Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: XqL2M5OlXzRD2M+xJ2bKUUV0GycXVzzZ5M15/7oDqeQ=
Subject key identifier: 00:79:3C:6D:1E:DE:74:AC:69:84:10:A3:A3:50:6C:7B:A9:EB:8E:2C
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 01A06F4C56957FD4E3AC546D3699F9AE6AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 1A48
Signing time: Sat 05 Sep 2026 02:01:08 +0000
Manifest this update: Sat 05 Sep 2026 02:01:08 +0000
Manifest next update: Sun 06 Sep 2026 02:01:08 +0000
Files and hashes: 1: Sd9Inu8fRPZCviAypagCQcKKkmw.roa (hash: 0ZUMOh3JNBttpQEEjg9e7KJhBDQfVabAIV5ANe3h4Ng=)
2: UlsUu7gepOaa3SQKJJkuwOw5-Ow.roa (hash: hU1g21d4Xv9edIn/CDl1qXeVfqS91ol/VVK46174T28=)
3: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: 16q6Bm1+CJ6IAYrzNwNTmOdH2KLJ7lalQd+9mK8so5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:4c:56:95:7f:d4:e3:ac:54:6d:36:99:f9:ae:6a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Sep 5 02:01:08 2026 GMT
Not After : Sep 6 02:01:08 2026 GMT
Subject: CN=00793c6d1ede74ac698410a3a3506c7ba9eb8e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:82:2a:6a:5f:60:fd:dc:9c:56:1b:3a:24:8f:
44:3a:7a:81:96:d5:10:fa:46:b3:61:a7:ee:00:fc:
49:b4:54:d5:ab:33:b7:f5:5e:93:a7:8b:69:fe:5b:
71:0f:60:b1:0d:f6:e8:e9:bf:e1:9b:d7:ba:e6:c0:
e0:eb:b3:24:ae:06:70:b8:6c:2c:04:60:40:31:cf:
ed:61:05:9e:e4:0f:26:69:10:7a:ab:72:d7:76:95:
9d:5d:50:01:01:8f:0e:c6:27:a2:57:a1:9b:dd:41:
31:96:26:95:35:cb:bb:0d:8f:ba:e0:14:44:b9:52:
cf:1c:b1:ea:73:0d:ac:4d:53:3f:55:62:2b:be:32:
9d:a5:a1:37:fe:43:99:d7:f9:22:df:47:a7:5c:50:
65:e3:b9:c1:d7:63:80:cc:7f:32:d7:0e:18:3b:6a:
01:a5:8d:b8:1d:2a:bf:22:de:16:df:51:44:f5:88:
4e:65:b6:f1:33:bd:c5:77:bc:49:18:39:05:bb:0b:
1c:1e:4f:30:75:a4:19:ab:30:c9:93:97:55:87:70:
a6:6f:cb:41:84:54:65:e7:36:5b:c5:bb:61:7b:d2:
06:49:08:bc:05:b9:21:f3:3d:13:2a:2a:9b:d9:3b:
fe:4e:fa:4a:de:da:81:1b:4b:ba:7f:35:85:aa:65:
ee:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:79:3C:6D:1E:DE:74:AC:69:84:10:A3:A3:50:6C:7B:A9:EB:8E:2C
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0d:ea:c3:60:5c:02:66:41:fc:88:a9:b8:c9:2d:fd:15:0a:
e0:54:bc:97:c6:21:e6:00:01:ed:05:92:3c:c7:b5:14:92:a0:
de:c6:ed:dd:30:9a:a8:64:ec:d2:ed:75:25:05:a4:49:e1:10:
6b:b1:9a:14:95:ea:24:7a:92:4e:86:b8:0c:8a:bf:39:9e:6f:
61:6e:42:b5:35:2c:b8:01:11:c1:c5:9f:43:ba:d9:7b:1b:88:
00:87:d3:e0:ac:ac:bc:9b:79:bc:66:dc:3a:be:bb:cf:b6:cd:
9b:e7:e5:a6:88:1c:25:6c:3b:ca:ef:96:99:d6:7d:76:49:67:
f4:0f:da:c5:3a:91:1a:37:f4:4f:93:e1:f7:b9:5f:ed:b4:46:
c7:0a:82:1c:aa:fd:6a:11:da:6d:b3:60:ef:88:f9:35:d8:39:
09:53:6a:c1:86:a9:96:52:bb:d8:8b:f5:b0:42:08:9c:31:5e:
e0:86:f4:69:d6:98:07:00:78:64:43:8a:90:d0:ff:45:13:f1:
77:08:55:12:7b:77:da:1c:29:66:72:c7:00:42:aa:17:b1:db:
cc:00:71:31:05:cd:73:11:71:cb:47:48:b1:b2:e7:4b:f7:80:
39:2e:98:04:50:b2:fc:7f:79:cb:ad:92:33:24:02:c0:92:00:
ea:a6:e1:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvTFaVf9TjrFRtNpn5rmrrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ZWQ0NDJiOTFkNGU4M2E2ZGUzOWZiNjc5NzFhMWU3OWM2
YjFlZDUwHhcNMjYwOTA1MDIwMTA4WhcNMjYwOTA2MDIwMTA4WjAzMTEwLwYDVQQD
EygwMDc5M2M2ZDFlZGU3NGFjNjk4NDEwYTNhMzUwNmM3YmE5ZWI4ZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IIqal9g/dycVhs6JI9EOnqBltUQ
+kazYafuAPxJtFTVqzO39V6Tp4tp/ltxD2CxDfbo6b/hm9e65sDg67MkrgZwuGws
BGBAMc/tYQWe5A8maRB6q3LXdpWdXVABAY8OxieiV6Gb3UExliaVNcu7DY+64BRE
uVLPHLHqcw2sTVM/VWIrvjKdpaE3/kOZ1/ki30enXFBl47nB12OAzH8y1w4YO2oB
pY24HSq/It4W31FE9YhOZbbxM73Fd7xJGDkFuwscHk8wdaQZqzDJk5dVh3Cmb8tB
hFRl5zZbxbthe9IGSQi8Bbkh8z0TKiqb2Tv+TvpK3tqBG0u6fzWFqmXu/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAB5PG0e3nSsaYQQo6NQbHup644sMB8GA1UdIwQY
MBaAFKbtRCuR1Og6beOftnlxoeecax7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81NTNkYzYtMTJkMC00ZDRhLWEyOTQt
OTdjNWQ1OWIwYmJmLzEvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS81NTNkYzYtMTJkMC00ZDRhLWEyOTQtOTdjNWQ1OWIwYmJm
LzEvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQ3qw2Bc
AmZB/IipuMkt/RUK4FS8l8Yh5gAB7QWSPMe1FJKg3sbt3TCaqGTs0u11JQWkSeEQ
a7GaFJXqJHqSToa4DIq/OZ5vYW5CtTUsuAERwcWfQ7rZexuIAIfT4KysvJt5vGbc
Or67z7bNm+flpogcJWw7yu+WmdZ9dkln9A/axTqRGjf0T5Ph97lf7bRGxwqCHKr9
ahHabbNg74j5Ndg5CVNqwYapllK72Iv1sEIInDFe4Ib0adaYBwB4ZEOKkND/RRPx
dwhVEnt32hwpZnLHAEKqF7HbzABxMQXNcxFxy0dIsbLnS/eAOS6YBFCy/H95y62S
MyQCwJIA6qbhbg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:27:43 2026 by rpki-client