Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
File: Puk-t9S1uv9yBoVbFODuWGET0J8.mft (raw, json)
Hash identifier: gKfFN+ECmNTRp53lrRnxb1vtw+KdcuOHLVEJZbUThFc=
Subject key identifier: 6A:97:29:07:81:BE:7E:FC:A6:14:45:90:B7:34:F9:09:67:D5:C7:B7
Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
Certificate issuer: /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Certificate serial: 019DCD866FC7236EBF9283C166F0536B70D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
Manifest number: 169C
Signing time: Mon 27 Apr 2026 06:00:32 +0000
Manifest this update: Mon 27 Apr 2026 06:00:32 +0000
Manifest next update: Tue 28 Apr 2026 06:00:32 +0000
Files and hashes: 1: Puk-t9S1uv9yBoVbFODuWGET0J8.crl (hash: lcIw01xbvEffgmMtGejb85gQPVR347KexvmFULNLAIo=)
2: miIF7cKPQgBw0FAQgFgTnKxWG70.roa (hash: RlEN9ZFVRfvKtRA7xfX2xwkOVgWXXIc6PBrgfB1+iXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:6f:c7:23:6e:bf:92:83:c1:66:f0:53:6b:70:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Validity
Not Before: Apr 27 06:00:32 2026 GMT
Not After : Apr 28 06:00:32 2026 GMT
Subject: CN=6a97290781be7efca6144590b734f90967d5c7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:24:5a:48:0b:44:52:a0:30:1c:42:60:62:
d8:f8:e7:bc:84:73:fb:44:ad:ff:b1:6b:f0:20:96:
dc:23:b7:81:63:7e:81:3e:47:cf:75:a9:f8:ec:de:
45:14:65:fe:93:d1:69:6f:b3:dc:0c:2b:83:72:11:
af:15:1e:c2:80:b5:96:2e:3d:55:6d:ab:60:ba:cc:
4a:87:67:d6:f7:f9:b5:2a:69:e5:01:5e:b3:26:87:
86:f4:e9:95:68:a6:0f:f9:65:38:7d:38:86:7a:ee:
c3:71:bf:9c:0c:7d:cf:7c:77:4a:ed:08:d3:08:b8:
e5:f8:3e:c6:36:27:72:4a:45:c2:59:d9:b9:ae:93:
f4:95:b3:75:4e:41:f1:08:a7:0f:62:91:b7:2a:6f:
4c:47:dd:5c:33:11:6b:69:20:80:17:4b:2a:65:27:
62:9b:5e:42:1a:ec:64:eb:f3:48:ad:ea:f2:f6:7f:
63:f6:d9:0c:02:7e:7e:aa:1a:6c:33:f8:41:3c:91:
6a:50:17:56:8e:3a:e0:5d:fb:61:4d:7f:e7:9d:b0:
b7:a7:a2:c2:8e:b1:05:95:1e:1a:d6:86:1a:2b:5d:
f1:7e:70:6b:12:d3:36:5e:97:d3:c9:5e:7c:14:26:
71:94:c6:d5:36:eb:8c:42:c9:3c:c0:07:5d:e7:ad:
2c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:97:29:07:81:BE:7E:FC:A6:14:45:90:B7:34:F9:09:67:D5:C7:B7
X509v3 Authority Key Identifier:
keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:9a:98:35:e7:cd:8a:cc:ee:ed:96:d1:85:ce:70:fa:b4:09:
ee:aa:ee:af:92:9e:15:1f:f5:18:31:fe:c4:d0:8d:67:64:94:
6e:96:a3:75:e7:03:51:af:0b:69:10:39:08:be:62:18:b9:ab:
ce:14:b5:29:a0:15:d7:25:b6:c2:4a:b2:4d:aa:9a:04:ee:df:
8e:a5:2f:4b:10:fd:bb:7f:ca:c9:69:4a:12:40:9d:e4:57:a4:
41:e5:94:23:d9:21:8e:12:1f:c5:df:57:dd:96:e3:3e:ab:41:
46:bf:52:fe:03:dd:1e:45:09:e0:8b:78:91:a5:89:be:26:41:
c7:db:d0:95:6f:c7:49:c7:da:7c:9f:02:ef:b0:28:b1:f5:44:
08:aa:25:f3:7b:dd:1b:ae:0a:35:4d:53:d1:a5:93:4e:57:15:
6a:96:c0:6c:43:5d:27:fe:cf:87:cc:49:61:13:15:16:72:75:
2a:d2:de:83:22:90:4a:93:57:17:bf:61:b4:f9:f4:f1:57:5e:
12:d9:6c:d5:bc:49:d8:ca:89:fa:d7:cb:c4:77:58:be:43:50:
0f:ce:1a:02:0d:e5:31:84:f2:7d:73:4e:b1:e9:c7:b9:73:a6:
54:e2:7d:10:1c:a6:bb:7c:ff:85:f7:9b:09:37:7b:b0:59:4f:
59:ad:bb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:14:37 2026 by rpki-client