Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json)
Hash identifier: R5RsYkscsAOhIAjw9ZVqcBbdy0IgJkwnOSDuYIRy7Wk=
Subject key identifier: 54:69:6E:21:FB:14:34:E4:7A:63:A6:57:B9:13:CE:3F:C7:01:0C:61
Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Certificate serial: 019D98506CA79763B92F7E7E3EC9EF9D4AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
Manifest number: 1605
Signing time: Thu 16 Apr 2026 22:01:40 +0000
Manifest this update: Thu 16 Apr 2026 22:01:40 +0000
Manifest next update: Fri 17 Apr 2026 22:01:40 +0000
Files and hashes: 1: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: okfoHUqK8Oy8bcy3fqrrQ7hUxCGEpgCWxx2ABATx+G0=)
2: jA_MaskNZFY8z3uRE6NiAvucTrk.roa (hash: Vxa7/BRh9g/VVz94ZqeAg8BjOYIzREIfs64pIZKkHnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:6c:a7:97:63:b9:2f:7e:7e:3e:c9:ef:9d:4a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Validity
Not Before: Apr 16 22:01:40 2026 GMT
Not After : Apr 17 22:01:40 2026 GMT
Subject: CN=54696e21fb1434e47a63a657b913ce3fc7010c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e0:fb:a8:dc:15:31:6f:ac:fc:73:44:2b:5e:
ae:06:53:8a:f2:77:5e:25:71:f7:53:7f:2b:c2:49:
17:cb:ca:75:99:fb:e5:77:b9:59:06:fd:22:dd:72:
da:f5:39:78:2f:fb:ed:9e:ec:42:42:b0:a1:2f:3d:
50:01:cf:51:e5:f2:57:fe:2f:e2:5f:6b:9f:b7:39:
bd:8e:c7:0f:ca:8b:60:c1:a5:a7:09:2e:c3:57:bd:
7e:2c:e4:5b:8c:46:b1:0a:04:09:8a:5d:b7:01:b2:
c8:cc:7b:f2:25:c9:60:5f:81:14:e1:98:04:26:f7:
b6:82:b6:9d:d0:38:6c:00:a1:23:7a:f0:2e:bf:95:
84:c1:ea:1c:4d:d0:ef:6a:11:1e:47:ea:6f:58:8a:
27:83:69:e5:50:fd:16:90:b1:f9:e9:d7:75:8f:f7:
b3:b4:d3:ed:81:f6:5c:de:70:af:c9:f8:4a:2d:66:
a3:cc:bf:c7:ac:b2:a4:c4:96:7d:70:fd:66:8f:b2:
7d:4e:31:2b:a1:76:87:82:05:1c:f6:4b:2a:8d:8b:
d8:13:b3:57:56:78:ae:49:08:4c:e1:09:15:95:80:
3c:b3:47:e0:77:71:05:58:56:0a:9e:3c:22:d0:cc:
93:96:d6:8d:cb:c0:33:f0:bd:f0:01:e5:d3:df:df:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:69:6E:21:FB:14:34:E4:7A:63:A6:57:B9:13:CE:3F:C7:01:0C:61
X509v3 Authority Key Identifier:
keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:55:8d:1c:1d:03:1b:96:07:a3:4a:3d:26:f2:78:cf:e9:6f:
74:70:b5:6a:41:30:4a:80:e5:8a:4e:d0:e1:d5:3f:05:8c:0f:
38:3b:87:10:d2:51:64:9d:7a:a3:99:a4:83:1f:95:f3:07:62:
54:18:90:a3:a0:81:f4:d7:52:82:71:2f:5b:92:30:5c:cb:45:
84:8e:d9:23:45:1e:11:d0:44:72:9e:15:ec:95:c3:77:bd:9c:
ce:20:c3:e2:fa:c7:6e:bf:ff:f9:6b:1b:a2:df:ac:23:42:b0:
65:20:ee:94:48:73:74:ff:75:8f:cc:75:5b:50:0c:08:b6:e7:
d6:84:83:ba:28:92:31:48:25:84:90:02:2d:e2:60:ff:f0:3d:
13:be:3d:62:ca:2a:19:10:c7:99:97:b2:90:b0:7e:36:29:96:
fe:34:fa:95:0b:22:92:e4:9f:69:e9:1d:fd:be:9d:a2:ee:11:
a2:2f:a8:57:a3:19:48:10:15:5e:33:e4:c5:3f:1d:53:9d:e2:
3a:f7:c8:d3:82:ec:10:20:84:67:ef:20:d5:c0:95:6d:77:d0:
27:e6:e0:af:a3:7c:d4:db:65:21:34:ea:ca:71:f1:38:03:bd:
b3:dd:fe:aa:58:50:3b:e0:6c:1f:2d:d4:65:5f:ee:bd:d3:64:
b3:8b:14:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:28:28 2026 by rpki-client