Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
File: PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json)
Hash identifier: TvNN45xa0E+LoR2DN/6LrAJr1NMtudaY+mqgKcxGxr4=
Subject key identifier: 9A:28:4D:B9:67:FB:53:69:A1:9A:A6:E0:C3:85:FB:69:1C:0A:93:86
Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Certificate issuer: /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Certificate serial: 019D24A7E1A9977894D9F1011233FB660A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
Manifest number: 02FE
Signing time: Wed 25 Mar 2026 11:01:15 +0000
Manifest this update: Wed 25 Mar 2026 11:01:15 +0000
Manifest next update: Thu 26 Mar 2026 11:01:15 +0000
Files and hashes: 1: 2P0Kjjt5-7UDTZhBwA-FFuDiDYM.roa (hash: e8dlsMoEY5OAzunOS6SXf0tgQsD9v9aE1pqpQ/DOvsk=)
2: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: NEmw01/B6wkWSStn+yBoXoK0k35IVCwb7yyEqjdP+k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a7:e1:a9:97:78:94:d9:f1:01:12:33:fb:66:0a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Validity
Not Before: Mar 25 11:01:15 2026 GMT
Not After : Mar 26 11:01:15 2026 GMT
Subject: CN=9a284db967fb5369a19aa6e0c385fb691c0a9386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:b4:2d:10:a7:2b:e3:f2:10:d0:d8:08:fa:
30:8c:ea:63:bb:e4:6e:a9:8c:c8:4b:42:f4:6b:e1:
9b:f0:0a:21:91:cf:ca:57:df:b2:22:2b:4d:7b:c2:
d4:de:7e:53:97:3d:71:c1:63:1c:59:57:33:94:4d:
c2:01:14:ea:ef:6b:54:42:ae:9e:f5:21:c4:b9:7d:
b0:e4:45:43:5f:67:fd:97:22:64:4b:76:9c:09:b9:
86:35:ac:2a:c7:3b:49:26:69:c3:73:f7:ac:14:c8:
39:e6:95:15:a1:4e:b2:c1:a9:75:fa:a8:f4:fa:22:
e2:bb:08:e8:a9:97:7f:ed:03:dd:19:0e:a8:65:3c:
d0:cb:c7:c4:8f:d2:80:8c:e3:3a:81:a2:5f:50:3f:
c2:a9:1c:ba:71:74:3b:1d:35:58:9b:2a:99:b0:a3:
f7:e7:81:83:01:a9:5d:4a:f8:4e:01:14:bf:ae:1e:
dc:5f:2c:b6:31:0b:85:96:91:4f:67:73:76:8c:93:
df:8d:04:90:a9:98:71:bc:7f:e5:fc:58:3f:9e:29:
1a:8b:08:97:33:67:e8:55:dc:07:e5:4e:f1:fc:6d:
39:9d:8c:ea:fc:a1:48:9b:d2:0c:58:5c:46:d6:a5:
fb:4a:21:8e:75:61:f6:56:e8:bd:ff:e3:ba:9a:32:
05:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:28:4D:B9:67:FB:53:69:A1:9A:A6:E0:C3:85:FB:69:1C:0A:93:86
X509v3 Authority Key Identifier:
keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:49:80:cf:39:7e:12:1d:49:6c:00:a2:cd:d3:f6:b4:16:d3:
79:fa:fc:f6:08:e3:03:5e:f0:d0:4a:1f:89:91:cc:e1:74:65:
45:60:58:cb:05:9c:b7:d5:5b:50:c4:63:02:57:ee:f7:99:19:
15:68:2b:96:55:49:6a:93:7c:70:bd:e6:fd:e0:6b:9d:5d:ea:
99:41:ec:da:01:5e:27:18:fe:56:17:b5:93:41:02:11:47:cd:
62:f9:0f:7f:fd:65:eb:d2:74:e7:93:b8:7f:a1:e4:06:16:0d:
46:56:e2:66:f6:9c:1f:e5:66:1f:27:fc:71:22:d7:e2:5b:14:
f8:01:8c:50:a0:b8:42:40:ea:47:29:4a:f9:de:1c:9a:ed:9f:
39:43:fb:af:9a:6f:35:7c:2f:2d:36:ef:f6:f5:60:ff:ac:fb:
f1:18:09:ba:c1:30:76:23:26:27:b0:dd:15:0e:f2:af:d2:2c:
8b:3e:d5:19:81:da:05:30:6f:45:72:01:64:09:11:87:25:a0:
34:a7:79:79:c9:db:81:25:61:77:55:ec:36:59:80:88:4d:fb:
76:a9:29:d5:b2:80:9b:6d:a2:25:1b:55:a1:79:3f:e4:f8:60:
49:fe:70:7e:c7:dc:b1:55:91:a7:fa:0f:dc:63:b9:56:64:cf:
cb:36:f4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 18:43:07 2026 by rpki-client