Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
File: PUJ2NzsED6msd-VmxbbN81tTuTc.mft (raw, json)
Hash identifier: a5/+11WqENyWBFuealw/BvkeKx+b7N3RuX7Uq3j62Tk=
Subject key identifier: D6:66:3D:98:64:A2:8A:D9:76:FD:0C:1B:E8:B5:BA:70:F9:85:5E:1E
Authority key identifier: 3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
Certificate issuer: /CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Certificate serial: 019FFD93847B8AB68958BDBE2E42ABBCBA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
Manifest number: 08E0
Signing time: Fri 14 Aug 2026 00:02:11 +0000
Manifest this update: Fri 14 Aug 2026 00:02:11 +0000
Manifest next update: Sat 15 Aug 2026 00:02:11 +0000
Files and hashes: 1: 7bvtPGLStjnkciwxFvPTYgFWfQk.roa (hash: vjeKrroXH7m1N2sP7ErrsCURI+wiwxbcMJEOYB8cjgg=)
2: PUJ2NzsED6msd-VmxbbN81tTuTc.crl (hash: xln4yOiXvvv2DfT6tlSLQMvmaPi98qQwpS/AMMMj8js=)
3: ci6tN1QYoZrZv06rGimHLD0X5JE.roa (hash: WnzalM5cF/dIA1v+fSMQnZMN9WMkUhH0XGHms4w38Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:93:84:7b:8a:b6:89:58:bd:be:2e:42:ab:bc:ba:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Validity
Not Before: Aug 14 00:02:11 2026 GMT
Not After : Aug 15 00:02:11 2026 GMT
Subject: CN=d6663d9864a28ad976fd0c1be8b5ba70f9855e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f3:1d:30:6c:58:8d:b0:51:93:7a:cf:68:4b:
a2:7e:85:d3:75:40:a4:ca:00:26:b7:bb:ec:12:96:
3d:f1:2f:25:85:33:4a:05:12:de:27:7f:aa:70:19:
a4:70:81:af:97:4e:d7:89:82:f2:2c:36:e7:10:b7:
e8:ec:43:fd:af:c2:2b:3f:11:23:da:26:78:97:18:
76:1b:3c:ff:c6:40:a8:91:b3:52:5d:ec:30:f5:41:
34:3f:7e:2a:30:1c:da:c4:d9:81:4f:ff:df:40:a7:
49:a6:b8:38:7e:37:67:4e:16:2a:22:87:5e:b0:3d:
6f:c8:56:81:7b:6f:77:19:21:df:30:c6:55:68:4f:
48:94:c4:f7:43:ad:88:b8:1d:ab:3e:61:e5:6d:fe:
b0:ff:12:02:b5:51:e5:47:b9:d3:1a:5c:5e:d8:9a:
9c:c8:79:20:c6:fa:b2:24:11:c0:50:67:4e:be:b8:
ec:34:f9:64:7f:46:45:05:1c:bf:b1:21:57:a3:b9:
40:15:22:56:07:12:7b:11:4b:35:de:e2:03:fd:f3:
c4:57:ad:e3:d8:f9:35:30:72:80:25:67:86:dc:21:
42:22:28:78:6a:58:87:db:f7:1b:be:26:64:84:e8:
37:c6:86:ad:66:7b:6c:7e:22:df:fe:db:bd:fe:f6:
86:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:66:3D:98:64:A2:8A:D9:76:FD:0C:1B:E8:B5:BA:70:F9:85:5E:1E
X509v3 Authority Key Identifier:
keyid:3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:31:4f:ef:9c:d9:2b:51:bd:4e:91:19:44:39:26:08:24:d1:
7d:47:c2:4b:e1:71:ad:3e:1b:52:8e:28:0a:b3:92:da:2c:37:
9b:95:d6:98:a0:97:94:e1:04:01:5c:3f:10:06:b0:35:bf:19:
6e:e9:cf:85:65:e6:77:69:74:54:10:c2:0b:b0:ec:e3:44:ec:
da:11:4e:90:76:02:38:22:36:a8:c2:db:31:16:27:21:80:69:
db:53:90:56:53:dd:6e:0e:6d:9c:ca:0d:2d:94:fa:10:0e:e0:
82:70:63:85:df:b0:89:e1:36:a1:08:1c:f1:2d:5b:c2:b7:08:
dc:fe:b8:83:2d:dc:a0:22:33:e3:8c:94:4d:9e:1d:49:ba:26:
f4:ab:71:92:1d:f3:8a:b7:23:5c:99:4e:86:01:b1:9e:ea:5e:
68:f9:17:df:db:3c:1b:24:30:56:d4:bc:f2:78:42:c6:91:e1:
ca:b0:f3:29:bf:2b:47:48:ae:0e:15:b5:2f:1b:d5:ad:16:7c:
b5:9b:a2:1f:12:f2:ab:c8:b9:32:7a:a5:46:49:77:ce:fe:d1:
4b:66:70:85:37:ec:9e:11:cb:43:27:a8:f8:85:ad:be:fa:ca:
82:02:a2:fb:f7:d9:5f:f6:aa:59:97:5f:c1:18:c9:82:68:4a:
31:d4:36:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 06:09:55 2026 by rpki-client