Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File: psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier: idvJHoXt4YDoM19DIg1W1DHz/g/95871sH0uAPtYLHM=
Subject key identifier: 0A:76:2F:9E:F9:33:0D:63:4B:3A:34:1C:68:0D:E6:D2:B4:8F:BE:68
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial: 01A128B13CAB9F928DE7265F075A26610BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number: 1A9D
Signing time: Sun 11 Oct 2026 02:01:06 +0000
Manifest this update: Sun 11 Oct 2026 02:01:06 +0000
Manifest next update: Mon 12 Oct 2026 02:01:06 +0000
Files and hashes: 1: YB8uK3pVluHiYzZPZMIZIoTnMfI.roa (hash: 7tVqBE7ngonAMrRLqWAl1nUrhE0O3jGUi08m3ADIJNY=)
2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: HNFBx5qe7M3hQDTXL9fL55ruFvpeQStTAnZ8WuLf8Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b1:3c:ab:9f:92:8d:e7:26:5f:07:5a:26:61:0b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Validity
Not Before: Oct 11 02:01:06 2026 GMT
Not After : Oct 12 02:01:06 2026 GMT
Subject: CN=0a762f9ef9330d634b3a341c680de6d2b48fbe68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0b:a8:69:39:2d:ba:c1:d9:66:6e:60:2e:35:
dc:ad:12:86:0b:41:ce:be:27:0b:1a:68:df:05:41:
83:2b:95:6f:3c:81:8e:55:ce:ca:dd:43:c3:79:47:
e0:78:47:99:a6:ab:9a:4c:ea:17:bd:b3:f6:3f:2f:
c5:f7:1b:1e:e5:ab:db:2f:7a:73:9d:ee:fe:5d:bd:
76:06:5e:96:a1:a8:62:64:4a:1a:f0:27:56:b0:de:
85:f2:c7:e8:10:ad:78:12:8c:e0:17:a4:42:d3:eb:
b3:35:50:30:8c:22:d2:42:a4:22:7e:6f:85:cc:ae:
62:fd:12:b0:07:bb:b9:d3:8f:7f:ff:4b:19:5e:f5:
cf:b3:ab:62:0a:7f:f0:de:7d:af:22:35:53:a8:ef:
f6:11:b0:a0:be:dc:ca:3d:de:6c:a4:17:45:cc:5c:
7c:96:7b:87:8f:ab:ee:d5:47:0f:46:04:8b:cd:05:
48:5f:98:ef:f9:9c:1b:9c:ee:22:6b:71:d1:27:ea:
32:22:75:22:d6:64:ce:83:c6:e7:b6:63:84:1d:76:
39:d5:1e:10:21:91:a9:b5:81:79:8f:61:ce:17:90:
6c:8f:f8:d0:f1:fb:6a:e2:31:5d:c0:31:07:1e:5d:
59:11:9c:7d:fd:99:af:af:26:83:d5:eb:68:3c:a0:
a3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:76:2F:9E:F9:33:0D:63:4B:3A:34:1C:68:0D:E6:D2:B4:8F:BE:68
X509v3 Authority Key Identifier:
keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ba:91:cb:19:5f:e9:13:e9:4b:23:54:f8:11:16:a8:44:91:
da:e3:44:c8:db:1c:04:6a:7c:42:e0:0d:b5:1e:ec:3a:36:09:
31:38:ab:4b:41:60:18:12:ba:e0:e5:60:b6:b8:a3:8e:8e:95:
bb:91:32:a0:21:0d:39:fb:a3:f7:59:6b:93:0c:2b:ae:42:cf:
80:19:54:4a:da:ad:73:c6:5a:f0:eb:d0:18:a9:8e:cc:0a:02:
14:75:91:44:2a:a4:9c:2c:97:9c:cb:f5:5e:94:3e:c9:85:f1:
26:8e:12:78:fd:d5:b8:97:ef:e7:48:56:4d:bd:2d:65:6f:29:
e0:8a:82:07:36:93:80:51:f8:0a:87:3f:30:d9:ed:81:ed:de:
31:01:de:dc:00:17:41:17:b1:e1:9a:5b:fd:60:67:56:69:5a:
dd:01:bc:0d:1a:17:57:b5:ee:02:89:f3:f7:e0:bc:c1:a6:2a:
42:2f:ce:73:9e:6c:7a:0f:a7:e6:c7:d1:1a:a1:b7:35:e8:9f:
b8:49:1e:af:30:cf:ce:31:58:f8:48:1a:5a:de:26:73:9b:93:
0d:ec:f0:28:29:7e:16:b1:8e:67:eb:37:a2:af:88:47:5e:d9:
28:7d:53:c9:d7:3b:f5:fc:a9:64:e9:8e:43:c9:c2:3e:a4:4a:
4b:51:7f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:13:28 2026 by rpki-client