Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
File: PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft (raw, json)
Hash identifier: bceO8IyJ596DUkPuX7uYA3+dqloaA8L/fJ+f5FialCE=
Subject key identifier: 22:AF:2F:27:5C:94:DE:0A:BB:78:29:2E:4C:8B:F7:67:DA:BA:72:F3
Authority key identifier: 3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2
Certificate issuer: /CN=3d4c79394062376bca63a63a0bf973992a9f80a2
Certificate serial: 01A1803D2F16F151B1D20B866E5BCFB4821C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
Manifest number: 12C0
Signing time: Wed 28 Oct 2026 02:00:55 +0000
Manifest this update: Wed 28 Oct 2026 02:00:55 +0000
Manifest next update: Thu 29 Oct 2026 02:00:55 +0000
Files and hashes: 1: PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl (hash: wPvcxylG6wiRXff5HJ2DZewBQ6oKGvtI8sK9hPQNHQ0=)
2: eaUkDUyviPefCc67-kFDMHq_RqQ.roa (hash: rInk7xSgUrA48qjh6/0iysB5Dr8JGb1TaNsKIV4JtXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:2f:16:f1:51:b1:d2:0b:86:6e:5b:cf:b4:82:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4c79394062376bca63a63a0bf973992a9f80a2
Validity
Not Before: Oct 28 02:00:55 2026 GMT
Not After : Oct 29 02:00:55 2026 GMT
Subject: CN=22af2f275c94de0abb78292e4c8bf767daba72f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:02:33:e6:fa:2d:4c:c1:d9:de:c7:8f:cd:
7b:8f:19:36:8d:ca:83:e0:3c:4b:ff:be:fe:57:39:
43:50:7e:01:23:08:7c:0f:bf:70:2b:e8:40:9d:ca:
51:e3:ef:ae:5a:ee:c8:61:3b:b2:73:7b:59:69:cb:
a5:4f:ec:fe:5c:01:1a:68:ff:5b:0d:3b:55:12:02:
e2:21:e6:8e:59:e2:7d:12:01:ba:e0:f0:92:a9:19:
ae:1b:7e:8f:02:81:32:ab:db:19:b9:d2:81:b4:2a:
da:17:e9:44:f6:7d:1f:fd:8a:70:9f:52:a8:1e:9b:
f6:e0:74:f7:af:06:19:90:e1:b6:5b:6a:eb:7d:f8:
30:17:80:7a:18:29:30:a5:3a:d1:2f:0c:63:0e:a1:
dc:4d:ef:69:9d:ef:f6:10:db:fa:b4:52:13:3d:74:
5e:63:42:f6:2b:cc:07:ff:83:66:bd:a6:d1:15:ce:
36:f8:92:55:ab:2d:dd:c2:79:7e:24:0f:d0:31:b2:
78:9f:20:43:38:51:a4:82:9a:04:82:26:8b:38:17:
37:be:c0:74:fa:8a:47:03:f4:26:4b:3a:a2:c8:f8:
9f:e4:c1:73:fa:59:0d:12:49:09:d1:f1:1d:eb:d9:
01:6f:7a:11:98:68:fa:83:2f:b0:88:28:e9:b0:b2:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AF:2F:27:5C:94:DE:0A:BB:78:29:2E:4C:8B:F7:67:DA:BA:72:F3
X509v3 Authority Key Identifier:
keyid:3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d6:3b:2e:99:f6:3f:04:c9:98:d2:be:99:09:3d:c7:20:c8:
09:7c:d4:84:cc:21:fd:69:ec:46:44:4e:7a:47:0a:7f:10:bf:
ec:1a:e0:96:29:be:5c:83:81:84:c6:9a:ef:88:40:bd:3b:fc:
04:79:b3:e4:06:fc:8e:38:3d:87:48:4c:7e:87:3b:21:04:95:
00:6c:d6:a3:34:e5:5a:0c:54:ec:a9:86:68:75:f2:1a:a9:99:
02:a7:a9:c3:49:8e:54:dc:c6:00:e7:80:37:78:8a:2b:df:15:
57:b7:ab:06:70:ca:71:ca:b5:5c:c4:f8:31:91:07:85:96:9a:
9d:77:50:51:a0:db:7d:01:3b:c0:99:d2:79:d5:0a:e6:39:c9:
60:35:6f:67:cc:32:85:1a:2b:c8:56:ff:f9:d6:cb:ad:18:3f:
22:75:1c:25:f3:76:25:35:ec:22:ec:c9:25:a9:87:69:1f:90:
c1:22:1c:95:a1:a2:6e:0c:c7:1c:05:de:06:ce:df:5b:9b:d3:
48:68:d7:1c:90:78:39:b5:44:5a:db:f2:53:9e:cf:fa:e1:96:
6f:7b:54:6e:1c:81:13:c6:c8:6c:4a:14:c8:fd:cb:e1:73:35:
a5:95:4f:b2:7d:56:5a:1c:59:02:2e:ad:c0:ba:79:80:8a:ef:
29:6b:7e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:27:35 2026 by rpki-client