Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
File: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft (raw, json)
Hash identifier: Ty/Yn3fcWhfv1YNq8mdEwgZRMdJrKnnG0QQt/TNNisw=
Subject key identifier: D2:EE:D0:B7:A1:B0:86:A5:66:E7:B3:D6:7B:F9:0C:9E:3A:EA:71:8E
Authority key identifier: 3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
Certificate issuer: /CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Certificate serial: 01A001DCEC459B1859EB2F17427EBBD8D084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 20:00:50 +0000
Manifest this update: Fri 14 Aug 2026 20:00:50 +0000
Manifest next update: Sat 15 Aug 2026 20:00:50 +0000
Files and hashes: 1: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl (hash: 5qP3Ledo6LobpVg4yHyt/pBJgnUB7LwfnXYdcMl+xAs=)
2: ZIfLwvSvOdji3MtHcGgMuSoqhAQ.roa (hash: JIFRgTtvZClZWs/BH3CyPh0KvLINAkB1ip40YGPLcQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:ec:45:9b:18:59:eb:2f:17:42:7e:bb:d8:d0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Validity
Not Before: Aug 14 20:00:50 2026 GMT
Not After : Aug 15 20:00:50 2026 GMT
Subject: CN=d2eed0b7a1b086a566e7b3d67bf90c9e3aea718e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:56:24:e4:9d:68:74:1a:96:0a:47:c6:8a:18:
b3:e0:18:de:5d:f1:65:cb:ea:dd:d3:18:29:1d:b9:
0b:4d:17:02:c6:90:4c:0d:f6:f3:ed:d6:ba:49:17:
e3:a9:d6:d2:d1:3e:25:5d:1c:9b:83:a9:9d:73:5f:
59:b9:88:56:ba:4b:4e:a3:8c:f9:2a:d7:fe:e1:1a:
28:8b:05:82:69:ce:21:51:5e:70:2b:cb:19:10:72:
0d:4a:87:af:e9:7f:44:f4:bc:13:91:50:ac:61:79:
3d:07:cf:83:1f:cb:77:84:78:eb:cb:c9:eb:5e:2e:
64:44:73:91:bc:87:d3:6a:c9:5f:1c:92:f7:23:7e:
05:89:fe:2a:11:5d:84:78:5d:8d:19:7a:28:a5:80:
29:7c:92:76:90:4e:7a:ee:c0:1a:d0:3c:03:b0:38:
d1:f1:ea:24:13:57:bb:be:a9:6a:6d:c1:49:ae:9b:
dd:4d:c4:8b:0c:2e:34:18:f9:a6:6d:9a:ad:cd:76:
80:28:f0:9f:73:b3:e8:7e:7b:be:b8:8c:26:2d:e3:
0a:5a:47:a8:fb:1f:89:50:e2:4e:c1:be:be:ab:5b:
78:fd:1c:e5:21:21:e2:08:49:1a:fb:02:c4:ec:36:
93:db:57:f6:dd:c1:a4:c7:0e:c6:5e:fb:eb:e7:ba:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EE:D0:B7:A1:B0:86:A5:66:E7:B3:D6:7B:F9:0C:9E:3A:EA:71:8E
X509v3 Authority Key Identifier:
keyid:3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8d:0f:11:70:8d:15:f5:0e:7e:cd:a0:65:4a:f3:65:ab:29:
b7:03:0e:37:7f:9d:ff:da:5e:1b:de:dd:f3:45:2a:92:9a:22:
62:f0:86:fc:c2:17:a6:fa:3d:08:69:96:bf:20:b0:b2:7e:d6:
de:7d:f7:27:04:ba:72:e3:79:e8:00:8f:bb:07:5e:5a:5c:b3:
55:41:a9:a2:53:9d:56:1b:c0:da:25:55:3d:7c:61:2f:5c:ec:
17:ba:47:d5:1c:95:69:ae:33:9a:9d:cd:7c:2f:3d:1d:6b:12:
7c:62:fb:2d:c3:15:9d:bd:3e:46:2d:76:68:82:9f:10:df:5f:
ad:42:96:f2:67:9d:85:db:a1:42:43:6c:9f:7d:c8:65:26:91:
72:db:ab:4e:76:6f:07:f4:86:9b:3e:c6:36:f1:dd:a7:2f:67:
96:07:5b:8b:eb:71:66:d4:8e:e8:3e:6a:a5:47:10:4b:fe:87:
f0:a3:75:72:e8:40:b3:b3:d7:9b:6f:71:f3:4c:6d:cf:78:ff:
ef:49:12:8e:f9:e3:a5:8c:6b:4d:fc:99:7b:bb:2c:ca:8d:0f:
8a:93:fb:06:e8:7f:65:9b:b2:01:26:c9:e2:79:ce:68:3e:0a:
13:98:fa:33:cd:66:31:c0:71:bc:e1:a7:85:ea:94:16:26:0a:
99:7a:55:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:29:02 2026 by rpki-client