Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
File: PseNgibLWq_xXGdSWvK4q8t7X5I.mft (raw, json)
Hash identifier: PfXiErsXeBuUtsJIOy5y+9zEPqSmfQatRPdFus2dWDk=
Subject key identifier: C4:F8:41:98:CF:85:E7:24:B4:B3:DE:A6:0B:1D:A9:CC:33:54:C1:3A
Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
Certificate issuer: /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Certificate serial: 01A106932E3E4389C8FD2B1F4CBDB86423B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 11:01:11 +0000
Manifest this update: Sun 04 Oct 2026 11:01:11 +0000
Manifest next update: Mon 05 Oct 2026 11:01:11 +0000
Files and hashes: 1: PseNgibLWq_xXGdSWvK4q8t7X5I.crl (hash: pRenope+ER18jnFc+KaahiyX5A+ciZ0jtV4j7Ff2FH4=)
2: qKVtlv3W7vjWS1xd7JwxDC1EnCE.roa (hash: pQJ4/lFMndf01cjoPvkJY3R02om+5915006Zk5RIRaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:2e:3e:43:89:c8:fd:2b:1f:4c:bd:b8:64:23:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Validity
Not Before: Oct 4 11:01:11 2026 GMT
Not After : Oct 5 11:01:11 2026 GMT
Subject: CN=c4f84198cf85e724b4b3dea60b1da9cc3354c13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:d3:9c:1d:9a:84:c4:70:3c:1f:d8:1a:f2:
04:e3:9f:6f:5e:6b:ee:6e:d5:74:e1:04:4a:e3:a0:
76:5d:e9:7d:cb:64:49:1b:77:6d:97:2a:7a:33:9f:
da:6c:cf:71:b9:d5:12:75:10:23:af:b5:d2:25:18:
15:44:ba:51:da:f2:3e:a4:6e:eb:e5:e3:0e:c7:a9:
d5:bd:18:04:d8:47:77:80:e1:78:43:ba:1b:81:ef:
0b:3d:40:13:8c:65:bf:75:c1:1e:a2:c4:87:51:f6:
20:e6:47:87:36:3c:ea:b1:9a:f3:ca:c2:3c:9b:37:
ea:88:19:a6:1a:ae:b0:31:6a:90:cb:25:cb:d8:d2:
df:11:f8:89:f2:7c:07:4f:76:84:a7:9f:0e:a3:dc:
a6:52:13:d8:de:e4:b6:9c:28:6c:74:a8:c4:e0:6f:
19:16:5d:7f:09:f6:cc:af:23:a2:13:ec:69:56:2e:
34:85:00:b7:9f:0f:7e:a0:92:b1:17:26:d3:f5:64:
93:83:38:61:cd:02:0d:91:3b:b4:df:6c:79:ee:bc:
82:f8:a4:03:28:98:69:9f:3d:e9:60:da:96:c7:f8:
ec:eb:af:52:74:78:eb:c7:eb:87:ca:4c:a5:60:c2:
4a:80:41:c3:1e:53:73:ff:df:97:32:bf:ba:c9:cc:
67:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F8:41:98:CF:85:E7:24:B4:B3:DE:A6:0B:1D:A9:CC:33:54:C1:3A
X509v3 Authority Key Identifier:
keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f2:de:23:07:d3:37:58:e2:87:2c:55:91:49:89:87:aa:9f:
2a:9c:b1:eb:91:47:80:7f:f2:c1:65:42:53:7b:90:97:5f:68:
48:a6:ae:6f:ef:81:92:2f:f8:f6:f8:0d:10:3f:55:5d:0a:7b:
1b:a2:ff:11:3b:27:27:46:2e:ec:59:b4:6f:84:28:6f:f1:73:
01:18:69:56:cc:eb:8a:1b:b8:51:8b:36:8f:8e:e0:00:28:d7:
f3:2f:4d:8f:3e:fa:61:84:eb:8f:62:88:b9:09:4c:2b:1a:e5:
3c:71:75:ba:e1:27:a7:a8:68:f6:3c:4d:a3:2e:1b:b4:88:a4:
45:7c:29:40:c3:7e:48:e5:6b:34:a6:72:6b:25:64:4c:85:37:
3e:00:c7:a1:d3:7f:01:43:c4:4d:84:83:8d:56:1b:52:fb:80:
58:82:63:c3:c2:68:47:19:ef:c6:1f:dc:d2:da:66:9d:30:4e:
48:78:70:9d:f8:38:f7:f9:95:ce:8c:96:7f:99:f9:98:1d:3a:
1f:61:85:d6:66:f4:e1:d2:20:cc:3b:28:7d:f9:68:93:6c:16:
0f:0b:8b:be:69:a0:3c:93:c2:48:cb:80:4b:c8:d8:e8:72:46:
36:86:81:0e:8b:cb:b3:4b:28:59:f0:22:8b:35:64:59:c7:95:
3b:47:59:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:17:37 2026 by rpki-client