Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
File: pstoJGZQvVjCKirgCtBmF4qB628.mft (raw, json)
Hash identifier: 6SvkOt2PpAGfmMk1whcKDHrN7U20WZdJ4Iu+Su2/Yf4=
Subject key identifier: 02:AC:FC:8C:41:87:72:EB:E0:D1:A6:98:24:17:68:FE:11:22:37:73
Authority key identifier: A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
Certificate issuer: /CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Certificate serial: 019E1DC7AF2909928DA54619043CEAD38CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
Manifest number: 1183
Signing time: Tue 12 May 2026 20:01:26 +0000
Manifest this update: Tue 12 May 2026 20:01:26 +0000
Manifest next update: Wed 13 May 2026 20:01:26 +0000
Files and hashes: 1: SNOlYOcqtrnciePvkCUcLJcoUvU.roa (hash: loMPRzn55InS2adOqJYmW2DSfbGu3PbAMnR1VbbSvpc=)
2: pstoJGZQvVjCKirgCtBmF4qB628.crl (hash: L2COmWbvzN0SY4tnbrJWKVGYtK38/idAasaBmHMUsl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:af:29:09:92:8d:a5:46:19:04:3c:ea:d3:8c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Validity
Not Before: May 12 20:01:26 2026 GMT
Not After : May 13 20:01:26 2026 GMT
Subject: CN=02acfc8c418772ebe0d1a698241768fe11223773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:40:9d:a7:66:8f:4d:03:09:48:1c:a7:6e:
cc:b4:11:a7:a9:04:d7:29:aa:4c:24:48:f0:4f:ae:
22:f1:ce:2e:46:a0:28:66:f8:78:43:cc:68:45:24:
90:48:c2:71:3d:cd:6e:a2:17:0a:61:84:9c:6e:7f:
26:fb:85:f9:08:d5:18:61:8d:a3:4d:aa:a9:73:8b:
5c:17:f1:b7:e5:a3:73:99:5f:c5:c1:c0:18:41:29:
01:e6:d4:36:c6:ca:e2:ec:68:e3:1e:c7:b6:a3:a0:
5e:f5:4c:70:95:6e:29:b6:ac:7d:6d:0c:fc:da:35:
52:49:bd:8c:c5:82:97:e6:95:d5:62:0e:75:63:f9:
29:a1:f2:82:6c:13:4d:6c:0e:bb:2e:f4:ed:3c:aa:
e6:ac:4d:b4:ac:6d:eb:15:68:4b:0e:ad:23:ec:ca:
11:63:f3:52:5f:f4:b8:66:34:06:72:3c:53:19:08:
1b:65:17:fd:3f:56:92:0b:0e:03:a7:b9:2e:91:4c:
2d:57:90:0f:d8:7d:b9:5a:78:35:c3:14:2b:b9:68:
99:46:c4:f2:64:03:52:b2:0c:35:32:9e:eb:30:7f:
d3:21:5c:bc:2d:ec:ed:3b:4d:b1:f3:e0:dc:f4:09:
d2:96:33:a6:e0:c1:b0:95:94:06:65:1b:63:5f:b2:
e8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AC:FC:8C:41:87:72:EB:E0:D1:A6:98:24:17:68:FE:11:22:37:73
X509v3 Authority Key Identifier:
keyid:A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:da:9b:af:05:70:e3:05:ed:a3:00:7c:b2:0a:ca:78:9c:c8:
39:17:6c:6e:87:66:c1:22:d2:7c:51:73:6b:2b:e2:f1:fb:76:
00:58:02:5a:a7:45:3e:17:e9:88:d8:5c:91:17:f0:2a:42:d5:
e6:db:de:e3:2f:d3:bd:3e:e1:e2:44:c8:98:48:a7:ff:b7:e3:
01:76:56:19:60:d2:e7:6c:bc:96:ca:82:c6:97:70:b0:c5:15:
7a:bb:0d:db:2c:6e:52:1c:dc:c2:ed:68:8c:2d:79:4d:b4:67:
bc:02:90:4e:46:df:22:29:9c:52:eb:90:27:eb:6c:b9:5a:52:
dc:66:c8:15:24:3c:c4:75:a8:1d:91:83:b3:bd:b1:93:3e:71:
4c:86:17:14:7b:ce:07:1c:8f:a6:62:42:c2:7c:2e:86:0f:c0:
ff:d4:e7:fc:43:46:ff:ba:9e:17:2c:eb:a3:4d:f4:9c:fe:1d:
9f:cb:d0:9e:a1:d2:58:6e:89:dc:6e:cd:eb:96:32:06:ad:c9:
0d:ec:fe:a0:b6:6a:b4:72:0c:29:04:9e:a3:76:0d:4a:ca:4a:
79:20:f8:94:6e:50:c1:48:d8:5c:13:45:89:c2:c5:97:ea:db:
3f:67:53:de:77:76:56:8c:b3:6c:9b:3f:0d:c8:7d:79:00:28:
e9:4b:98:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:32:25 2026 by rpki-client