Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: URQfhoBESKak8Bx+SQh/aOGDzfcqWfu343JBimCA+Hg=
Subject key identifier: 87:2C:A0:16:1E:B9:B2:3D:43:E0:BA:A7:52:5A:81:46:D3:16:70:4F
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 019E90CA2C6999BEBD8D3DE20D17B10E46B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 1947
Signing time: Thu 04 Jun 2026 04:00:28 +0000
Manifest this update: Thu 04 Jun 2026 04:00:28 +0000
Manifest next update: Fri 05 Jun 2026 04:00:28 +0000
Files and hashes: 1: mQL1nW7K7ybu0TZ9G8v3WzDDFmg.roa (hash: O084txLhwyZ8zQFJ9DRJsh8HYo5IGT97mu78wCO555Y=)
2: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: Dzsw2P11DKpqVfrBhTMtSvqWgQbdLsen8dSPkJ0ulHU=)
3: xkglo0MgpXeki5u8G7Zx40WueBw.roa (hash: P+lJK2YdwGnO2Q6H6+1l2oB4XSkWxXFQgilewZp5utI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:ca:2c:69:99:be:bd:8d:3d:e2:0d:17:b1:0e:46:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Jun 4 04:00:28 2026 GMT
Not After : Jun 5 04:00:28 2026 GMT
Subject: CN=872ca0161eb9b23d43e0baa7525a8146d316704f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:36:f5:ed:48:af:48:89:41:62:e4:52:23:
c7:ab:2b:a9:78:a3:06:ae:ea:36:96:7e:89:e1:73:
81:e7:77:2c:dd:74:14:cf:a0:1a:3a:27:d6:54:9e:
2f:76:90:21:bc:41:16:66:e8:ac:fb:19:a7:c4:ac:
8e:ef:c1:15:04:fb:32:b9:db:c5:3a:95:ce:57:70:
55:8f:93:79:aa:84:24:b6:9a:6d:62:f1:9d:ce:bc:
5c:3e:4f:ab:ac:65:e4:32:bf:22:7e:d8:12:9d:53:
16:66:49:17:af:34:fa:29:2b:7b:38:d8:09:3c:42:
54:7b:98:73:67:19:dd:e1:42:87:99:22:e6:d9:4b:
b2:dc:c3:67:7d:53:95:39:63:cc:e5:ce:b6:06:59:
9c:b9:ae:e6:05:05:5e:45:ad:b8:9f:0f:78:12:2a:
ed:5a:71:c1:f8:00:ab:01:64:29:45:a1:fa:91:d0:
39:e9:6b:68:97:e7:03:7f:3c:eb:f7:54:6f:91:b0:
d4:11:ee:94:e0:ff:23:33:5d:b2:50:3c:ef:ce:71:
64:67:19:12:45:7f:12:05:17:34:18:e8:2b:b4:a3:
04:cc:67:eb:f8:e7:74:eb:7d:52:67:93:36:da:3d:
08:78:d5:66:a1:af:33:38:e0:6d:42:6e:d7:64:92:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2C:A0:16:1E:B9:B2:3D:43:E0:BA:A7:52:5A:81:46:D3:16:70:4F
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:41:a5:75:34:da:c4:b9:0f:f9:2a:23:24:e1:f6:07:02:1b:
c2:e3:b9:9f:fb:f5:3a:a3:4b:56:44:4c:ef:d5:a7:db:6d:91:
02:16:a3:5a:fc:54:14:70:87:64:86:94:0d:d3:e1:63:c9:17:
ea:bc:33:eb:f7:6c:66:08:84:33:44:6d:d3:a6:21:34:6d:13:
87:54:5d:1c:6f:b7:89:72:e3:4f:c1:80:a6:e0:6e:95:ae:8f:
5b:7c:d4:46:f6:0e:7d:44:bb:14:7c:17:cc:b6:61:76:62:7a:
75:35:f0:34:78:e6:65:1f:ec:bb:e7:91:94:35:22:41:5c:85:
78:03:e8:ea:8d:d8:00:27:f5:1b:ca:e9:13:95:14:c1:d2:65:
b9:f2:13:36:0b:bb:65:0e:6d:08:9b:d3:38:a1:8d:80:fb:7d:
98:86:d3:f5:3e:ab:be:d2:7c:5d:71:0a:27:70:a2:c1:9e:af:
ce:58:f4:92:c8:6b:95:6e:9f:95:87:9d:14:46:36:28:8a:d2:
14:69:26:40:13:66:af:44:41:c3:ae:ad:0d:59:5f:ba:3b:ce:
a8:53:33:83:a6:ab:bc:22:04:88:63:c0:71:47:fc:33:84:1d:
13:35:7d:33:78:6d:cd:8d:12:24:bf:f5:f6:06:f3:2c:c7:93:
ee:bc:ab:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:13:58 2026 by rpki-client