Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json)
Hash identifier: eu4ibt3+C9FEpncTghP9BxtDh2dCKzFhq9JzUp7XStM=
Subject key identifier: 6A:2E:41:3B:C0:59:0E:C7:E7:5D:CE:2A:12:26:F3:01:FE:19:C8:A5
Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Certificate serial: 019CAAC6FD76D9550ED094B764B8761699C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
Manifest number: 158A
Signing time: Sun 01 Mar 2026 19:01:33 +0000
Manifest this update: Sun 01 Mar 2026 19:01:33 +0000
Manifest next update: Mon 02 Mar 2026 19:01:33 +0000
Files and hashes: 1: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: 4CP10tiG/1M/buC3JMjxO0fdVsVza6mnB/U6MY3dFmk=)
2: jA_MaskNZFY8z3uRE6NiAvucTrk.roa (hash: Vxa7/BRh9g/VVz94ZqeAg8BjOYIzREIfs64pIZKkHnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:fd:76:d9:55:0e:d0:94:b7:64:b8:76:16:99:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Validity
Not Before: Mar 1 19:01:33 2026 GMT
Not After : Mar 2 19:01:33 2026 GMT
Subject: CN=6a2e413bc0590ec7e75dce2a1226f301fe19c8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:40:eb:78:bf:a1:59:0d:e5:a6:e7:b6:ba:
8a:20:d9:0b:3f:4a:bc:23:cf:44:77:6b:30:fd:75:
23:77:51:3b:29:00:e8:71:2a:7a:b9:f1:65:a9:ab:
7b:70:32:4b:2c:73:44:07:ee:28:3f:f6:fb:8d:8c:
27:1e:ac:9c:86:55:a0:c0:7b:03:6d:f0:95:be:5b:
47:77:a2:bc:04:40:47:10:aa:f1:4f:01:24:ca:97:
78:3c:9d:3b:fa:1f:3d:bb:13:91:1c:f6:a1:5e:29:
54:07:df:82:88:7a:df:69:10:8a:5c:9d:4a:a5:84:
45:2a:d6:36:21:08:b9:d6:45:ae:40:f5:17:1a:89:
c0:27:fe:7b:03:85:18:e5:5f:90:56:82:f4:ad:f4:
6e:e5:43:e1:a9:da:28:02:06:39:ad:e7:62:cc:54:
aa:da:19:a3:f1:c1:8f:de:69:3e:53:22:96:de:98:
5f:d3:64:d7:e7:8a:84:9e:d1:8e:42:cf:f1:ca:49:
d7:59:73:48:4f:a0:ae:b3:a8:6d:65:69:93:4b:45:
d2:9b:ae:91:9a:c5:92:e4:7a:a4:db:fb:aa:dd:89:
67:45:55:84:86:cf:17:54:57:89:f3:8b:32:64:42:
58:ba:99:e6:84:d2:32:47:47:69:36:a9:54:39:11:
64:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2E:41:3B:C0:59:0E:C7:E7:5D:CE:2A:12:26:F3:01:FE:19:C8:A5
X509v3 Authority Key Identifier:
keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:6f:34:46:37:af:d5:73:e2:aa:d7:5f:00:0f:6f:40:5e:a0:
5f:ac:a6:c6:ce:23:13:0d:28:cc:a1:b9:47:2a:fc:b3:bf:aa:
79:b4:9b:f7:ce:9b:f1:31:be:47:61:c0:ab:2e:90:76:61:8e:
82:56:69:fb:69:be:c5:20:b9:3b:5e:ef:3e:ad:36:38:75:a5:
9c:3a:19:2c:17:6c:e7:21:d5:fb:3b:42:0e:a3:de:54:4a:be:
58:d3:95:5f:cf:a3:5d:d9:ce:9d:3f:3f:91:ec:d9:ff:dd:1f:
14:79:d0:a9:31:9d:9d:45:2d:cc:c0:cf:75:5f:31:77:15:01:
74:57:ce:70:59:cf:fa:8c:30:51:a5:1e:b1:76:ba:96:54:79:
3e:65:1c:15:37:ad:02:10:1b:9c:8d:41:86:06:c6:1d:10:ca:
0d:6d:7c:51:47:93:2a:19:ec:1f:1f:9e:18:6f:da:d6:a4:8e:
4b:32:e8:b9:59:67:09:1f:cb:cd:81:90:ea:f9:64:72:64:c7:
57:f2:a4:a5:2b:02:7c:8f:90:7f:2e:a5:dd:85:ae:9e:d6:7b:
ea:de:14:b4:7c:fa:be:ce:f1:2f:4e:74:84:78:86:bc:aa:3b:
45:85:df:03:ce:e3:ad:51:30:93:1c:69:19:14:39:e0:10:a1:
ce:8c:fe:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:16 2026 by rpki-client