Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
File: PseNgibLWq_xXGdSWvK4q8t7X5I.mft (raw, json)
Hash identifier: Ly1ge+gQXJYdK7A4J3+T0SvjWZMLbpkPGG/SZ5B6tMo=
Subject key identifier: 77:70:AB:43:2A:C2:B9:DA:5E:65:F6:CE:C8:48:47:21:DF:A2:B0:64
Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
Certificate issuer: /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Certificate serial: 019D29CE8169E6FD874272D9C913CC35FCF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 11:01:32 +0000
Manifest this update: Thu 26 Mar 2026 11:01:32 +0000
Manifest next update: Fri 27 Mar 2026 11:01:32 +0000
Files and hashes: 1: PseNgibLWq_xXGdSWvK4q8t7X5I.crl (hash: sAjbqU2cC8F/RkaNm/EXnRuL2ByYLXaZoUaHhdc4CvY=)
2: qKVtlv3W7vjWS1xd7JwxDC1EnCE.roa (hash: pQJ4/lFMndf01cjoPvkJY3R02om+5915006Zk5RIRaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:81:69:e6:fd:87:42:72:d9:c9:13:cc:35:fc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Validity
Not Before: Mar 26 11:01:32 2026 GMT
Not After : Mar 27 11:01:32 2026 GMT
Subject: CN=7770ab432ac2b9da5e65f6cec8484721dfa2b064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:3c:2f:74:1e:12:c5:77:72:0e:01:27:90:
7a:ad:9d:10:fa:c5:35:cb:8e:89:70:ae:22:7c:1d:
5e:ab:8c:ac:32:72:5d:ce:76:14:81:b7:ca:21:ee:
9b:6a:e2:be:e0:b1:bb:3a:31:47:d5:eb:72:ec:1d:
a1:4a:3c:e3:94:57:5a:c5:9d:e7:50:fe:a9:96:ce:
87:bb:fb:a1:5b:9e:8b:45:52:c1:af:34:2f:90:c1:
ef:8f:ab:47:2b:c6:db:98:1a:24:36:21:f4:31:35:
e8:b9:7b:b0:fe:e7:a8:c5:ce:ec:a5:15:4e:50:e1:
1b:d0:93:bd:8e:a6:d4:14:00:e0:9f:0c:32:99:68:
ca:6f:ea:1e:84:4e:60:c1:20:09:20:69:da:b6:f8:
68:7f:3a:81:3f:60:b3:ab:16:43:80:8b:26:45:a4:
56:a1:9b:d6:51:76:cd:ad:26:d9:88:3d:2f:97:86:
c0:58:f6:97:97:ca:ae:7d:e9:fa:58:15:14:f6:0c:
25:9f:4e:66:b5:13:f7:3d:ba:23:6b:d1:ab:43:38:
7f:a2:1f:8c:74:81:eb:eb:63:df:f0:33:9c:54:7c:
21:56:27:fe:0a:0c:5b:c1:e9:4b:02:90:f3:b7:3d:
bd:24:24:78:0a:5f:81:aa:ad:b3:eb:92:5e:9f:72:
93:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:70:AB:43:2A:C2:B9:DA:5E:65:F6:CE:C8:48:47:21:DF:A2:B0:64
X509v3 Authority Key Identifier:
keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:08:6f:7a:fb:d2:f7:d7:6c:b7:a6:b7:6f:d0:2f:74:9d:62:
eb:50:59:5e:0a:80:0a:54:ed:7f:dd:9d:32:f6:a9:cd:c5:16:
53:ba:a7:76:d9:15:82:df:ae:18:d9:9d:45:82:99:48:4e:43:
48:47:a6:29:6a:f9:82:bd:4f:ee:13:d8:6e:00:52:41:40:b9:
d8:07:72:cf:1e:7b:91:50:1d:35:a5:b0:ff:91:2e:e4:b6:13:
ba:24:9b:f9:3a:6b:00:12:5d:0a:7d:d4:e7:a9:c4:15:0a:01:
4a:2d:1c:89:82:5f:ed:68:00:19:ce:91:a9:4c:e2:39:d5:4a:
de:b5:cf:4b:4f:22:2b:3d:fc:2a:90:dd:02:41:2b:8f:8c:99:
37:9d:d2:33:cb:ec:1f:a6:27:d5:a7:5e:b4:f6:0a:32:1c:24:
3a:1c:e3:74:1f:55:e5:7c:07:13:75:92:9c:01:54:c9:42:4c:
24:df:5c:5f:55:57:af:81:cc:76:70:7a:49:cb:aa:f4:4c:8f:
08:c6:6c:18:92:4c:f5:3f:22:4c:78:28:7a:9a:10:f3:0b:0d:
06:52:24:0c:12:51:43:69:21:9b:18:84:b8:34:97:0e:fb:da:
0a:91:82:ad:9b:7e:5a:9c:b9:a6:b3:e5:20:63:fb:d8:6a:a1:
e3:dd:34:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:08 2026 by rpki-client