Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File: psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier: udJXccjj2I2vTLFDFQqDrCy3TR1e+lFJkl8cbpTdiNo=
Subject key identifier: 29:7C:31:80:5B:33:62:57:53:6F:AD:58:3C:1E:AD:EA:57:7C:3A:7C
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial: 019F197A818F1501937CD2EFE31C3B3984DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number: 198C
Signing time: Tue 30 Jun 2026 17:01:26 +0000
Manifest this update: Tue 30 Jun 2026 17:01:26 +0000
Manifest next update: Wed 01 Jul 2026 17:01:26 +0000
Files and hashes: 1: YB8uK3pVluHiYzZPZMIZIoTnMfI.roa (hash: 7tVqBE7ngonAMrRLqWAl1nUrhE0O3jGUi08m3ADIJNY=)
2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: E9p9gRS1OcainetKVzGElltjfHdG26hPrhr0T4gQNcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:81:8f:15:01:93:7c:d2:ef:e3:1c:3b:39:84:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Validity
Not Before: Jun 30 17:01:26 2026 GMT
Not After : Jul 1 17:01:26 2026 GMT
Subject: CN=297c31805b336257536fad583c1eadea577c3a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:51:46:a4:ed:ca:07:76:e9:80:29:64:eb:47:
3e:1d:d3:2b:68:fd:7e:4a:5c:7f:ee:2f:cb:62:30:
7a:88:60:0f:eb:e1:25:d1:63:ad:32:ef:44:53:ac:
66:a1:1b:a6:9d:dd:b8:6c:0e:b4:bd:81:37:68:36:
b3:a9:de:ee:cb:fa:10:08:25:7d:5c:33:0d:32:b5:
36:b7:39:a5:94:6a:cd:e5:d3:e8:91:ed:f4:f3:6d:
b2:19:e6:13:74:52:d8:bd:d2:61:97:09:6b:0a:9a:
b1:af:3e:6a:72:91:2d:20:22:54:22:36:98:81:d0:
86:c1:64:ca:f7:0a:a6:06:e8:06:30:9b:4c:a7:02:
0d:25:2c:ec:fe:e2:8f:34:a5:b2:b8:c8:a7:4e:4a:
d6:df:0f:42:a5:e3:0d:c4:29:45:1e:03:3d:fb:eb:
ca:24:60:f9:38:cc:fe:84:a0:33:3c:ac:3d:a8:17:
1f:40:da:37:ee:52:52:29:a2:3c:d4:b0:02:81:44:
57:c4:70:33:47:fa:ca:04:9b:ca:4e:80:01:53:c2:
23:73:ba:b3:a8:83:96:a6:ff:07:e6:21:02:bc:03:
5b:15:ea:6d:cc:a9:c2:81:15:c9:d1:b7:83:d8:b3:
d3:d0:fc:41:51:90:a8:35:35:64:6e:0a:c2:ce:3e:
4c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7C:31:80:5B:33:62:57:53:6F:AD:58:3C:1E:AD:EA:57:7C:3A:7C
X509v3 Authority Key Identifier:
keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:62:df:b3:e1:4d:69:fb:8d:32:c6:9e:fe:7d:e7:7f:62:23:
a2:98:90:bd:7c:cf:65:56:fb:c7:66:79:dd:a3:4c:b3:34:69:
e6:a5:db:e3:fb:4d:fb:88:29:04:e6:53:a0:ac:73:4a:10:1e:
83:7f:1f:29:25:aa:9b:8c:d0:dd:95:d1:1f:98:fe:14:04:c4:
14:28:83:b8:f3:fa:35:37:8f:82:d8:78:42:ce:07:62:50:8f:
c7:0b:e3:f0:d8:3e:d9:e6:f7:24:7e:b5:dc:38:2c:d4:79:99:
53:a0:61:49:dc:1f:88:14:aa:6c:bc:f0:c7:c9:db:56:cb:e4:
b1:86:51:e0:35:0d:87:e4:fc:cd:90:a3:94:c4:28:62:b8:93:
ff:1f:7b:c1:02:cc:20:78:29:bf:d6:de:91:18:d8:32:66:cb:
df:73:34:71:49:5a:59:0b:31:e9:9f:7d:71:d0:50:91:48:34:
2f:7c:7c:ae:8b:40:5a:e1:66:a6:23:70:fb:f8:af:f1:3d:0f:
a3:5c:3b:cf:d1:76:a2:a3:fe:6c:31:52:9b:b5:bd:11:3c:a3:
1d:53:16:e2:df:08:c5:5f:09:63:0f:2b:ee:2b:86:a5:87:dc:
d3:82:75:1a:3b:60:27:03:d8:dd:aa:22:03:93:1d:44:58:0b:
31:b5:ca:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:22 2026 by rpki-client