Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File: psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier: sSDzafToclJ+Gwkvf6Z7wp2hAyNsZQe6/jYD4FTMK60=
Subject key identifier: CE:8B:04:52:E1:59:70:80:CF:B9:D3:E7:D2:28:DE:D9:54:09:3E:12
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial: 019F913554F3C3FCAB08DED2C5947D3333D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 23:00:18 +0000
Manifest this update: Thu 23 Jul 2026 23:00:18 +0000
Manifest next update: Fri 24 Jul 2026 23:00:18 +0000
Files and hashes: 1: YB8uK3pVluHiYzZPZMIZIoTnMfI.roa (hash: 7tVqBE7ngonAMrRLqWAl1nUrhE0O3jGUi08m3ADIJNY=)
2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: pvyWBAXWlZrWflswAthbrlYCdGNrpCJscYsGkpBY9+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:54:f3:c3:fc:ab:08:de:d2:c5:94:7d:33:33:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Validity
Not Before: Jul 23 23:00:18 2026 GMT
Not After : Jul 24 23:00:18 2026 GMT
Subject: CN=ce8b0452e1597080cfb9d3e7d228ded954093e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:10:6f:81:c0:37:62:78:60:14:6e:b1:91:
03:d8:a5:fb:e3:f2:d4:ed:ed:c2:2e:64:36:49:1b:
8d:10:aa:36:3c:e9:48:78:8c:52:ea:b9:a3:6e:b1:
6d:d3:24:e9:2f:d2:d9:22:5e:61:f9:55:46:48:73:
c5:f8:4e:06:02:21:51:f3:60:3d:40:0d:67:0d:d0:
32:9a:59:94:2e:2b:bf:4b:fe:bb:7d:c5:d6:c9:22:
0f:d2:59:65:28:a3:00:52:33:4b:55:11:60:7c:e2:
de:fc:88:da:10:6e:3c:43:c1:da:20:39:10:90:8c:
58:3f:cf:16:a8:2f:80:d8:60:6a:18:71:19:f9:ed:
87:0a:08:5c:ae:64:70:c7:a5:1b:a0:f4:de:0b:34:
67:78:85:da:c4:64:44:c1:bd:87:6e:d9:04:ad:0e:
77:38:1a:26:cb:af:bd:78:41:7c:c9:be:c0:98:69:
be:33:cd:ff:26:49:9e:5a:c5:06:c4:aa:d3:43:39:
1e:fc:aa:b1:46:60:54:95:ee:6a:04:0e:0c:94:e5:
7c:ac:78:59:9b:5c:ba:2f:c4:08:6b:80:a8:7e:39:
b7:f1:5d:3b:b5:51:23:1e:e2:07:63:07:bb:f6:f7:
3a:09:f4:1c:fc:fd:ff:c7:ce:58:99:91:ff:18:52:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8B:04:52:E1:59:70:80:CF:B9:D3:E7:D2:28:DE:D9:54:09:3E:12
X509v3 Authority Key Identifier:
keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:43:31:1b:3e:62:0d:34:1f:e8:49:9c:04:43:46:9a:b0:7a:
3e:0c:a7:04:49:fc:2e:ce:d4:c7:0e:da:8b:94:bd:12:24:72:
15:ca:11:7e:6e:6a:c1:70:8e:f0:c7:76:74:eb:11:a9:fb:fe:
bb:79:de:70:90:10:7b:d2:51:87:52:b4:ca:61:79:16:8f:fe:
36:93:3e:a3:53:27:1b:42:eb:63:cd:cc:40:ca:9c:8c:ee:15:
fd:73:45:59:1b:2e:ba:7e:b5:7f:a1:c8:43:cc:d4:69:ee:bf:
ae:16:49:f3:b8:cb:dd:3f:cc:27:04:36:31:5b:f4:2f:6a:cb:
66:b1:41:a7:c2:40:ba:b2:c0:94:24:4d:aa:0f:ea:03:d2:73:
6e:75:b6:50:1d:f3:73:e3:07:1f:f3:ad:9e:6b:54:f6:a6:c8:
fd:3f:e4:77:0e:6c:9a:df:33:5e:f6:4a:6d:61:64:8b:49:da:
69:43:ee:b9:b1:02:63:59:de:db:6b:7f:5d:06:9d:24:a6:66:
17:b7:9c:5c:57:5a:59:4e:8d:ab:37:83:1d:03:0f:5d:a9:e0:
6b:62:f7:e3:ae:e2:ed:c3:f4:cd:e6:8e:33:f2:29:78:ac:d2:
93:92:5a:9d:9d:cb:ad:43:fc:a2:ff:34:29:b1:c2:de:0b:31:
14:f3:5a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:59 2026 by rpki-client