Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File: psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier: es4IZ7fMGTNz/ynsIVdwm/ivNH/bk9qKKRNhCNG9D/0=
Subject key identifier: 20:71:CC:19:00:30:BA:19:AF:F4:6E:91:60:B0:D3:CD:16:BD:3F:ED
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial: 019A228ABF62565FF0B6E95A7234EB3F401A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number: 16F9
Signing time: Sun 26 Oct 2025 22:01:49 +0000
Manifest this update: Sun 26 Oct 2025 22:01:49 +0000
Manifest next update: Mon 27 Oct 2025 22:01:49 +0000
Files and hashes: 1: okAV_h5VY2rYZdeinC81X0hRA2Y.roa (hash: Qv1PPO81VnI1ltfb9vhPQi4AdxGUBWm2X2BZUx+f7S0=)
2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: X6WzVQ35iJD6gwZ3otKMoXxeNwzJ4L0dih2XQw1tBjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:bf:62:56:5f:f0:b6:e9:5a:72:34:eb:3f:40:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Validity
Not Before: Oct 26 22:01:49 2025 GMT
Not After : Oct 27 22:01:49 2025 GMT
Subject: CN=2071cc190030ba19aff46e9160b0d3cd16bd3fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:ea:eb:29:92:c9:a8:99:2e:0d:57:4b:52:
b5:e4:17:49:a6:29:b8:33:b1:3f:dd:ec:16:b3:e3:
d8:8b:6b:f4:3d:61:cf:44:13:37:cc:c1:22:34:c2:
6b:48:fd:78:29:06:1a:f0:7b:70:d8:c7:3c:24:a5:
d9:b0:c7:cd:aa:f4:58:61:68:f0:ca:3d:81:52:c2:
70:d1:38:c2:e8:ed:3d:b9:04:6c:1c:c9:8b:31:d1:
c3:e3:70:e8:a7:8d:ce:d7:dd:bb:f7:40:75:28:00:
d9:f4:27:3c:59:d3:51:81:a4:56:46:37:f0:d1:66:
bc:3e:e4:98:4d:56:62:c3:fb:da:8a:18:87:c0:0c:
a4:f5:1c:1f:0b:f8:11:14:21:cc:d3:c9:9b:8b:2c:
09:b1:09:bc:e2:4e:28:aa:b2:11:8b:cf:58:16:89:
32:ef:c0:36:0f:6c:84:45:2a:74:d1:41:ab:05:c3:
19:ec:97:02:41:a9:09:81:92:60:fd:6d:36:7d:69:
24:82:f4:02:1e:8d:4f:73:db:3d:dc:d7:d4:b0:b6:
ee:2f:45:e6:61:0d:5d:1b:4a:0b:34:83:90:97:cf:
ef:45:da:3f:2e:5e:56:a2:39:b4:10:bb:7a:54:29:
2b:08:5f:cb:d7:14:08:b3:7e:ab:c6:f0:80:24:58:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:71:CC:19:00:30:BA:19:AF:F4:6E:91:60:B0:D3:CD:16:BD:3F:ED
X509v3 Authority Key Identifier:
keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7d:5b:9b:f5:e5:c5:f8:6f:c3:36:e9:08:eb:39:df:7d:ea:
fb:77:d4:09:43:11:fb:f7:e8:ac:56:a9:0b:6b:d9:9f:15:6f:
83:ee:70:58:08:7f:59:8c:5c:35:46:c4:7c:fe:9f:35:fd:52:
b1:4e:fd:9c:23:c5:b1:d6:1a:8a:81:ec:5f:d7:6b:56:e9:00:
5d:a7:38:69:8e:e1:1b:27:96:93:b2:5e:eb:8d:30:bc:f1:b1:
5e:ed:53:38:a2:dc:9b:b6:ab:c0:0a:32:1e:54:6a:2a:b6:89:
6e:07:ab:04:f2:d0:b7:98:4f:c8:2c:2d:e7:85:21:9d:fa:df:
80:b4:fa:49:65:72:40:20:03:11:45:e8:ce:f5:0c:c2:35:e2:
6d:34:1c:c9:65:45:b6:39:af:65:1f:a6:08:2d:9b:39:4c:97:
57:dc:5f:54:7b:37:d6:32:47:c1:89:34:f8:7f:0c:2d:2f:1f:
94:00:27:31:03:d2:84:dc:0e:d5:4c:70:83:99:d2:78:99:8a:
3a:7f:77:0f:24:0a:0e:63:27:86:23:31:f4:a8:2c:8c:31:ea:
8b:9a:c0:61:bd:67:74:fd:24:de:f6:98:98:8d:8d:85:77:da:
67:cc:b9:4a:fd:36:19:f7:95:d2:86:f3:ec:6e:3c:b4:0f:66:
91:3b:58:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiir9iVl/wtulacjTrP0AaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YzZmY2E3NTI2OWM2YjAxMGE2ZmE3MTA5ZTQzMTVlMDZh
MDgzZGMwHhcNMjUxMDI2MjIwMTQ5WhcNMjUxMDI3MjIwMTQ5WjAzMTEwLwYDVQQD
EygyMDcxY2MxOTAwMzBiYTE5YWZmNDZlOTE2MGIwZDNjZDE2YmQzZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD7q6ymSyaiZLg1XS1K15BdJpim4
M7E/3ewWs+PYi2v0PWHPRBM3zMEiNMJrSP14KQYa8Htw2Mc8JKXZsMfNqvRYYWjw
yj2BUsJw0TjC6O09uQRsHMmLMdHD43Dop43O192790B1KADZ9Cc8WdNRgaRWRjfw
0Wa8PuSYTVZiw/vaihiHwAyk9RwfC/gRFCHM08mbiywJsQm84k4oqrIRi89YFoky
78A2D2yERSp00UGrBcMZ7JcCQakJgZJg/W02fWkkgvQCHo1Pc9s93NfUsLbuL0Xm
YQ1dG0oLNIOQl8/vRdo/Ll5Wojm0ELt6VCkrCF/L1xQIs36rxvCAJFjSEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBxzBkAMLoZr/RukWCw080WvT/tMB8GA1UdIwQY
MBaAFKbG/KdSacawEKb6cQnkMV4GoIPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lYWI3ZWYtOGNkNi00ZGZlLThmMWUt
ODZlMjlmMDVlYjk3LzEvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lYWI3ZWYtOGNkNi00ZGZlLThmMWUtODZlMjlmMDVlYjk3
LzEvcHNiOHAxSnB4ckFRcHZweENlUXhYZ2FnZzl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUX1bm/Xl
xfhvwzbpCOs5333q+3fUCUMR+/forFapC2vZnxVvg+5wWAh/WYxcNUbEfP6fNf1S
sU79nCPFsdYaioHsX9drVukAXac4aY7hGyeWk7Je640wvPGxXu1TOKLcm7arwAoy
HlRqKraJbgerBPLQt5hPyCwt54UhnfrfgLT6SWVyQCADEUXozvUMwjXibTQcyWVF
tjmvZR+mCC2bOUyXV9xfVHs31jJHwYk0+H8MLS8flAAnMQPShNwO1Uxwg5nSeJmK
On93DyQKDmMnhiMx9KgsjDHqi5rAYb1ndP0k3vaYmI2NhXfaZ8y5Sv02GfeV0obz
7G48tA9mkTtYAw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:42:27 2025 by rpki-client