
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File: psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier: p73+zWNpW45ngODV4z1tUdAnervI8/oQOVyeLWRTvcs=
Subject key identifier: 8F:58:72:50:D6:C1:0B:19:73:13:24:8A:9D:D9:E7:33:03:93:AF:F0
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial: 019E1E6C354FC421C412B175365445FA1CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 23:01:08 +0000
Manifest this update: Tue 12 May 2026 23:01:08 +0000
Manifest next update: Wed 13 May 2026 23:01:08 +0000
Files and hashes: 1: YB8uK3pVluHiYzZPZMIZIoTnMfI.roa (hash: 7tVqBE7ngonAMrRLqWAl1nUrhE0O3jGUi08m3ADIJNY=)
2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: o71US2A5+RL8guD62SHf7+stxDIVchzveF1JOqkZ6rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:35:4f:c4:21:c4:12:b1:75:36:54:45:fa:1c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Validity
Not Before: May 12 23:01:08 2026 GMT
Not After : May 13 23:01:08 2026 GMT
Subject: CN=8f587250d6c10b197313248a9dd9e7330393aff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:3e:31:30:2e:2a:d8:15:d4:2e:6a:c7:fb:
b6:85:75:58:0e:eb:d9:05:01:14:fd:b4:a3:42:0d:
8c:06:f0:4a:4f:13:f3:e1:1c:29:3e:cb:4f:1e:90:
e3:ee:75:d5:2a:bd:5c:81:f7:08:7f:69:4c:53:0d:
8e:92:d8:83:2c:ce:ff:80:6a:27:32:49:b4:10:61:
13:73:5b:b6:79:28:9f:8a:35:bc:17:76:8b:b7:dd:
0b:f6:9b:9e:09:ba:6f:48:87:d4:63:d3:f5:f5:4f:
a2:08:56:0f:75:54:9f:8b:fe:ea:14:10:e8:4b:92:
db:10:da:03:98:5d:54:89:58:77:b8:d0:f5:4a:cb:
57:14:e3:01:dd:61:85:9f:90:50:60:a1:cf:c9:d3:
7b:51:d5:ce:4f:70:ea:f3:3b:90:c1:2e:b3:96:9c:
64:5f:96:0c:64:c9:15:6f:ea:b4:47:4f:b7:06:68:
d6:e5:53:e5:d3:fa:15:1a:0a:5a:e8:2e:c7:ee:e0:
bf:13:e6:9d:97:ef:61:70:56:35:39:e0:16:d4:4f:
d7:00:73:af:2d:e0:5f:07:f3:0d:03:a0:8c:96:f1:
a8:1e:6d:75:e7:ed:5d:60:59:5a:1f:8a:02:fe:c1:
e6:08:a5:3c:13:84:7c:c7:56:47:98:53:3d:3a:1e:
ef:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:58:72:50:D6:C1:0B:19:73:13:24:8A:9D:D9:E7:33:03:93:AF:F0
X509v3 Authority Key Identifier:
keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1e:44:b9:e8:ca:29:df:94:09:fc:34:b8:f3:1f:ce:57:80:
47:5a:16:26:c4:a1:c7:66:ce:50:6b:ee:f3:e6:13:53:56:60:
4f:78:07:47:90:d3:bc:05:fb:ac:07:79:f6:62:d1:d3:e2:42:
b1:c7:2d:74:2c:32:4e:f5:67:c3:8d:cb:78:2b:9d:76:84:ae:
3f:49:ae:2f:21:52:92:13:95:40:ba:df:03:ff:ea:01:83:bc:
d1:86:34:b1:2a:26:11:2c:8f:f6:87:df:56:10:59:d9:62:9c:
73:4d:06:b3:88:fd:35:09:43:97:3d:48:2a:27:92:31:be:1f:
cd:f7:ce:c7:d4:51:dc:ba:96:ff:af:80:1f:ad:6a:b3:1f:20:
c0:8f:e5:49:46:51:0a:0d:a3:fa:da:4a:58:44:73:b6:9c:71:
e4:eb:79:6b:69:88:4c:ab:de:ea:ec:a8:69:3d:dd:e1:a9:b5:
45:f2:0b:8a:b0:c1:4c:3a:cc:6a:cd:ef:61:f1:9f:2e:1e:1c:
53:b5:e8:66:d5:d0:b0:25:f4:ab:57:6d:80:00:a8:4d:98:a7:
6f:56:13:6c:ae:b0:60:2b:cc:ec:33:c9:85:0f:f4:f0:97:79:
70:70:91:7c:d0:9d:20:d2:b4:db:f2:75:dc:22:43:0c:01:21:
54:8e:af:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:46:15 2026 by rpki-client