Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
File: Puk-t9S1uv9yBoVbFODuWGET0J8.mft (raw, json)
Hash identifier: wtOgzrQ1ddDCP7KUnez6VcRFgt00sL0vvB3U8bxwrWs=
Subject key identifier: 53:FF:71:F5:CE:D4:5F:9C:00:F0:68:8A:B9:47:D7:EC:DF:0D:A2:97
Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
Certificate issuer: /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Certificate serial: 019EB732F0BDCB1C1901294C84AD4B7EDFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
Manifest number: 1715
Signing time: Thu 11 Jun 2026 15:00:29 +0000
Manifest this update: Thu 11 Jun 2026 15:00:29 +0000
Manifest next update: Fri 12 Jun 2026 15:00:29 +0000
Files and hashes: 1: Puk-t9S1uv9yBoVbFODuWGET0J8.crl (hash: xUS/18LDmGT6TKu0frALWAcShm7DR2NgQQmjB/1crxQ=)
2: miIF7cKPQgBw0FAQgFgTnKxWG70.roa (hash: RlEN9ZFVRfvKtRA7xfX2xwkOVgWXXIc6PBrgfB1+iXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:32:f0:bd:cb:1c:19:01:29:4c:84:ad:4b:7e:df:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Validity
Not Before: Jun 11 15:00:29 2026 GMT
Not After : Jun 12 15:00:29 2026 GMT
Subject: CN=53ff71f5ced45f9c00f0688ab947d7ecdf0da297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c1:6b:a9:d5:74:c9:1f:79:ec:41:af:6a:9f:
11:a4:87:75:24:58:49:9e:7f:63:6e:9c:96:9b:dc:
e9:ed:f3:2f:c7:ec:48:df:4e:ff:28:dd:5f:00:f3:
c1:06:da:89:10:cc:59:74:ff:aa:17:69:a1:51:39:
06:4b:e5:fb:b2:f8:75:2b:ba:6b:39:9a:52:64:5c:
59:01:ac:44:f7:b9:bd:79:32:64:22:5e:52:11:85:
ec:b1:13:f3:f7:bf:4c:59:79:1f:41:95:7b:22:4e:
30:63:9d:ac:52:00:97:15:70:e6:a1:b0:f9:5b:6e:
e4:ef:a1:55:b5:4a:0b:18:d9:ab:e4:eb:1d:02:9a:
61:81:38:a5:55:7f:72:4f:00:24:4e:89:94:b0:ef:
0c:ad:7e:8e:4e:6b:55:dc:cc:f6:88:b3:0c:a9:63:
87:de:82:86:c6:06:4b:b3:f7:f3:ed:f9:26:06:c4:
58:02:7e:db:72:a1:9d:48:a6:5e:2a:0a:c7:db:d4:
22:02:cd:70:5a:dc:e6:3f:31:22:12:c7:31:0d:83:
0d:a7:9d:a1:ea:c0:dc:b9:9d:3a:6b:a6:4f:88:dd:
8d:d8:3c:51:b8:e3:ca:89:3b:ea:b9:f1:dc:31:6f:
71:ab:e8:d3:22:dd:83:f6:8a:d0:ef:77:29:8e:9e:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FF:71:F5:CE:D4:5F:9C:00:F0:68:8A:B9:47:D7:EC:DF:0D:A2:97
X509v3 Authority Key Identifier:
keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:98:a6:8d:fa:d2:33:f4:f4:48:1b:09:ae:05:f9:12:0f:fd:
f9:de:22:98:25:f8:d3:7a:b1:5d:2a:16:97:41:5b:74:a8:20:
93:3c:b5:ef:c3:14:db:ef:40:b0:1d:e7:f4:3a:ca:c1:c6:ff:
bc:ea:25:80:29:88:4e:2a:8a:ec:aa:71:72:b7:fd:86:2c:b1:
35:3b:8c:db:d9:f9:03:39:b3:8c:8c:81:fc:c4:63:af:75:f4:
83:4a:47:6d:54:0a:ea:83:d4:1b:71:a4:13:55:9a:51:3d:e5:
f9:81:e3:25:a8:80:79:d7:5a:ba:46:f6:fd:b2:a8:ed:ee:8f:
22:d0:ed:69:ad:ce:a4:0b:5f:d9:e6:d1:11:ec:6b:ef:47:7b:
01:1a:bf:0a:b5:74:7a:d3:26:50:24:f4:72:62:c1:8f:46:de:
10:29:17:cc:d5:6d:b7:8e:2b:0c:82:01:9a:96:c4:18:9b:bb:
4c:30:06:d0:e3:66:cb:d1:3d:17:27:e9:ea:9d:ff:46:89:e3:
a2:9c:45:e7:13:b8:ef:6b:58:37:17:d6:a6:d2:69:7c:49:e9:
66:4c:72:f5:af:e1:83:d4:cf:89:02:2c:11:fa:2e:17:cd:40:
79:42:2e:cb:b4:d5:64:2e:48:05:d7:f9:4d:96:da:b3:57:b6:
8b:6e:94:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:59:54 2026 by rpki-client