Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
File: pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft (raw, json)
Hash identifier: St4KFAu/WCWwmLXuT7BmWTv/MGOaITbCONHyUnNMbxc=
Subject key identifier: 52:3D:31:1B:76:32:0D:D2:5A:12:96:C1:B5:1A:DA:D6:75:CD:17:C1
Authority key identifier: A6:EF:D4:E6:EF:19:DC:5B:09:4F:7D:A1:89:02:AC:35:F3:FE:2C:19
Certificate issuer: /CN=a6efd4e6ef19dc5b094f7da18902ac35f3fe2c19
Certificate serial: 019F8568873DE93B2437EB79FC11C8B7813E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
Manifest number: AB
Signing time: Tue 21 Jul 2026 16:00:47 +0000
Manifest this update: Tue 21 Jul 2026 16:00:47 +0000
Manifest next update: Wed 22 Jul 2026 16:00:47 +0000
Files and hashes: 1: kHouM2VLdzKRZTCra3l9Z36Mmyk.asa (hash: sV07n58Gs6Mq12Maj9pNWDdpH7lTopJq8te/ptrRpDw=)
2: pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl (hash: cIgy+018Z1C7NnCgxZtkTmzUKTnOHvZ5EvCSjuMkr5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:87:3d:e9:3b:24:37:eb:79:fc:11:c8:b7:81:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6efd4e6ef19dc5b094f7da18902ac35f3fe2c19
Validity
Not Before: Jul 21 16:00:47 2026 GMT
Not After : Jul 22 16:00:47 2026 GMT
Subject: CN=523d311b76320dd25a1296c1b51adad675cd17c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:78:04:15:30:a7:f6:e2:f5:93:0e:4b:18:
7e:c9:9b:32:b0:1b:2d:9f:7a:19:e8:fb:0c:f7:f5:
b2:c5:b6:b0:c8:7f:c9:5e:99:34:83:3c:30:99:79:
1a:33:b2:d0:58:0f:e1:9e:aa:94:c4:e9:3f:47:41:
3d:88:e3:05:b8:85:fd:af:2f:66:a8:4f:8c:4a:fb:
d7:10:78:d5:55:f3:86:8a:9a:4a:4b:c6:49:f7:34:
45:11:2f:bd:ec:cd:9d:6d:ee:42:be:ab:cc:98:72:
78:51:01:4c:c2:5c:93:3b:25:a3:97:48:55:56:05:
77:de:f6:02:61:3f:cd:c0:1d:24:68:ac:04:41:e3:
56:74:fb:fd:41:c1:e5:d1:08:4b:84:3e:65:39:da:
0c:e2:2c:5c:15:86:bd:2f:b1:81:c0:f6:c0:27:fd:
7d:ac:f3:c1:42:e9:a2:ee:93:2a:95:2d:ad:45:bb:
2c:0d:c1:31:85:70:18:b7:94:48:d0:2f:c7:57:c8:
75:d3:64:51:04:4b:76:92:df:e3:67:b4:ed:cd:2a:
47:09:84:bb:e3:c0:0b:d4:f1:ba:77:36:cc:45:eb:
bf:f1:64:8a:39:c1:4c:50:31:7b:17:ca:04:26:97:
31:21:3c:21:de:60:5e:cf:cb:6e:77:f6:d3:82:1c:
ee:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3D:31:1B:76:32:0D:D2:5A:12:96:C1:B5:1A:DA:D6:75:CD:17:C1
X509v3 Authority Key Identifier:
keyid:A6:EF:D4:E6:EF:19:DC:5B:09:4F:7D:A1:89:02:AC:35:F3:FE:2C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:34:05:e6:e8:56:25:ba:42:46:b5:b5:7f:69:87:08:44:2e:
04:2f:15:a8:fd:dd:30:d6:2c:3f:da:16:05:92:bd:b6:11:48:
3a:1f:de:c6:2c:f3:28:75:8a:77:46:e5:64:0c:15:08:20:4a:
2a:75:e6:2b:dc:e6:a8:3a:08:30:93:c4:31:9e:28:f9:31:91:
e9:db:35:f7:20:34:25:6b:41:72:ce:47:d0:ca:60:4c:4c:d6:
07:a9:77:fa:e1:96:12:b3:cc:07:e9:49:9b:9a:cb:a8:0d:bf:
85:5e:b1:b1:ed:ed:03:46:8a:e9:ea:ce:7d:08:44:dc:9f:bb:
33:44:a4:b6:00:28:0f:c5:9b:e8:76:32:5f:1c:10:29:6f:b0:
f2:ef:b8:c3:7c:56:8b:bd:80:2e:92:e7:f2:5a:14:db:23:98:
42:e6:c8:64:35:e0:8e:0f:a6:a6:9a:03:23:b7:c1:14:5c:a2:
80:92:b0:9f:68:61:0e:76:7e:87:0b:6f:35:63:c9:6c:e6:b1:
db:31:a3:8b:0c:08:a2:3f:6f:62:d2:8b:6b:63:35:aa:20:e9:
c0:8d:3f:39:a2:e6:c6:26:60:31:29:9f:57:72:cc:fc:49:c6:
10:e2:6e:74:4d:7d:c6:46:d5:0e:f3:56:45:34:8d:0b:af:f0:
15:fd:34:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:17:48 2026 by rpki-client