Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File: psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier: yrZPdM/R0MzItYbGVJrXQwNWIy243i4Nd5vC+z7p7GA=
Subject key identifier: 25:F6:32:00:1B:9F:B5:95:AC:38:4F:05:5C:E1:B4:0A:ED:AD:4E:E8
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial: 019D273AC1B783EF47E7FF7AA3ECEB1EA090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 23:00:55 +0000
Manifest this update: Wed 25 Mar 2026 23:00:55 +0000
Manifest next update: Thu 26 Mar 2026 23:00:55 +0000
Files and hashes: 1: YB8uK3pVluHiYzZPZMIZIoTnMfI.roa (hash: 7tVqBE7ngonAMrRLqWAl1nUrhE0O3jGUi08m3ADIJNY=)
2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: 5XCdQ6fjx0dzT4bNOFYxbD/hor/EzavRDGmxiJTpVh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c1:b7:83:ef:47:e7:ff:7a:a3:ec:eb:1e:a0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Validity
Not Before: Mar 25 23:00:55 2026 GMT
Not After : Mar 26 23:00:55 2026 GMT
Subject: CN=25f632001b9fb595ac384f055ce1b40aedad4ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:f5:32:6c:47:75:32:cf:b0:7e:0f:58:39:
4c:14:a7:0a:11:89:a5:9c:87:a1:61:b3:b9:9c:4f:
c7:a8:08:fa:e0:2b:d6:7a:fa:2d:5d:25:2a:3c:cc:
18:88:2c:f3:61:8c:0d:08:d7:0b:a8:6d:de:0a:ef:
a5:90:be:af:77:7d:e7:0f:1c:d3:76:f0:af:84:49:
7f:53:5f:c6:74:70:74:e4:31:0e:3d:6b:e4:97:68:
f5:be:92:24:41:fc:9f:bc:7a:ae:e4:85:6a:b2:9a:
9d:a2:ad:0d:e2:eb:7f:f7:e2:56:14:db:a0:e5:6a:
80:7e:31:56:1d:f9:6b:32:90:46:87:2f:2f:90:9d:
5a:ff:28:9d:a4:ad:3c:48:98:bc:a4:e0:18:49:d2:
30:c1:b5:5f:21:c7:d0:32:f3:85:a8:7a:34:90:bd:
d7:d3:c4:77:09:ef:2f:54:85:27:95:ec:eb:d9:42:
a4:88:a7:8b:6b:2b:e9:1a:6e:e1:68:b8:3e:bc:f4:
3d:4c:b7:c6:5e:51:dd:e3:3c:cb:87:20:03:2d:31:
a2:ed:dd:62:e0:d1:d7:7a:5d:71:5b:cf:fa:b9:22:
4d:1a:09:53:0c:0e:51:79:cf:63:a2:2c:b4:40:22:
d2:7e:7a:bf:1a:4c:27:b3:a3:f0:d1:63:71:5c:e1:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F6:32:00:1B:9F:B5:95:AC:38:4F:05:5C:E1:B4:0A:ED:AD:4E:E8
X509v3 Authority Key Identifier:
keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:84:ed:d5:a1:56:19:24:cb:25:90:b0:fb:71:c6:09:bd:62:
87:b2:37:2e:aa:7b:37:be:1e:36:84:e8:94:8a:60:8b:b1:a6:
35:cf:fc:ea:d7:bf:91:76:05:c5:5a:54:ae:7e:27:2e:17:c9:
69:55:4b:d4:06:24:c7:9a:b1:2d:2e:ab:55:e0:71:43:05:c0:
f6:ed:5d:79:93:01:0a:76:33:00:48:ae:4f:00:23:43:96:a2:
57:d1:1d:63:ee:f9:1d:c4:49:6e:d1:8a:b9:bc:e6:bf:14:1b:
b3:26:ff:38:ef:da:3a:b2:d9:d9:6f:90:0b:d3:fc:c6:47:73:
56:96:56:cc:cb:5c:04:df:a7:3c:0f:81:e5:02:5c:3c:3f:66:
0a:3e:96:66:b1:d3:ca:81:ab:06:c1:c7:a6:a5:6d:e4:16:a5:
95:32:48:b3:17:36:86:15:7f:81:50:42:4f:05:a0:38:3a:55:
6c:1b:2b:cf:b9:d5:48:ab:a4:27:10:55:a5:fd:28:b5:16:ac:
b1:50:3d:86:3d:cd:ff:9d:d5:ca:61:69:41:75:c4:24:99:31:
4f:69:bb:43:06:7f:f6:59:d5:02:a7:bc:62:84:cf:62:c6:5b:
d3:34:87:c8:07:4b:86:43:46:dd:7f:ad:41:61:49:8d:dc:59:
b2:07:10:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:47 2026 by rpki-client