Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
File: Puk-t9S1uv9yBoVbFODuWGET0J8.mft (raw, json)
Hash identifier: /7lfexUX4Gh9fOd3iOsrBIMfzspVvywcmv45Azf/6KM=
Subject key identifier: 18:38:7D:9B:C8:FF:81:6F:68:8A:36:DC:EA:AF:FF:CC:87:3D:E5:1F
Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
Certificate issuer: /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Certificate serial: 01A18B9C3447523DC5EE7AB14D4035D390C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
Manifest number: 188D
Signing time: Fri 30 Oct 2026 07:00:32 +0000
Manifest this update: Fri 30 Oct 2026 07:00:32 +0000
Manifest next update: Sat 31 Oct 2026 07:00:32 +0000
Files and hashes: 1: Puk-t9S1uv9yBoVbFODuWGET0J8.crl (hash: mBEwdcyWjJJ+EChHDCSP0ugAlSTsZzf/YvDPZ3/msHw=)
2: _82rn3kS0GA6FriFivBr31gF5UE.roa (hash: D5RBaDmHDEoPBeCWuS4WbmDK8YoC90IEPe3eHRU+tkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:9c:34:47:52:3d:c5:ee:7a:b1:4d:40:35:d3:90:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Validity
Not Before: Oct 30 07:00:32 2026 GMT
Not After : Oct 31 07:00:32 2026 GMT
Subject: CN=18387d9bc8ff816f688a36dceaafffcc873de51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:8c:ac:0d:35:35:cf:88:7f:b9:7b:73:90:
ea:78:9e:0c:cd:32:44:b7:db:69:e4:68:ab:70:7c:
75:d0:c2:73:d3:0d:d1:0e:5f:12:50:17:bb:84:47:
4f:8f:95:6e:43:1f:7f:5a:0c:24:0c:52:5a:37:91:
7e:3f:5c:98:05:2c:2f:2a:ec:58:3c:ff:f5:06:2c:
bf:80:a9:ae:3d:7a:b4:f5:29:e3:cb:95:6a:f9:29:
60:b1:2b:9c:4a:f6:41:c8:e8:bb:db:4d:1e:b0:50:
c1:3b:1a:d3:7c:1c:31:ae:6f:21:23:d4:b4:88:70:
44:7b:61:b4:4b:df:1a:24:5d:ac:68:ed:5f:4a:16:
a8:35:7c:f7:72:8a:f8:63:ca:b3:6b:83:23:67:4c:
69:db:15:e3:1b:cd:cf:fa:49:34:ee:63:58:68:fe:
6f:96:80:50:06:18:eb:36:4d:d6:69:2d:56:99:a6:
4b:c4:75:66:0e:d4:c0:ee:7d:a4:19:98:c5:0b:d4:
2e:d1:00:39:2e:6b:8e:66:86:08:13:cc:b6:09:c5:
07:dd:70:ab:64:ad:b3:20:f8:d9:33:04:0f:6c:9c:
b0:c6:59:84:f8:aa:d8:2f:0c:46:9f:52:70:be:54:
61:f3:e1:58:82:9a:30:c5:a7:dc:ca:18:82:11:f7:
b2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:38:7D:9B:C8:FF:81:6F:68:8A:36:DC:EA:AF:FF:CC:87:3D:E5:1F
X509v3 Authority Key Identifier:
keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ef:c3:68:03:32:80:4a:03:73:0d:28:4e:43:ce:09:ad:b2:
4e:ff:fd:a7:46:67:c4:ce:38:fd:a0:b0:8f:1b:07:46:69:d4:
cb:c7:51:33:19:28:f3:59:43:80:76:01:ed:3f:c2:92:b9:f1:
1e:78:9c:41:bd:24:96:33:70:35:d0:91:e8:4b:78:16:cf:ff:
e1:d5:3d:19:7c:dd:88:37:48:01:5d:fd:77:15:42:d5:b0:b2:
f2:71:eb:bf:41:db:2b:cc:d1:5d:97:32:22:18:17:df:e9:09:
92:3a:a3:5d:7b:2c:37:fd:0b:42:73:d4:b9:c7:ca:d1:ab:9d:
63:65:e0:8f:97:b9:85:c8:b5:e4:72:f8:e7:97:c8:48:aa:a6:
78:e3:18:64:9c:c2:da:e1:81:71:ca:1e:83:84:36:cc:ce:87:
ed:36:3d:f0:6f:da:b1:bb:2b:16:3e:60:0c:c7:dd:a9:0f:89:
c3:6d:8d:31:d6:ce:27:68:6f:6f:92:7d:64:b3:d4:c7:e6:3c:
2d:a5:19:18:94:a9:43:48:2c:2e:eb:69:dc:34:4f:b8:af:e3:
d3:f6:56:5f:42:44:db:99:ba:e8:5c:86:83:e2:31:cb:21:eb:
66:02:53:f1:d7:5e:c0:69:8e:8b:ef:b5:fc:29:81:3f:54:a0:
0b:f2:72:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 15:30:02 2026 by rpki-client