Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
File: 1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json)
Hash identifier: HD1RjXbRhBQ2poovgpqM2P+QYU0ulKh5k1jm4qZIj1w=
Subject key identifier: 87:A5:D0:2A:50:A1:B8:27:38:8F:89:26:2D:CD:20:5F:F0:02:F8:AF
Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Certificate serial: 019D3865DD486729A2EC43D5DF8A31E1B502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
Manifest number: 169D
Signing time: Sun 29 Mar 2026 07:01:33 +0000
Manifest this update: Sun 29 Mar 2026 07:01:33 +0000
Manifest next update: Mon 30 Mar 2026 07:01:33 +0000
Files and hashes: 1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: OzIh/czVZ+nAzss36TmHqEXQNNb4kYYXG4Y9QklQQJc=)
2: 5VBqrJ3l2bBgVNFXgKoPrPjtOoo.roa (hash: pw/y5AALVmMkOsomb76pGvibV4sU9NfaodslXc53Ans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:dd:48:67:29:a2:ec:43:d5:df:8a:31:e1:b5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Validity
Not Before: Mar 29 07:01:33 2026 GMT
Not After : Mar 30 07:01:33 2026 GMT
Subject: CN=87a5d02a50a1b827388f89262dcd205ff002f8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:3e:f4:df:81:69:ff:cc:cc:3e:49:bc:73:
91:2e:f4:c9:f1:84:87:92:62:a7:3f:c1:71:35:1e:
44:28:d3:22:77:71:04:42:2a:5e:40:58:96:54:dc:
de:82:6a:35:71:78:ef:c8:f4:52:bb:25:f7:14:b8:
f6:be:e6:be:a5:4c:5b:9a:a8:24:3c:28:e9:93:4a:
f4:a2:a0:83:aa:2f:72:78:c0:c7:47:9f:78:10:c7:
ed:b3:69:ef:6f:ed:1d:3f:b5:1e:c1:60:3c:41:f7:
c9:3b:79:97:41:76:82:09:96:1e:9d:53:09:1a:ac:
10:bf:da:cc:5f:bf:d4:2a:dc:e3:e6:a8:d9:a1:81:
be:b2:9a:84:05:d3:95:55:9b:7f:2f:4d:64:ad:28:
e1:62:13:ab:7d:df:21:77:4a:6e:30:d2:63:da:2b:
5b:0d:77:48:6d:b1:51:0c:b8:19:db:3f:34:78:4c:
30:fb:a0:2f:27:ec:16:b2:a6:9b:8f:a0:e7:44:ac:
e0:69:75:d6:ce:fb:2f:e5:fc:fa:b1:6e:ff:e9:5f:
c4:c1:14:c0:ca:46:bb:8b:1f:17:dd:23:4f:82:2b:
c2:44:d9:85:8b:8d:ef:c0:df:60:7f:24:6d:b0:0b:
46:b4:0e:c3:1b:76:0e:f0:a2:5e:be:fb:ff:07:a1:
e6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A5:D0:2A:50:A1:B8:27:38:8F:89:26:2D:CD:20:5F:F0:02:F8:AF
X509v3 Authority Key Identifier:
keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0d:08:cd:ca:06:e9:bf:78:e1:52:d4:cf:ea:d1:95:88:41:
19:38:2a:31:31:b8:4b:12:41:2e:0a:a2:73:b9:26:4f:3b:d0:
ee:b5:4f:54:b7:1a:58:f1:5d:2c:8c:77:ac:0a:51:e8:03:f7:
07:2a:4e:f2:65:25:1e:f4:61:c2:70:a1:82:b3:e7:7a:55:cf:
41:fe:46:1c:8c:35:c8:e6:10:96:2e:1a:60:56:b6:59:d7:1d:
99:14:f7:68:5d:3a:8d:4a:c3:01:09:76:fc:e0:fb:2b:3b:d2:
c2:b4:82:65:41:7a:3f:f8:a4:3c:a8:c4:be:1e:49:cf:b2:ff:
7c:25:4a:c0:33:d0:9a:1c:97:e1:7e:7a:3a:b3:e4:0b:66:dc:
55:fa:0f:31:56:bb:66:eb:db:95:86:e2:61:70:94:3c:06:93:
b8:90:99:77:79:7b:a5:07:d1:d0:22:57:10:bc:db:86:0d:66:
21:82:cb:e8:87:9b:eb:fb:35:7e:c8:83:b9:45:82:ea:42:a4:
ea:df:9f:a4:78:ae:eb:c8:3a:10:e5:05:04:c6:c1:b2:c8:9b:
8a:95:e3:5a:d1:eb:b4:f3:6d:9f:28:2e:66:a6:ed:26:8c:c7:
e3:cf:63:97:22:f5:b4:82:41:5b:d0:73:5d:b5:23:6f:cd:1c:
c4:da:81:06
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ04Zd1IZymi7EPV34ox4bUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOWI4OWYzNjdkNGZiOTUwMjg3NzAxZjYyZDRhMDM5Yjdm
NmNiMjAwHhcNMjYwMzI5MDcwMTMzWhcNMjYwMzMwMDcwMTMzWjAzMTEwLwYDVQQD
Eyg4N2E1ZDAyYTUwYTFiODI3Mzg4Zjg5MjYyZGNkMjA1ZmYwMDJmOGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHU+9N+Baf/MzD5JvHORLvTJ8YSH
kmKnP8FxNR5EKNMid3EEQipeQFiWVNzegmo1cXjvyPRSuyX3FLj2vua+pUxbmqgk
PCjpk0r0oqCDqi9yeMDHR594EMfts2nvb+0dP7UewWA8QffJO3mXQXaCCZYenVMJ
GqwQv9rMX7/UKtzj5qjZoYG+spqEBdOVVZt/L01krSjhYhOrfd8hd0puMNJj2itb
DXdIbbFRDLgZ2z80eEww+6AvJ+wWsqabj6DnRKzgaXXWzvsv5fz6sW7/6V/EwRTA
yka7ix8X3SNPgivCRNmFi43vwN9gfyRtsAtGtA7DG3YO8KJevvv/B6HmWwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIel0CpQobgnOI+JJi3NIF/wAvivMB8GA1UdIwQY
MBaAFPqbifNn1PuVAodwH2LUoDm39ssgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1wdUo4MmZVLTVVQ2gzQWZZdFNnT2JmMnl5QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvOTg5MzNhLTc1ODEtNDk3OS05MTIx
LTBlMWE2OGM3NTYzYi8xLzEtcHVKODJmVS01VUNoM0FmWXRTZ09iZjJ5eUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY1Lzk4OTMzYS03NTgxLTQ5NzktOTEyMS0wZTFhNjhjNzU2
M2IvMS8xLXB1SjgyZlUtNVVDaDNBZll0U2dPYmYyeXlBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGg0I
zcoG6b944VLUz+rRlYhBGTgqMTG4SxJBLgqic7kmTzvQ7rVPVLcaWPFdLIx3rApR
6AP3BypO8mUlHvRhwnChgrPnelXPQf5GHIw1yOYQli4aYFa2WdcdmRT3aF06jUrD
AQl2/OD7KzvSwrSCZUF6P/ikPKjEvh5Jz7L/fCVKwDPQmhyX4X56OrPkC2bcVfoP
MVa7ZuvblYbiYXCUPAaTuJCZd3l7pQfR0CJXELzbhg1mIYLL6Ieb6/s1fsiDuUWC
6kKk6t+fpHiu68g6EOUFBMbBssibipXjWtHrtPNtnyguZqbtJozH489jlyL1tIJB
W9BzXbUjb80cxNqBBg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:32 2026 by rpki-client