Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/223713-49fe-4878-bb07-0c5444d45bda/1/psbKCrHBY83F4HsMnzrquJsWCws.mft
File: psbKCrHBY83F4HsMnzrquJsWCws.mft (raw, json)
Hash identifier: S7wbyssqmHJ2JQbh1Oh4PEoGXnyNLT8bGHAyBC5+ljQ=
Subject key identifier: B6:6A:62:6E:2A:44:55:44:94:7F:BF:2D:AC:26:19:88:92:35:57:44
Authority key identifier: A6:C6:CA:0A:B1:C1:63:CD:C5:E0:7B:0C:9F:3A:EA:B8:9B:16:0B:0B
Certificate issuer: /CN=a6c6ca0ab1c163cdc5e07b0c9f3aeab89b160b0b
Certificate serial: 01A18AC0C1DDB8FC1E0005832E7A07EE91D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psbKCrHBY83F4HsMnzrquJsWCws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/223713-49fe-4878-bb07-0c5444d45bda/1/psbKCrHBY83F4HsMnzrquJsWCws.mft
Manifest number: 57
Signing time: Fri 30 Oct 2026 03:00:50 +0000
Manifest this update: Fri 30 Oct 2026 03:00:50 +0000
Manifest next update: Sat 31 Oct 2026 03:00:50 +0000
Files and hashes: 1: 22Shnf8BtH-_hM4Id3EvF9IL0v8.roa (hash: pxud13G9JfSxQkDxmBa1Zs3fl77Lz5+Fbc8x4Q0jx+Y=)
2: psbKCrHBY83F4HsMnzrquJsWCws.crl (hash: f69lMsQ5IX0WhBGzBSF85Qs3DcWC9CqUySpdxcZTGOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/223713-49fe-4878-bb07-0c5444d45bda/1/psbKCrHBY83F4HsMnzrquJsWCws.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/223713-49fe-4878-bb07-0c5444d45bda/1/psbKCrHBY83F4HsMnzrquJsWCws.mft
rsync://rpki.ripe.net/repository/DEFAULT/psbKCrHBY83F4HsMnzrquJsWCws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:c0:c1:dd:b8:fc:1e:00:05:83:2e:7a:07:ee:91:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c6ca0ab1c163cdc5e07b0c9f3aeab89b160b0b
Validity
Not Before: Oct 30 03:00:50 2026 GMT
Not After : Oct 31 03:00:50 2026 GMT
Subject: CN=b66a626e2a445544947fbf2dac26198892355744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0d:07:37:1c:ad:48:be:f3:72:3e:81:6b:b9:
b3:91:f7:1f:38:28:76:ca:92:81:a5:39:f8:13:80:
90:9b:d1:5f:c7:f6:ae:7c:1c:63:67:cf:f9:51:01:
f9:cb:43:aa:af:b9:3d:2f:92:6a:9d:dd:fe:32:df:
c0:98:0d:40:67:2e:6b:a3:47:bf:b0:25:d1:1d:60:
c1:d3:d7:25:f8:d7:05:ff:1e:18:a8:96:cc:d4:7c:
2a:d3:44:a6:b7:cd:ea:32:54:31:7a:77:f0:0c:c2:
8c:73:da:b5:59:e2:ea:0f:f8:07:f3:77:e3:20:51:
33:39:18:0b:02:17:01:73:7a:07:8a:9d:2a:89:36:
a4:aa:41:38:f2:be:e6:02:6d:36:69:84:72:9d:a9:
1b:b8:08:8f:1d:bf:ab:f0:9a:42:bc:96:55:24:66:
4d:4a:f7:7a:64:69:c0:a3:28:d8:b8:29:e1:c9:c9:
0f:89:fd:aa:7c:2c:8f:77:56:cd:b2:4a:e8:a1:61:
dc:db:28:e4:e5:bc:ca:8a:c5:a6:27:a7:ab:53:26:
7d:fe:cc:f0:b7:e0:6d:77:72:a2:60:36:24:ec:96:
dc:40:c2:c5:6c:92:7d:71:f8:d9:76:d8:1a:6a:19:
9c:e3:79:a9:52:36:48:b0:4c:06:53:b6:fc:5c:79:
55:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6A:62:6E:2A:44:55:44:94:7F:BF:2D:AC:26:19:88:92:35:57:44
X509v3 Authority Key Identifier:
keyid:A6:C6:CA:0A:B1:C1:63:CD:C5:E0:7B:0C:9F:3A:EA:B8:9B:16:0B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psbKCrHBY83F4HsMnzrquJsWCws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/223713-49fe-4878-bb07-0c5444d45bda/1/psbKCrHBY83F4HsMnzrquJsWCws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/223713-49fe-4878-bb07-0c5444d45bda/1/psbKCrHBY83F4HsMnzrquJsWCws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9e:e5:01:b0:db:e2:c4:d7:61:44:85:8e:8f:0a:19:9f:1c:
b1:8b:e3:65:e4:48:06:31:3e:2c:07:61:cc:b3:e9:e3:fd:b0:
16:00:18:51:0f:de:8e:c8:78:6f:42:2b:5c:78:69:b1:44:86:
d4:ae:cb:46:49:41:22:47:b9:5e:a1:12:f3:d9:1d:2d:2f:f6:
43:e1:28:51:d8:7d:42:b5:4a:3e:c6:c5:5c:28:83:28:2b:76:
b3:6f:0d:4e:84:ea:27:20:0a:e3:85:09:40:82:c8:b7:54:a8:
67:5b:8d:76:d7:6c:8b:57:d4:53:f4:8e:ec:3a:1d:06:b3:ed:
ca:f1:70:7d:e3:aa:4e:e9:6f:0b:8e:38:c7:77:1c:37:ab:c2:
f0:46:9d:8e:fb:bb:49:51:e4:83:24:e6:40:cb:bb:78:36:c1:
50:3d:c5:2e:a5:b2:67:37:16:33:90:2f:b9:f6:c3:ab:ee:d6:
4d:66:bd:54:1f:2d:63:69:52:bf:ad:6d:6a:c5:f6:f5:fe:08:
c3:1c:a2:a9:b3:53:e3:37:1e:2b:ef:b8:09:12:6f:1a:c3:b8:
00:7b:c3:e9:64:ba:c2:a9:7b:c5:4e:78:94:4d:d1:66:1b:00:
02:d0:a3:67:69:0e:1a:93:cf:1a:99:f4:4d:7a:64:c5:c0:df:
d1:68:c3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:15:26 2026 by rpki-client