Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json)
Hash identifier: W94LpyshUX2YGhjWirr0swz+qvJ5oXDqKlj9j/4rudY=
Subject key identifier: 73:A8:3F:05:08:14:44:54:E8:02:86:21:05:02:A9:31:D0:BE:F4:76
Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Certificate serial: 019D265FA52BF3A67069544435471D87B239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
Manifest number: 15CA
Signing time: Wed 25 Mar 2026 19:01:35 +0000
Manifest this update: Wed 25 Mar 2026 19:01:35 +0000
Manifest next update: Thu 26 Mar 2026 19:01:35 +0000
Files and hashes: 1: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: C5SM1ctZ6nSWPboFz1IeSIxeZf60IDdoyGibJ14a3QM=)
2: jA_MaskNZFY8z3uRE6NiAvucTrk.roa (hash: Vxa7/BRh9g/VVz94ZqeAg8BjOYIzREIfs64pIZKkHnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a5:2b:f3:a6:70:69:54:44:35:47:1d:87:b2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Validity
Not Before: Mar 25 19:01:35 2026 GMT
Not After : Mar 26 19:01:35 2026 GMT
Subject: CN=73a83f0508144454e80286210502a931d0bef476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:26:e9:81:13:76:ec:38:3c:ff:0d:f7:f4:
da:9b:8c:84:d4:f5:94:ed:70:e3:c7:47:92:27:fd:
56:01:c9:fc:21:84:2d:72:8c:3b:b8:bc:97:b2:a8:
f7:e4:8c:67:8b:e5:57:b5:e6:f9:2e:10:e1:50:a0:
78:d4:00:d7:15:2d:bb:77:a0:cb:84:23:b3:53:bf:
72:b9:4f:a9:3d:38:f1:8e:36:f9:b0:f9:da:5b:5b:
20:f3:47:20:8a:db:d4:64:e1:5d:7a:21:65:ce:01:
68:63:b6:97:99:a6:7e:a3:96:c7:3e:f8:b2:9f:15:
b8:b5:df:6f:29:9c:31:03:fe:ed:31:f2:b3:a1:63:
f2:ca:b7:9f:40:ce:73:bd:5f:e0:a4:02:85:5a:22:
b8:ea:fa:df:e5:18:7b:96:d5:e6:f5:54:42:29:cb:
27:e7:d7:44:ea:fc:3f:d3:86:7a:72:05:4f:15:5e:
6b:95:ee:ad:17:8a:2f:43:64:d3:88:bc:b0:13:6c:
ee:89:d7:45:96:41:5e:83:41:15:79:47:dc:98:39:
2d:2b:18:cf:0e:2a:f2:3e:85:c3:b5:b4:ea:ac:e2:
a8:ed:26:bd:b7:fc:8d:e0:ab:5c:c2:99:a7:83:44:
c6:63:63:d5:d8:03:0e:41:96:af:96:1c:63:d8:4d:
03:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A8:3F:05:08:14:44:54:E8:02:86:21:05:02:A9:31:D0:BE:F4:76
X509v3 Authority Key Identifier:
keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ce:b8:d0:31:33:10:59:00:fd:25:5c:90:08:54:65:cf:22:
aa:1d:d7:85:0c:7e:2d:f3:eb:22:1d:aa:f6:47:a7:8b:0a:e4:
22:75:1a:0e:fe:bb:5a:ef:66:b0:0a:f1:2a:fa:5a:ed:dc:78:
35:cb:9d:22:cd:89:b1:ae:ce:7a:b9:90:4b:46:a6:ac:d8:6a:
c2:c3:ab:3c:cd:5e:76:be:1f:5b:64:40:c1:78:98:bd:92:d6:
4a:ce:24:90:51:56:c8:26:3a:40:0c:8e:77:3c:b8:01:99:3c:
67:66:73:b4:cb:14:5c:a4:04:44:75:9e:59:c0:56:5d:28:dd:
46:52:ab:8a:0f:c5:06:14:21:a4:51:0b:1f:0e:d8:26:ed:62:
c8:26:9a:c8:f3:7f:cc:dd:9c:3c:b7:56:fa:a5:cc:a4:50:d3:
b3:36:db:33:84:72:29:c6:46:e8:d3:06:28:12:10:31:ee:10:
85:2a:e9:15:e6:41:3f:f7:2d:79:3b:14:de:fd:66:0d:e8:98:
6b:d7:33:57:6b:48:c0:32:c1:28:dd:3f:fb:ce:11:a5:39:b2:
46:93:0a:91:94:13:33:8c:81:af:03:ee:34:83:e4:e3:49:34:
61:cd:71:0e:a4:01:04:22:13:0b:b3:14:47:cc:62:fb:f3:33:
3c:e6:3f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:14 2026 by rpki-client