Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: DhkEhA8GcUbrBYEts3qADeN3jD8h5Dc3WT/3E5QrbuU=
Subject key identifier: 18:61:54:08:91:AA:D6:E7:4C:4A:FB:40:8E:B7:6D:08:5E:F4:BE:FF
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 019D3909921F6FFFCF279524054B29299B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 10:00:21 +0000
Manifest this update: Sun 29 Mar 2026 10:00:21 +0000
Manifest next update: Mon 30 Mar 2026 10:00:21 +0000
Files and hashes: 1: mQL1nW7K7ybu0TZ9G8v3WzDDFmg.roa (hash: O084txLhwyZ8zQFJ9DRJsh8HYo5IGT97mu78wCO555Y=)
2: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: rGw3J+P+yveu4Xy+FGpsPLiiKW3djBiiwDZlc39F6wI=)
3: xkglo0MgpXeki5u8G7Zx40WueBw.roa (hash: P+lJK2YdwGnO2Q6H6+1l2oB4XSkWxXFQgilewZp5utI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:92:1f:6f:ff:cf:27:95:24:05:4b:29:29:9b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Mar 29 10:00:21 2026 GMT
Not After : Mar 30 10:00:21 2026 GMT
Subject: CN=1861540891aad6e74c4afb408eb76d085ef4beff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:82:81:3b:7f:b4:e5:c0:f3:cb:d1:8a:86:
04:2b:52:f7:55:f6:63:63:3e:89:1a:cf:1a:10:16:
23:2a:0c:30:09:a1:14:31:78:8c:fd:d4:e7:f9:0e:
05:de:ac:61:f6:3b:6c:65:3a:83:6f:0d:5d:85:9d:
05:ab:37:41:ae:b8:39:ee:50:2e:4a:6b:46:67:61:
da:0a:d4:92:eb:ff:7c:33:1f:32:8b:5d:ce:fc:f5:
a9:c8:5d:8a:07:85:44:0a:25:63:c8:0f:90:76:40:
b4:81:2e:89:01:d8:95:56:6e:27:a5:0f:e2:4f:7d:
70:18:2d:55:1e:29:ac:51:7f:37:da:a2:f2:42:1c:
52:4f:60:d9:c7:df:9c:5c:51:27:f5:e7:3a:ba:ab:
c3:e2:b1:1a:1a:49:e4:fe:0b:9c:42:b9:f1:d3:5e:
fe:4e:bd:e3:ff:b6:59:24:2a:7e:90:3b:3e:b2:ec:
4a:d7:fe:26:07:70:b3:b2:92:d2:80:74:78:96:50:
e0:da:70:24:e4:2a:f3:bb:fd:90:5e:e2:c9:16:63:
18:95:3e:a9:1a:a9:f3:be:04:a2:76:a8:05:87:ff:
5f:cf:82:56:2e:42:c0:bf:fc:4f:9c:31:d7:32:60:
be:36:58:5e:d1:87:b0:03:5f:8b:0a:98:05:78:1d:
40:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:61:54:08:91:AA:D6:E7:4C:4A:FB:40:8E:B7:6D:08:5E:F4:BE:FF
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1a:1e:1f:48:cb:21:d3:db:ef:be:f4:20:f6:b7:6d:75:66:
52:b5:07:52:40:ab:7d:d3:3b:f6:44:66:c4:0b:a4:d4:13:3c:
82:4c:bb:c9:e4:05:79:c7:71:4d:28:dd:9a:a0:d4:1c:eb:39:
d1:ee:de:9e:d4:57:f5:2e:cf:f1:6e:11:a4:05:71:97:1b:34:
01:1f:e7:31:2f:94:9a:c8:83:b0:a6:7a:15:0b:0d:bf:8a:8f:
f0:60:14:de:8a:1b:7d:dd:33:cb:c0:3c:21:4c:2d:dc:2f:a3:
b3:24:9e:0d:ae:2b:af:8d:f6:5f:bc:28:85:c2:23:d3:25:aa:
e2:6f:5f:ef:9d:19:2f:6f:96:e7:81:26:f0:1f:e7:90:41:bd:
d7:86:77:ba:f2:c1:48:2b:b0:77:15:f4:19:26:31:2e:ab:a1:
ca:16:c3:93:ac:99:5d:9e:ce:cd:87:8e:fb:36:39:1b:d8:10:
8e:29:45:68:c8:42:93:09:b5:1c:98:bd:29:33:16:64:e3:ad:
55:d5:a4:17:cd:57:c6:3b:21:48:34:a0:cc:8f:09:c0:f4:aa:
1c:7b:80:28:54:5b:38:d2:a1:1b:81:d2:15:5c:84:41:08:90:
11:1c:66:51:39:63:76:74:d7:14:3e:15:3a:5a:68:f1:b3:41:
e4:f9:46:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:29 2026 by rpki-client