Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
File: pszH03YZ_dof84uT_s5gq9SYq4Q.mft (raw, json)
Hash identifier: DlYn14Iqn/ILrvJTGetdnovhD/hWhgbhR3nrjbd+tmI=
Subject key identifier: F5:B7:D3:6D:75:CD:E1:2D:86:E6:F3:B6:B2:4E:63:8F:97:F3:B4:07
Authority key identifier: A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
Certificate issuer: /CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Certificate serial: 019D27DF7A9F361DB466D513972A5F3F22EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
Manifest number: 0180
Signing time: Thu 26 Mar 2026 02:00:50 +0000
Manifest this update: Thu 26 Mar 2026 02:00:50 +0000
Manifest next update: Fri 27 Mar 2026 02:00:50 +0000
Files and hashes: 1: cNWWHlQTLoBnWDX0Cr-HJhDwkyQ.roa (hash: RBDJxnmtcnqGTkRo8S/I5iM/CbwoBW03aRJgb8eIgr4=)
2: pszH03YZ_dof84uT_s5gq9SYq4Q.crl (hash: iOiYbPL7zEFbE4fY+b+iaa9FNuiQYQymEsCvoc/r774=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:7a:9f:36:1d:b4:66:d5:13:97:2a:5f:3f:22:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Validity
Not Before: Mar 26 02:00:50 2026 GMT
Not After : Mar 27 02:00:50 2026 GMT
Subject: CN=f5b7d36d75cde12d86e6f3b6b24e638f97f3b407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:04:56:af:17:27:ec:2e:c9:e2:48:b0:28:
c4:d1:f4:a8:cb:91:32:d5:fb:d4:cd:6d:19:f4:8a:
8e:be:4f:40:33:6c:a3:27:15:ef:7d:95:70:57:22:
b3:1e:e7:92:86:cc:08:17:42:35:fc:ab:7a:6b:21:
7b:9b:97:a3:dc:d3:28:ce:f9:fb:8a:75:e7:64:40:
16:eb:d5:6b:e5:cb:a2:78:33:ea:55:ea:96:87:5a:
26:33:37:34:37:52:47:33:98:9b:59:70:73:0b:e7:
b5:70:ac:9c:4b:d3:2c:c8:0c:5a:f8:1e:3a:6e:56:
00:7c:f0:9d:e6:f4:1f:fb:5f:51:5e:20:fc:f1:83:
72:29:55:60:3d:3c:6c:ed:1a:6f:05:c5:5c:1c:3d:
40:db:03:ba:92:62:be:81:3e:a6:76:1c:62:66:3c:
1a:64:af:59:46:eb:0e:05:49:9f:f5:ea:ef:e1:47:
3d:60:b3:85:b0:6d:78:1b:0d:79:f6:ee:99:30:20:
97:09:a5:27:cf:0a:38:7a:2a:75:7f:9a:ec:93:7a:
a2:46:03:20:7a:a6:58:85:06:d6:16:3a:8b:03:88:
9d:be:56:fd:ff:6d:30:8e:15:bb:7c:a8:4d:25:01:
05:eb:5b:f8:4f:e6:df:79:12:0e:22:2e:0c:ff:92:
16:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B7:D3:6D:75:CD:E1:2D:86:E6:F3:B6:B2:4E:63:8F:97:F3:B4:07
X509v3 Authority Key Identifier:
keyid:A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5c:4a:e3:11:32:a2:53:96:36:55:5d:2f:ea:a1:b5:55:a5:
4a:1f:bc:a9:82:2c:2f:9d:d9:70:16:76:39:eb:d8:60:7d:50:
a2:32:b6:7e:97:38:1a:58:87:50:21:6a:65:d7:a9:47:94:e8:
88:ec:54:ed:c5:be:01:39:fe:be:b2:b2:20:a1:2e:9f:77:88:
31:54:8e:ae:a5:e7:0f:16:3c:fd:1a:b2:3a:57:de:ef:59:aa:
4d:9b:70:d6:dc:b3:70:c6:c6:9f:f0:08:4c:3b:51:5e:2c:13:
6e:10:a9:7d:cc:f7:09:bd:6f:62:ce:93:b3:4b:73:2e:a1:a2:
69:45:d1:bf:24:47:15:ed:10:1b:7d:50:7f:a4:11:3c:e0:45:
fc:73:93:28:be:0f:3a:f5:73:ba:29:8b:8b:47:de:63:da:89:
d9:c6:ad:11:a1:a7:0e:a9:89:da:48:8d:d8:2c:28:2a:8a:21:
01:92:37:f1:bf:64:74:a0:bd:74:32:32:39:e3:bf:97:0d:ef:
b3:a0:24:76:22:e3:b2:77:a3:69:70:1a:4d:f6:81:24:26:2f:
da:9a:4d:5b:31:65:c7:91:28:9f:6d:df:ba:dc:b9:39:ab:9b:
29:67:82:99:8f:24:82:51:8f:2c:de:b9:5d:bc:d7:32:fd:60:
96:81:0e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:38:53 2026 by rpki-client