Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
File: Psn7DRNVKq0E86qutY1N1OfPQPA.mft (raw, json)
Hash identifier: LWLn970Ewxt/40c09D7PqVtQMODLl0hySKXBNLfpyA8=
Subject key identifier: 0E:54:F7:56:B0:75:84:A8:E0:71:9E:32:23:11:DC:B7:DC:33:E4:35
Authority key identifier: 3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
Certificate issuer: /CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Certificate serial: 019D284DC91C9A7BC4111A1359BE1AD1B62B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 04:01:19 +0000
Manifest this update: Thu 26 Mar 2026 04:01:19 +0000
Manifest next update: Fri 27 Mar 2026 04:01:19 +0000
Files and hashes: 1: 0NnQ6CmrMCqMwE4mOtRw-a44dsw.roa (hash: TDRg0BsJgLqYwmE7Ufn9LFqM+sISiM819H/0xE9q97Q=)
2: 89gAXlmOp4s5pcIUP0Qh2jRO2ho.roa (hash: +R39xsw0TMLfUYX3g2vNYR+A7feupsksUHvMB8jY4CA=)
3: Psn7DRNVKq0E86qutY1N1OfPQPA.crl (hash: SLyQkHeS5ryNXnZemV9xP3pLyIqA0qXjFYUvO/UbKJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c9:1c:9a:7b:c4:11:1a:13:59:be:1a:d1:b6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Validity
Not Before: Mar 26 04:01:19 2026 GMT
Not After : Mar 27 04:01:19 2026 GMT
Subject: CN=0e54f756b07584a8e0719e322311dcb7dc33e435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:98:12:49:20:a0:54:08:90:01:3e:ba:ee:d1:
27:76:fb:0e:f6:46:76:d1:6d:d6:80:bb:e5:cb:9f:
5a:c9:0b:db:07:21:ab:c3:7d:94:b9:8b:14:c1:a7:
4a:05:99:5a:69:0a:3e:97:d8:d9:3d:ee:77:47:25:
37:fc:b2:d6:17:1c:5c:b9:2b:fd:b2:da:15:14:92:
82:8b:3c:fd:49:58:92:e3:d0:8b:2e:95:a9:8f:d7:
1e:67:59:a1:03:b3:32:fa:ff:4e:5d:05:9b:ff:02:
09:28:f3:40:c5:60:af:f7:7c:89:f1:89:fa:14:eb:
d2:89:66:ca:43:31:2a:51:db:0a:c9:94:63:54:d9:
b5:16:9b:c3:15:2b:1d:39:be:2b:99:a5:26:0f:cc:
57:c4:1f:bd:45:a7:08:51:e8:83:e4:85:2a:17:e4:
4f:4c:e7:91:d9:1a:d2:01:53:80:f2:6d:2f:34:35:
92:5e:bd:a3:70:71:d8:c7:04:bc:32:b5:1b:fe:85:
f3:1c:e2:52:38:84:8a:80:61:de:44:9a:2b:40:14:
a0:f5:bf:9a:e4:3f:ff:aa:d0:d0:01:5a:84:04:04:
60:9c:02:f0:33:e2:7d:12:9a:66:64:69:f1:57:b0:
25:b0:6e:78:fe:4a:5c:85:fe:01:2d:d0:e3:d3:56:
36:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:54:F7:56:B0:75:84:A8:E0:71:9E:32:23:11:DC:B7:DC:33:E4:35
X509v3 Authority Key Identifier:
keyid:3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:aa:19:0b:8f:ae:44:09:b8:b8:08:02:cc:08:64:7c:74:47:
e3:a1:b6:fd:84:f7:46:ab:f0:6f:d4:bd:c3:fb:77:1d:b1:b6:
db:3a:b6:07:91:c0:58:49:07:1d:df:13:a9:69:72:c1:01:a3:
2e:5d:27:36:97:6f:15:41:16:84:02:68:37:8e:66:87:6a:cd:
da:82:2c:e5:e4:45:aa:49:b9:e7:32:e0:22:ce:60:34:79:5b:
c0:6d:e0:6b:7f:79:80:19:94:19:81:4f:2e:6f:c2:c0:85:c8:
84:ee:43:af:b0:11:60:31:21:e0:91:82:8e:a5:e6:de:48:73:
d5:d6:52:5f:e2:31:d4:2e:0e:4a:ad:50:21:3e:2a:b8:78:f7:
4b:47:b6:ea:1d:4b:a9:76:0d:9c:f7:ca:cd:da:2f:64:1f:eb:
f9:d8:4a:33:1e:4a:e5:62:fc:c2:80:ab:fb:16:f2:5f:95:74:
82:0f:32:ed:58:7c:13:70:f0:db:77:35:c5:41:3e:e3:1a:25:
31:86:c6:95:de:bf:7e:da:5b:15:80:66:e0:f7:2e:99:20:e3:
ac:f6:a1:c3:44:e0:c4:e4:1b:ad:b6:9c:70:be:04:bf:c2:db:
a7:15:03:3b:af:3c:94:f1:30:58:dd:c7:e3:57:0e:1c:a4:40:
c5:6c:9a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:04:02 2026 by rpki-client