Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
File: pszH03YZ_dof84uT_s5gq9SYq4Q.mft (raw, json)
Hash identifier: wvJzPG0vLAShWJgTVknrGsAwBRhrwOejH1dAzrvjdxY=
Subject key identifier: AE:88:8F:B6:6D:25:6A:17:7A:E6:3D:ED:9F:82:94:D2:CC:E1:53:AA
Authority key identifier: A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
Certificate issuer: /CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Certificate serial: 019D9BBE322ECDE35399A2D154895EEF5A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
Manifest number: 01BC
Signing time: Fri 17 Apr 2026 14:00:26 +0000
Manifest this update: Fri 17 Apr 2026 14:00:26 +0000
Manifest next update: Sat 18 Apr 2026 14:00:26 +0000
Files and hashes: 1: cNWWHlQTLoBnWDX0Cr-HJhDwkyQ.roa (hash: RBDJxnmtcnqGTkRo8S/I5iM/CbwoBW03aRJgb8eIgr4=)
2: pszH03YZ_dof84uT_s5gq9SYq4Q.crl (hash: Wiq8l2ZFuQSd/CJ6gVw8qFbVKJL1rLh/yz/WOEc9eCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:32:2e:cd:e3:53:99:a2:d1:54:89:5e:ef:5a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ccc7d37619fdda1ff38b93fece60abd498ab84
Validity
Not Before: Apr 17 14:00:26 2026 GMT
Not After : Apr 18 14:00:26 2026 GMT
Subject: CN=ae888fb66d256a177ae63ded9f8294d2cce153aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8a:8f:27:af:9a:2c:8d:16:92:e6:09:f6:73:
bf:ab:93:25:cc:9d:73:b6:e4:9b:53:c4:64:c2:dd:
c7:61:41:d0:09:e3:45:11:84:1d:8a:b7:85:b3:8c:
22:d4:a0:a3:17:60:56:e6:51:b3:bc:97:58:52:40:
ac:99:02:00:f2:60:36:6f:af:44:2f:c9:8d:58:c4:
d3:21:ec:9b:c6:01:6e:ce:bf:be:c6:5c:b8:fb:c3:
04:06:42:32:df:25:9d:ab:5c:6a:af:4d:9b:2e:2f:
83:ed:3f:3f:a7:8e:48:ff:c3:04:cd:4e:10:50:8f:
9c:57:86:c9:aa:7f:32:2d:dc:55:07:0c:ab:23:cf:
b0:22:22:5f:dd:02:9a:e8:10:78:fe:5b:72:2d:40:
4e:5e:17:78:a9:4d:79:77:7f:9f:85:b8:ba:ea:4d:
cc:55:d6:c7:87:9d:c6:8e:da:ae:f5:21:57:36:85:
d9:89:de:c0:7f:aa:ea:4c:b9:92:21:56:a6:a0:8b:
c2:2d:24:df:ab:b2:2c:27:dc:5b:68:8d:a6:43:50:
7b:96:c7:de:91:67:5e:51:67:9f:bb:3d:28:59:9b:
09:5f:ab:90:ee:29:20:47:b6:9e:f4:a0:d4:80:cc:
a4:97:2a:8b:b4:17:3d:f6:33:90:95:c2:38:d5:7b:
78:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:88:8F:B6:6D:25:6A:17:7A:E6:3D:ED:9F:82:94:D2:CC:E1:53:AA
X509v3 Authority Key Identifier:
keyid:A6:CC:C7:D3:76:19:FD:DA:1F:F3:8B:93:FE:CE:60:AB:D4:98:AB:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pszH03YZ_dof84uT_s5gq9SYq4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f5cc1e-a294-45c7-9d10-f1bc956858aa/1/pszH03YZ_dof84uT_s5gq9SYq4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a5:ea:04:04:e4:6e:52:46:2d:1d:94:b6:e4:db:e6:c5:98:
ef:fb:93:ee:95:b8:54:7a:ef:60:03:13:19:aa:c1:35:fa:1f:
ed:72:e4:e8:c3:fd:26:1e:40:a7:39:79:b2:c0:5b:f4:31:30:
96:e8:da:82:25:e7:03:3d:24:bd:36:50:ce:68:09:31:80:3c:
b8:cf:53:89:ce:fd:11:f8:4c:ef:88:c9:b3:f3:4d:d6:fc:ce:
74:9b:9c:e1:50:a9:58:14:4f:5e:e3:4c:bf:87:a0:39:95:17:
1c:56:dc:4d:33:88:cd:95:db:3e:7b:0e:ab:7c:9c:a6:fd:d1:
7d:7a:92:1b:62:c0:2e:c3:6f:49:8d:6e:74:cc:ef:3d:e8:55:
09:b8:5d:cf:7c:85:cc:4e:17:ff:12:9b:2d:a7:bf:99:f1:64:
0b:38:ee:8a:b3:64:f8:ca:09:e1:19:71:23:06:ab:5b:ba:0f:
a8:c5:3f:5f:fa:6d:d7:3d:6b:f8:9e:48:36:21:0b:a8:07:61:
ec:5a:1c:b4:90:55:75:f8:28:7e:11:0f:7e:d3:0e:80:e7:ca:
68:3e:dc:fe:2c:f2:e9:2d:e4:3f:17:92:da:88:b0:79:92:5c:
33:f8:06:b6:49:e2:08:4f:47:7c:47:9e:01:27:23:b1:9b:d9:
18:6b:a1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:50 2026 by rpki-client