CB5366E43F430201ACEAE7ADE2F0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
Manifest number: 03D5
Signing time: Wed 04 Nov 2026 23:00:59 +0000
Manifest this update: Wed 04 Nov 2026 23:00:59 +0000
Manifest next update: Thu 05 Nov 2026 23:00:59 +0000
Files and hashes: 1: cNWWHlQTLoBnWDX0Cr-HJhDwkyQ.roa (hash: RBDJxnmtcnqGTkRo8S/I5iM/CbwoBW03aRJgb8eIgr4=)
2: pszH03YZ_dof84uT_s5gq9SYq4Q.crl (hash: 0g2H7mH7mOTUWMGCIRnosdJI4QQxCJYDVZ06n856TPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:cb:53:66:e4:3f:43:02:01:ac:ea:e7:ad:e2:f0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Validity
Not Before: Nov 4 23:00:59 2026 GMT
Not After : Nov 5 23:00:59 2026 GMT
Subject: CN=668926e92410413eced1a434d61f848d88701f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:1a:5b:bb:10:b9:6d:a3:54:f8:23:a3:ba:
fd:10:63:91:94:28:c0:a5:6f:2a:72:56:d8:78:fd:
66:5d:97:dd:c7:8b:03:84:f0:df:24:3e:08:dd:48:
88:97:37:06:d2:59:fb:e5:db:36:01:4f:17:90:5e:
cd:55:b0:18:95:91:db:bd:7a:50:60:28:3b:e0:b7:
39:c6:63:9a:a1:08:68:b1:67:a6:ba:40:c7:dc:34:
8f:0c:77:f6:b9:8e:85:38:53:87:19:71:36:d6:3b:
8c:da:f1:49:af:3c:b1:f7:7f:bc:4f:76:1a:a9:1b:
12:e8:c5:3b:e5:c0:89:8e:99:50:1c:8b:34:30:d6:
d2:cc:94:3b:4d:16:6f:4c:e5:5f:3c:74:4b:45:d3:
6a:40:ab:fb:6b:41:eb:54:ef:c5:ac:5d:fa:ec:f5:
13:0e:7d:a5:1e:55:f4:ac:2d:5f:55:77:f9:20:60:
d6:7a:a3:9e:e5:a8:0e:ca:07:ef:93:70:35:bb:43:
cf:99:6c:a1:67:2f:81:8d:43:39:3c:5e:3a:d7:d4:
4c:55:fd:d8:5d:2a:1e:fd:96:f2:3f:97:47:e1:31:
e4:10:64:fc:20:63:17:63:20:d0:e4:7b:28:bc:84:
27:1f:5f:ea:05:c0:3f:70:fd:1a:e6:87:8e:91:3a:
02:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:89:26:E9:24:10:41:3E:CE:D1:A4:34:D6:1F:84:8D:88:70:1F:97
X509v3 Authority Key Identifier:
keyid:A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1c:a6:91:a0:ab:34:09:5e:1c:e7:a2:ef:2f:5b:e3:00:6c:
38:b3:2b:93:a1:d2:f3:63:14:a2:ab:f0:41:3a:d8:3a:5f:2d:
9e:6e:c4:aa:ab:60:cf:6d:ef:37:b8:46:39:c5:8a:56:44:eb:
51:d6:ea:98:41:f7:de:9a:58:91:21:07:27:d2:d4:1c:1d:cf:
16:10:02:0f:ce:8b:a3:2c:3f:12:b3:53:8c:1c:ea:5b:5a:2d:
e8:79:f8:c0:b3:c8:5b:41:9a:15:d7:85:8f:67:f8:d9:a4:8d:
db:3d:a0:41:d4:21:23:2f:65:ab:22:81:35:ac:8f:ac:e1:2a:
5f:23:54:4f:4c:73:da:e7:b1:ba:2b:9f:70:77:05:98:bb:18:
7a:a5:52:f8:1c:84:b8:3c:ab:fc:99:df:13:aa:d1:ce:c6:a1:
ef:79:21:94:70:08:ab:6b:e2:d6:13:4a:d0:74:36:fb:97:74:
8a:39:f3:fd:e2:c7:0b:64:9f:13:7a:d2:b7:16:37:e6:e7:07:
1c:ac:93:0e:8f:22:fd:21:09:6b:2c:df:74:ee:f5:bd:08:41:
5b:ee:2d:e3:b3:ec:11:f6:e1:18:a9:36:a6:c4:fc:4b:8f:17:
e0:f7:fc:30:12:5f:df:6c:29:24:7c:38:39:18:f8:2f:6c:b4:
50:94:c2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:54:25 2026 by rpki-client