Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
File: pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft (raw, json)
Hash identifier: FwFXCYkhQ7crOBKBWBzhPmPRDa+9JesP3kimM8myJSM=
Subject key identifier: C7:7B:EF:A0:F2:C3:68:CE:0E:EC:1E:34:1C:42:B6:97:1E:89:1B:95
Authority key identifier: A6:EF:D4:E6:EF:19:DC:5B:09:4F:7D:A1:89:02:AC:35:F3:FE:2C:19
Certificate issuer: /CN=a6efd4e6ef19dc5b094f7da18902ac35f3fe2c19
Certificate serial: 01A0EAAF0D2B603EEE787A0D5B7ABE049CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
Manifest number: 0164
Signing time: Tue 29 Sep 2026 01:02:15 +0000
Manifest this update: Tue 29 Sep 2026 01:02:15 +0000
Manifest next update: Wed 30 Sep 2026 01:02:15 +0000
Files and hashes: 1: kHouM2VLdzKRZTCra3l9Z36Mmyk.asa (hash: sV07n58Gs6Mq12Maj9pNWDdpH7lTopJq8te/ptrRpDw=)
2: pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl (hash: DSSo6AAICPRfmsnXqc0L330W12f73mxXPhQ072KO4jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 01:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:af:0d:2b:60:3e:ee:78:7a:0d:5b:7a:be:04:9c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6efd4e6ef19dc5b094f7da18902ac35f3fe2c19
Validity
Not Before: Sep 29 01:02:15 2026 GMT
Not After : Sep 30 01:02:15 2026 GMT
Subject: CN=c77befa0f2c368ce0eec1e341c42b6971e891b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:1c:bf:af:c3:cf:f2:f4:46:94:e1:77:65:
1d:a2:b8:3b:4e:af:c9:ef:c1:3d:c7:80:5d:6b:87:
bf:e6:ae:9c:e8:bd:b0:3b:b3:24:d0:95:88:9e:7b:
f3:74:51:26:44:c0:8b:e5:8d:8f:8c:41:0d:34:3f:
6c:d5:98:21:2c:bf:d4:39:4f:2e:80:e5:e5:db:dd:
bb:a0:8c:4e:fd:4c:8d:ce:99:3f:08:06:18:59:1c:
6b:31:86:05:0f:c3:df:a4:98:e2:a2:1e:20:61:1c:
f1:76:03:99:dc:17:87:69:df:26:c0:34:fb:13:84:
e6:f8:7f:dd:e6:28:8e:33:88:80:a1:95:d9:ab:59:
e8:c4:fd:6d:11:74:d3:33:b0:5c:34:ae:42:1f:cb:
56:e6:05:b1:33:2d:3e:65:cd:d8:8a:f2:4f:7d:62:
c5:54:db:d1:25:4b:33:e1:2e:51:89:ab:4d:68:14:
9c:a0:14:4c:73:f5:2b:77:12:0f:90:55:6d:12:0a:
db:35:76:f9:d0:ac:f7:55:ed:20:6a:02:00:c8:94:
57:94:c7:6b:2e:2c:ad:d9:7b:c1:42:04:06:ec:f4:
55:53:f5:f6:86:17:81:d7:7f:ef:4b:0f:30:f1:94:
0c:df:16:cc:67:7b:14:fa:00:71:05:db:e5:97:3d:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7B:EF:A0:F2:C3:68:CE:0E:EC:1E:34:1C:42:B6:97:1E:89:1B:95
X509v3 Authority Key Identifier:
keyid:A6:EF:D4:E6:EF:19:DC:5B:09:4F:7D:A1:89:02:AC:35:F3:FE:2C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:15:46:51:70:48:04:b7:88:79:cc:38:95:b3:9b:4f:e4:ba:
38:64:57:c7:bd:1d:e9:89:38:e6:7d:39:72:7e:87:d6:e9:e1:
f9:04:29:6a:e5:22:dc:11:ab:5e:17:ee:26:da:89:46:8b:61:
3f:9a:54:63:0a:1b:a3:65:a6:31:9e:f5:f6:a6:97:e8:26:65:
21:42:31:3b:8b:7b:96:e5:b6:9b:5d:41:d3:4a:7d:8d:ce:90:
67:25:09:e6:b1:6b:d4:df:e6:38:2f:57:07:7d:f2:c0:6b:9a:
e9:7e:fa:1a:e1:18:1a:8d:40:f8:e6:94:b9:29:a3:dd:68:c6:
74:7a:d3:c2:1c:3b:3f:64:3b:de:fd:6c:a0:0f:06:76:c4:7d:
17:5f:12:4d:37:00:f7:73:59:0a:12:d3:df:ee:6f:cb:c5:ee:
5a:c3:c4:cf:97:a0:57:02:23:d4:92:38:39:39:ac:a6:38:74:
4b:f7:5c:af:4d:a2:f1:b8:c3:3b:62:9a:14:76:25:9b:02:af:
9d:e4:6c:12:ae:7a:a6:c9:4c:3c:48:19:09:fd:c9:23:54:1d:
7e:78:ef:44:bc:e5:23:d2:04:5c:df:37:25:ed:df:8c:d9:ee:
ae:2a:33:d8:cb:9f:61:70:04:b9:b3:4d:85:68:b9:0f:54:fd:
5e:6d:94:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:18:16 2026 by rpki-client