Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
File: PSGIrVl7WKqllwA_jwhDSWxsfJM.mft (raw, json)
Hash identifier: 2CCWAy2H1CMnX+LZ6E7n7tdGYZUShBAMljOPt07tXf4=
Subject key identifier: 99:0A:30:07:DD:FC:E2:54:0A:95:90:29:98:DD:03:98:F7:61:ED:3B
Authority key identifier: 3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
Certificate issuer: /CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Certificate serial: 019D28843230471FF2DF89E8ED1B0075717F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
Manifest number: 118A
Signing time: Thu 26 Mar 2026 05:00:45 +0000
Manifest this update: Thu 26 Mar 2026 05:00:45 +0000
Manifest next update: Fri 27 Mar 2026 05:00:45 +0000
Files and hashes: 1: PSGIrVl7WKqllwA_jwhDSWxsfJM.crl (hash: EQ7RfHAGuOc1oiCumophQo5vgR+TX55syy4nOQts+Qg=)
2: waMm6aRoYzmoT03rFXzSaG9sXI8.roa (hash: wCPLOFOiPH4Ub8JICY70w09W8Lg30ExvC/If13jz90k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:32:30:47:1f:f2:df:89:e8:ed:1b:00:75:71:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Validity
Not Before: Mar 26 05:00:45 2026 GMT
Not After : Mar 27 05:00:45 2026 GMT
Subject: CN=990a3007ddfce2540a95902998dd0398f761ed3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:63:28:5d:a4:51:a3:0c:f7:6b:11:98:dc:
7e:77:7e:8c:05:98:8e:3e:56:83:f9:1a:b8:74:b9:
6d:87:d5:5c:ea:44:cc:b9:85:50:7c:64:c1:89:aa:
2c:5c:1d:00:d5:e4:c0:bf:e8:07:e0:0c:ba:2e:1a:
f3:21:36:80:51:02:5b:a6:02:fd:9b:4e:55:1a:a5:
33:1d:b5:de:ae:94:d6:65:bc:e3:37:d4:b4:c9:cf:
6a:45:e1:ca:86:19:30:c8:44:97:c6:59:de:93:52:
3c:67:11:21:6c:92:f6:24:e9:77:f8:ea:8b:ca:8e:
76:37:42:55:d4:28:a4:47:0f:37:dc:33:d3:cd:f9:
f8:80:15:f4:69:06:14:31:71:c8:07:c9:83:0e:40:
a3:d9:df:b5:ba:fe:6b:8b:da:ae:87:86:4a:55:52:
ca:c6:39:0e:49:f2:0a:03:aa:b2:50:38:42:76:53:
0e:5b:2c:5a:96:13:95:f3:fc:49:25:1f:89:82:f8:
01:6c:8c:80:d6:11:ef:0c:22:a8:9b:81:16:13:e5:
43:28:84:81:a1:5c:4b:31:73:75:0d:30:57:07:0c:
72:2d:86:13:40:ff:d3:ac:18:09:32:e8:b2:0b:cb:
fe:58:87:a8:92:e3:b5:32:38:b8:5b:5a:31:bc:28:
d6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0A:30:07:DD:FC:E2:54:0A:95:90:29:98:DD:03:98:F7:61:ED:3B
X509v3 Authority Key Identifier:
keyid:3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:04:ae:2e:81:2d:e3:34:29:49:94:0a:8c:5c:4a:74:15:cc:
e0:d7:8e:89:ca:ec:7b:9b:fd:d2:70:e2:bf:26:df:1c:a7:5a:
37:45:aa:36:68:59:37:fa:85:16:0d:11:de:b8:ca:53:7e:81:
e7:77:85:ae:10:f7:88:fb:a7:d0:87:5b:d6:fe:a5:b3:09:9f:
c1:d3:83:82:b0:51:cc:02:f5:fa:bc:ee:c3:1d:61:b9:53:86:
b9:b8:7b:14:0e:c8:97:11:9a:76:72:9f:4a:ca:56:c1:47:9d:
bb:0d:ad:67:c9:ac:f8:dd:f3:eb:17:b6:e2:e2:9d:95:f1:4f:
fd:be:44:e5:1b:7c:40:f5:25:49:10:05:6a:6a:df:a3:86:f4:
88:e5:f1:c1:72:43:b3:8c:19:f0:d0:8e:91:1c:b5:4d:c9:12:
40:73:4b:9c:58:c8:8b:94:f9:c0:9d:b0:1c:84:d1:27:78:c5:
88:d1:c7:f1:e0:38:37:4d:7d:fc:2e:2e:60:e0:40:c7:35:18:
24:55:f8:c2:1f:0d:d3:d1:99:85:62:0f:99:53:54:78:9f:fc:
7b:dd:d0:1d:d7:08:6a:69:a1:c5:e0:d7:0b:1d:9e:75:f1:8f:
f5:95:3e:af:42:f7:ed:2e:9d:96:9b:70:79:af:02:84:77:10:
bd:e3:40:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:15 2026 by rpki-client