Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
File: PS60FH7nv8a6cvwDSUU0mPAA5YE.mft (raw, json)
Hash identifier: jWKfu4NA75nnB060E3xfW5t6ohcay2KAfSYjvqV144E=
Subject key identifier: 19:8C:18:37:B8:BC:1D:88:86:C5:C6:9B:8B:95:1C:68:20:BE:6D:65
Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
Certificate issuer: /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Certificate serial: 019FAC3ED989B839A25D221BD2BCEA217FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
Manifest number: 06C9
Signing time: Wed 29 Jul 2026 05:00:27 +0000
Manifest this update: Wed 29 Jul 2026 05:00:27 +0000
Manifest next update: Thu 30 Jul 2026 05:00:27 +0000
Files and hashes: 1: PS60FH7nv8a6cvwDSUU0mPAA5YE.crl (hash: TiMb3Q3kgAvlp/0jcQOQXqB3r9RF8XxHEptcKig4J9w=)
2: bbcALS1K5TEmKYiB1a6e1mZZWEs.roa (hash: byEO33BLjOD9so540gGEwTdyvs1ahwhfnYTzDETisqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:d9:89:b8:39:a2:5d:22:1b:d2:bc:ea:21:7f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Validity
Not Before: Jul 29 05:00:27 2026 GMT
Not After : Jul 30 05:00:27 2026 GMT
Subject: CN=198c1837b8bc1d8886c5c69b8b951c6820be6d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6e:33:7d:fb:7d:e9:fe:9e:0b:7a:7b:8b:70:
4f:ef:c5:fd:76:ae:95:02:41:96:0f:64:f5:0d:c9:
c5:d9:5f:3a:47:fb:24:e8:c3:46:26:17:11:9e:34:
5e:a5:fc:d8:52:d1:c8:d5:0d:39:46:fc:e7:e3:54:
cf:01:8d:c9:02:b2:07:91:c9:72:99:bc:e8:18:89:
9c:a5:b8:e4:91:24:43:80:9f:ab:76:0a:62:ad:d8:
36:9c:8b:30:5e:20:7b:ee:41:b5:a6:f6:04:64:7c:
23:24:81:83:69:01:15:46:5a:c7:d6:9e:dd:3c:54:
4f:dd:2c:4e:23:6a:c8:e8:2e:28:8e:8b:98:83:a5:
b8:30:af:c8:63:a1:fa:1e:9e:13:1a:25:72:ea:66:
6f:3d:3f:e5:86:9e:8e:31:ea:77:5e:af:4b:98:1c:
85:c6:86:30:68:58:f7:26:92:db:34:9e:e2:2c:2b:
6d:a1:98:d4:7c:0e:62:4e:f1:27:58:29:cd:1e:e4:
07:22:d7:91:91:83:6e:0f:3e:e4:f9:c9:e9:3b:31:
e1:ad:56:5b:e6:84:88:73:6a:51:cf:98:8a:3d:23:
6b:66:cb:49:b3:7e:e8:25:97:c5:f8:0e:5a:af:76:
c0:67:cd:6d:71:29:ec:52:bc:a2:68:7e:f0:7a:81:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8C:18:37:B8:BC:1D:88:86:C5:C6:9B:8B:95:1C:68:20:BE:6D:65
X509v3 Authority Key Identifier:
keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:51:a2:7b:66:c6:32:ca:08:27:45:08:51:7b:1f:b8:f0:53:
a0:1b:49:da:07:95:b4:e8:00:78:d4:8d:20:a7:ae:3d:74:51:
fc:c6:7c:ec:f8:d9:56:3a:d3:5f:54:15:46:7d:b5:6c:34:9a:
11:3b:f2:4b:a0:99:4b:b2:38:b5:7c:45:4c:1b:35:16:ba:23:
e0:80:a8:25:f2:b9:f1:0a:26:b2:fa:0c:c0:88:4a:5c:59:db:
c8:8a:95:4c:42:a4:83:a1:8f:ef:b7:42:28:3c:57:80:e2:af:
7a:7b:7e:45:ee:93:b7:e6:c3:49:63:3d:b1:7a:f7:ce:9b:d7:
ef:b8:9f:82:51:e0:31:21:17:68:0a:b2:b9:c2:ca:c5:5a:27:
92:32:2b:1d:d7:e2:72:91:75:32:94:68:2e:13:9a:29:ce:34:
e0:12:32:7c:59:0f:53:19:f5:39:ff:63:4c:13:05:36:c8:ae:
91:9c:13:2c:1c:98:35:ac:20:de:0f:ca:42:a6:10:e7:3e:10:
26:b8:0b:fc:12:d9:c7:6d:05:3b:6e:a6:8a:72:ab:10:52:cb:
b2:6f:c7:24:16:e0:49:69:16:7b:70:f1:2d:08:7b:ae:3c:b1:
e0:70:58:d2:6d:2a:17:a5:96:d4:11:35:b4:b2:fc:c9:13:ff:
17:0e:02:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPtmJuDmiXSIb0rzqIX+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMmViNDE0N2VlN2JmYzZiYTcyZmMwMzQ5NDUzNDk4ZjAw
MGU1ODEwHhcNMjYwNzI5MDUwMDI3WhcNMjYwNzMwMDUwMDI3WjAzMTEwLwYDVQQD
EygxOThjMTgzN2I4YmMxZDg4ODZjNWM2OWI4Yjk1MWM2ODIwYmU2ZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW4zfft96f6eC3p7i3BP78X9dq6V
AkGWD2T1DcnF2V86R/sk6MNGJhcRnjRepfzYUtHI1Q05Rvzn41TPAY3JArIHkcly
mbzoGImcpbjkkSRDgJ+rdgpirdg2nIswXiB77kG1pvYEZHwjJIGDaQEVRlrH1p7d
PFRP3SxOI2rI6C4ojouYg6W4MK/IY6H6Hp4TGiVy6mZvPT/lhp6OMep3Xq9LmByF
xoYwaFj3JpLbNJ7iLCttoZjUfA5iTvEnWCnNHuQHIteRkYNuDz7k+cnpOzHhrVZb
5oSIc2pRz5iKPSNrZstJs37oJZfF+A5ar3bAZ81tcSnsUryiaH7weoEBBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmMGDe4vB2IhsXGm4uVHGggvm1lMB8GA1UdIwQY
MBaAFD0utBR+57/GunL8A0lFNJjwAOWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iOGY1M2YtNDY3Zi00NWNmLTgzMDYt
NDI5NTFjMmNhNzM4LzEvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9iOGY1M2YtNDY3Zi00NWNmLTgzMDYtNDI5NTFjMmNhNzM4
LzEvUFM2MEZIN252OGE2Y3Z3RFNVVTBtUEFBNVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1Gie2bG
MsoIJ0UIUXsfuPBToBtJ2geVtOgAeNSNIKeuPXRR/MZ87PjZVjrTX1QVRn21bDSa
ETvyS6CZS7I4tXxFTBs1Froj4ICoJfK58QomsvoMwIhKXFnbyIqVTEKkg6GP77dC
KDxXgOKvent+Re6Tt+bDSWM9sXr3zpvX77ifglHgMSEXaAqyucLKxVonkjIrHdfi
cpF1MpRoLhOaKc404BIyfFkPUxn1Of9jTBMFNsiukZwTLByYNawg3g/KQqYQ5z4Q
JrgL/BLZx20FO26minKrEFLLsm/HJBbgSWkWe3DxLQh7rjyx4HBY0m0qF6WW1BE1
tLL8yRP/Fw4CAw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:04:06 2026 by rpki-client