Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
File: PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json)
Hash identifier: n16yk2O5falFHdOKuHEUe4hDmHdKnxTLTZWamkhexlU=
Subject key identifier: CB:84:A5:F7:EA:69:79:8C:49:71:74:4C:D6:B9:C2:B4:70:DA:BA:FB
Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Certificate issuer: /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Certificate serial: 019E3305E6708A13D118BF7BA898752313EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
Manifest number: 038A
Signing time: Sat 16 May 2026 23:01:25 +0000
Manifest this update: Sat 16 May 2026 23:01:25 +0000
Manifest next update: Sun 17 May 2026 23:01:25 +0000
Files and hashes: 1: 2P0Kjjt5-7UDTZhBwA-FFuDiDYM.roa (hash: e8dlsMoEY5OAzunOS6SXf0tgQsD9v9aE1pqpQ/DOvsk=)
2: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: 9tk+I4cgfAaPyYkKnqvYqXLDAQKa7FeC8EFt77qrNWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:05:e6:70:8a:13:d1:18:bf:7b:a8:98:75:23:13:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Validity
Not Before: May 16 23:01:25 2026 GMT
Not After : May 17 23:01:25 2026 GMT
Subject: CN=cb84a5f7ea69798c4971744cd6b9c2b470dabafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:6a:11:b4:85:91:2e:ef:4c:bf:c0:cb:ee:
77:f6:2b:24:f1:a0:d5:a9:7d:9b:25:16:42:8d:ef:
0c:a7:cf:30:26:d4:1d:f4:3a:9e:89:f0:3b:45:2f:
0d:05:a0:3b:8a:ae:7e:3e:d2:60:f6:09:c7:7d:bf:
0f:98:7a:54:ff:6e:3e:d7:b0:5a:9f:33:99:59:3c:
fc:67:ac:72:fa:11:4a:8d:1c:dd:de:a9:7c:cd:6c:
83:e5:0f:8d:90:59:12:dd:8b:7b:67:bc:63:20:d3:
59:e9:ec:aa:b3:fd:bd:14:13:21:e0:be:eb:b9:14:
b9:80:6d:1b:79:18:c7:4f:3d:bf:35:9a:c8:6a:5a:
b2:db:c5:a4:48:de:3a:c6:2c:30:86:3e:60:6c:ac:
d4:f8:68:29:40:67:48:cb:7e:e3:cc:37:76:c1:3f:
54:47:91:48:76:c9:27:7f:cc:ee:9d:e7:04:81:da:
43:e1:00:bd:c7:0e:70:dd:f2:60:8f:cd:36:89:20:
5f:42:d3:fe:b9:16:e8:9c:68:3a:5a:24:af:fa:f8:
e9:6f:5e:9d:2d:fc:28:21:b7:8e:3a:76:2e:f5:32:
c2:00:20:66:97:2e:47:d8:41:38:42:b6:ab:55:0d:
3d:fc:e7:b9:27:41:32:c6:aa:2c:e8:9d:88:41:56:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:84:A5:F7:EA:69:79:8C:49:71:74:4C:D6:B9:C2:B4:70:DA:BA:FB
X509v3 Authority Key Identifier:
keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a3:51:f5:dc:92:21:01:40:d5:be:93:2f:9a:e9:9a:78:f2:
61:dc:bf:a9:42:d5:5d:b9:b0:14:20:23:03:12:d4:ca:50:96:
54:14:29:13:e2:14:79:10:c1:17:6c:62:84:a8:97:d8:ae:2a:
f7:b6:73:a7:a3:4c:af:8b:04:1b:7d:6e:32:0c:da:b6:62:d7:
ee:53:84:93:d3:53:6e:9d:86:bb:f3:0f:a4:98:da:bd:61:ad:
e8:1a:34:5c:d0:0c:cd:85:c2:59:1b:0d:3b:28:33:d3:7a:cd:
77:4b:51:c1:36:4f:fe:50:71:59:10:14:bb:a3:32:62:1e:1d:
83:ff:e0:9f:dd:e8:2c:e5:d5:9a:ff:bb:1d:d5:a5:39:19:69:
ec:60:17:e1:1e:de:e5:fc:c7:59:be:15:03:10:43:09:fe:5d:
6c:61:c5:14:8b:f1:79:91:f2:b3:04:5d:65:b5:09:61:37:cc:
e2:a1:f2:e2:37:d8:0e:05:a8:46:44:31:c5:bd:b5:09:99:0f:
0e:b5:73:a2:7f:74:c5:22:84:88:37:ba:bd:91:30:32:0b:8b:
98:93:00:14:44:b0:b0:f2:ab:cb:02:12:2a:b0:01:9e:05:95:
f9:01:e8:06:6f:67:f4:03:99:46:37:07:46:ee:6f:13:6d:f5:
1e:56:40:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:14:31 2026 by rpki-client