Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File: psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier: 5MMUG4AbbB7TjYhrXoKX3rbR5HBn3ReXE/1siwsdfCM=
Subject key identifier: 16:3E:75:98:92:05:C5:81:0F:07:39:1B:EA:A5:14:55:76:AE:B5:6F
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial: 019CABA1D3C2BE53CD06B1014A4F8678F52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 23:00:35 +0000
Manifest this update: Sun 01 Mar 2026 23:00:35 +0000
Manifest next update: Mon 02 Mar 2026 23:00:35 +0000
Files and hashes: 1: YB8uK3pVluHiYzZPZMIZIoTnMfI.roa (hash: 7tVqBE7ngonAMrRLqWAl1nUrhE0O3jGUi08m3ADIJNY=)
2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: JeAkyXt/YkdHYDSES4Drv2Tm+zSd+h3GBxRNLuBcGzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d3:c2:be:53:cd:06:b1:01:4a:4f:86:78:f5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Validity
Not Before: Mar 1 23:00:35 2026 GMT
Not After : Mar 2 23:00:35 2026 GMT
Subject: CN=163e75989205c5810f07391beaa5145576aeb56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:5d:a3:23:20:7d:fd:73:5c:65:dc:5c:b5:
2a:ed:02:a8:1a:47:dc:0e:bf:8d:c8:de:ec:9b:4f:
b2:82:3a:26:88:cb:9a:24:af:ec:0d:e1:28:43:f2:
5d:5e:4c:27:e3:a0:43:34:a1:c0:4d:71:34:e4:9f:
12:a8:5c:7b:98:8c:c3:f3:eb:04:0e:4b:93:ca:b9:
79:85:df:08:e1:9a:68:13:2f:e8:ec:42:91:5d:63:
c3:b0:6d:3e:04:cc:f5:bf:61:80:c2:35:91:94:cc:
a9:64:9b:47:3c:e2:1e:8a:8a:a9:cf:86:86:6b:de:
d0:5c:3c:80:6a:32:af:d9:ca:54:12:e2:52:6e:f2:
64:3a:3d:8f:b6:5c:1d:f5:dd:06:23:bd:da:41:fa:
77:ed:b6:ee:ef:fb:e2:fc:e4:80:c7:d6:03:6f:49:
95:a3:a6:71:fc:01:5d:df:21:c0:02:9a:a7:c5:d3:
9e:f1:11:8a:20:25:70:aa:f3:85:ec:c9:48:68:23:
9c:30:72:38:7a:94:68:68:3b:25:2e:29:8e:b8:c2:
f2:af:12:b2:9a:ee:44:11:c0:bd:ca:2a:1b:a0:68:
aa:17:ef:f5:08:12:2a:03:1b:12:32:b4:81:14:6a:
14:62:3b:e0:89:f3:ed:64:29:52:bc:25:a6:15:f4:
d4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3E:75:98:92:05:C5:81:0F:07:39:1B:EA:A5:14:55:76:AE:B5:6F
X509v3 Authority Key Identifier:
keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:af:37:6e:fd:34:4f:f2:df:e2:6f:42:3e:83:4c:9c:48:8f:
4f:d0:c6:e9:84:88:0f:fe:4d:dd:77:fa:b3:aa:64:e4:92:35:
bd:73:80:1f:7f:2d:4c:99:45:97:c9:a3:07:bf:07:3c:04:b1:
18:45:ff:12:d9:68:a6:99:6b:3e:aa:a9:05:2c:13:ef:59:be:
10:39:66:43:6b:6b:e6:4d:72:29:be:b2:3b:57:75:58:1a:b3:
54:e8:23:96:e8:d8:e2:b2:e5:c2:83:55:bd:df:a8:22:70:a4:
52:9c:85:e2:e6:d1:e1:0e:3f:66:70:db:be:2d:2f:2a:84:d8:
16:9b:ae:38:12:4d:51:e1:e9:e4:21:08:64:2f:1a:9b:98:8c:
36:9d:e4:eb:2a:9d:9e:0a:7c:9d:d6:3f:c2:41:03:d3:bf:a0:
2f:dc:b6:40:96:8d:3d:29:8f:8f:53:c2:52:3e:08:4e:6c:47:
50:30:c1:34:da:82:ac:dc:c9:b8:b0:04:47:88:98:8c:c7:97:
2f:3a:55:6d:97:65:c6:fa:3a:4d:8b:1c:e3:8f:d2:ad:ec:bc:
e6:ea:eb:f3:ff:b8:7d:c9:c4:e4:37:99:23:49:f6:77:28:5c:
32:12:1a:04:b4:4a:ef:0e:b6:7d:ff:ee:38:a0:e9:78:92:c9:
0b:dd:5f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:07 2026 by rpki-client