Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
File: PSGIrVl7WKqllwA_jwhDSWxsfJM.mft (raw, json)
Hash identifier: 3M0oV5Hq7bkJ0HXg/vxAVo1m1W7sOK1hwRr3JLYGPlU=
Subject key identifier: 93:91:86:AB:8D:87:33:5C:76:FE:DF:B2:76:68:68:42:92:4C:32:56
Authority key identifier: 3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
Certificate issuer: /CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Certificate serial: 019D9886DB5A825BE8AA583B024907D7AA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
Manifest number: 11C4
Signing time: Thu 16 Apr 2026 23:01:07 +0000
Manifest this update: Thu 16 Apr 2026 23:01:07 +0000
Manifest next update: Fri 17 Apr 2026 23:01:07 +0000
Files and hashes: 1: PSGIrVl7WKqllwA_jwhDSWxsfJM.crl (hash: ugEYjaR9/qmoKr63KhJG7S6i7CC3JikYzj8abbqZt8Q=)
2: waMm6aRoYzmoT03rFXzSaG9sXI8.roa (hash: wCPLOFOiPH4Ub8JICY70w09W8Lg30ExvC/If13jz90k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:db:5a:82:5b:e8:aa:58:3b:02:49:07:d7:aa:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Validity
Not Before: Apr 16 23:01:07 2026 GMT
Not After : Apr 17 23:01:07 2026 GMT
Subject: CN=939186ab8d87335c76fedfb276686842924c3256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:3f:4d:0d:9d:4a:e7:ad:26:ee:22:d0:68:
a9:e5:78:57:b9:95:fa:c7:a3:17:a2:4c:bb:9d:ad:
16:4a:a5:86:9b:aa:c6:8c:53:60:b2:6f:59:e2:e5:
b1:d0:bf:da:2c:51:d8:26:0d:45:f0:6b:9e:58:cb:
7e:32:f7:2a:0a:9b:fb:a5:4f:08:7a:81:7b:85:e6:
f7:30:5a:94:25:d1:cc:d5:63:5c:ce:9f:a3:d9:a2:
82:51:e2:5f:89:8d:c6:8b:93:d4:27:32:29:ab:22:
8b:2a:22:a8:bf:86:70:74:d1:d2:77:f5:61:e6:a8:
ff:ed:44:32:04:78:76:44:0f:b9:02:d8:7c:a0:bd:
90:0d:be:d0:43:29:a3:37:20:72:bc:f9:49:a8:83:
60:ba:ba:bc:af:0f:bf:a6:d5:3a:73:ef:ce:fa:01:
79:9c:d7:83:74:44:e1:18:a6:99:96:1d:ae:f4:62:
a0:06:7c:a5:0c:e8:37:d0:4d:c7:30:67:bd:10:06:
68:8f:2d:6b:68:2e:b3:ce:07:8a:63:d2:51:42:55:
03:90:48:a1:6a:e6:d1:50:9a:06:40:1f:17:5e:01:
7f:38:e0:0c:33:b2:50:5e:28:7a:35:1e:08:46:3f:
b3:22:ee:93:65:84:86:69:7f:7b:71:97:1d:3b:8f:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:91:86:AB:8D:87:33:5C:76:FE:DF:B2:76:68:68:42:92:4C:32:56
X509v3 Authority Key Identifier:
keyid:3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:50:23:f8:5a:73:fe:4a:6f:57:12:1e:bd:94:10:17:12:6e:
21:0e:50:a3:19:5e:e4:82:93:81:e9:db:3a:13:16:e9:de:c3:
ad:4b:14:80:0a:ec:69:0e:60:98:e2:6e:51:b4:ba:eb:d2:0c:
76:d3:f2:92:75:27:6f:82:fe:29:34:8f:12:3e:db:f8:c7:8b:
fb:b0:47:e4:5c:32:3d:e2:bb:24:b8:59:ef:ab:01:75:70:f8:
fb:ec:51:00:54:9e:f8:83:28:a3:e3:64:c6:4b:a8:a2:73:a6:
c1:a9:36:39:3f:62:59:f0:db:a2:82:a5:6f:83:79:05:1f:c0:
0e:e5:93:fb:1f:14:c1:03:e9:20:c2:3c:52:ee:08:dd:67:a6:
26:6c:7b:c1:ff:39:08:f6:5d:ea:51:5e:3c:19:9f:f5:24:85:
8e:16:71:50:9a:a0:ce:bc:5d:41:50:d5:fa:f6:33:81:a5:cf:
9e:37:dc:70:6e:80:78:4a:f5:e7:8b:02:6a:2d:89:af:c2:d5:
c1:a0:ff:fb:6c:ee:a7:8c:c4:a3:40:b8:84:01:06:13:37:ea:
f8:47:84:53:fc:bc:c3:de:7b:6f:ea:87:be:2d:90:6e:f8:5f:
2f:1f:66:8c:64:89:b7:aa:03:78:a4:c4:30:61:44:dd:71:f4:
4c:4a:3c:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yhttaglvoqlg7AkkH16qdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMjE4OGFkNTk3YjU4YWFhNTk3MDAzZjhmMDg0MzQ5NmM2
YzdjOTMwHhcNMjYwNDE2MjMwMTA3WhcNMjYwNDE3MjMwMTA3WjAzMTEwLwYDVQQD
Eyg5MzkxODZhYjhkODczMzVjNzZmZWRmYjI3NjY4Njg0MjkyNGMzMjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNU/TQ2dSuetJu4i0Gip5XhXuZX6
x6MXoky7na0WSqWGm6rGjFNgsm9Z4uWx0L/aLFHYJg1F8GueWMt+MvcqCpv7pU8I
eoF7heb3MFqUJdHM1WNczp+j2aKCUeJfiY3Gi5PUJzIpqyKLKiKov4ZwdNHSd/Vh
5qj/7UQyBHh2RA+5Ath8oL2QDb7QQymjNyByvPlJqINgurq8rw+/ptU6c+/O+gF5
nNeDdEThGKaZlh2u9GKgBnylDOg30E3HMGe9EAZojy1raC6zzgeKY9JRQlUDkEih
aubRUJoGQB8XXgF/OOAMM7JQXih6NR4IRj+zIu6TZYSGaX97cZcdO4/WpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJORhquNhzNcdv7fsnZoaEKSTDJWMB8GA1UdIwQY
MBaAFD0hiK1Ze1iqpZcAP48IQ0lsbHyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFNHSXJWbDdXS3FsbHdBX2p3aERTV3hzZkpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYmZkMGEtMDE3Zi00ODFmLWI2NzYt
YmMzNmZlZWI5MGIzLzEvUFNHSXJWbDdXS3FsbHdBX2p3aERTV3hzZkpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYmZkMGEtMDE3Zi00ODFmLWI2NzYtYmMzNmZlZWI5MGIz
LzEvUFNHSXJWbDdXS3FsbHdBX2p3aERTV3hzZkpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFAj+Fpz
/kpvVxIevZQQFxJuIQ5Qoxle5IKTgenbOhMW6d7DrUsUgArsaQ5gmOJuUbS669IM
dtPyknUnb4L+KTSPEj7b+MeL+7BH5FwyPeK7JLhZ76sBdXD4++xRAFSe+IMoo+Nk
xkuoonOmwak2OT9iWfDbooKlb4N5BR/ADuWT+x8UwQPpIMI8Uu4I3WemJmx7wf85
CPZd6lFePBmf9SSFjhZxUJqgzrxdQVDV+vYzgaXPnjfccG6AeEr154sCai2Jr8LV
waD/+2zup4zEo0C4hAEGEzfq+EeEU/y8w957b+qHvi2QbvhfLx9mjGSJt6oDeKTE
MGFE3XH0TEo8Sw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:51:59 2026 by rpki-client