Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.mft
File: PUzic0DX-A7zynKKy_oqO7CrjV4.mft (raw, json)
Hash identifier: FAO/3EtThUE+Jzy4qsX1PfzbdwOriLZY495V9gu66K8=
Subject key identifier: AD:61:3F:6C:22:C0:43:A9:E2:68:18:FB:58:63:12:1F:2C:C8:70:C9
Authority key identifier: 3D:4C:E2:73:40:D7:F8:0E:F3:CA:72:8A:CB:FA:2A:3B:B0:AB:8D:5E
Certificate issuer: /CN=3d4ce27340d7f80ef3ca728acbfa2a3bb0ab8d5e
Certificate serial: 019EFC16154E025C7AB86C81F5991D8EE4FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUzic0DX-A7zynKKy_oqO7CrjV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.mft
Manifest number: 52
Signing time: Thu 25 Jun 2026 00:02:46 +0000
Manifest this update: Thu 25 Jun 2026 00:02:46 +0000
Manifest next update: Fri 26 Jun 2026 00:02:46 +0000
Files and hashes: 1: 4tc9b1J3g8HKGW78h2gsUdsi-So.roa (hash: N3RkDkRR8pXlGO0DiXAf3GkUlZHp63KpZjhj0rT9HOU=)
2: PUzic0DX-A7zynKKy_oqO7CrjV4.crl (hash: 53k6YJyqjrMbxX82Wih5UR58GP1ZazDzCDVxXxCWRfg=)
3: ZZ7D7ygHIGH4aGXCmcYzhDarmXM.asa (hash: nOY/COT+cSwrFiUqzjbJas1fTKduZg1xMeptISqPNwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUzic0DX-A7zynKKy_oqO7CrjV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:16:15:4e:02:5c:7a:b8:6c:81:f5:99:1d:8e:e4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4ce27340d7f80ef3ca728acbfa2a3bb0ab8d5e
Validity
Not Before: Jun 25 00:02:46 2026 GMT
Not After : Jun 26 00:02:46 2026 GMT
Subject: CN=ad613f6c22c043a9e26818fb5863121f2cc870c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b5:59:0c:6a:b9:3c:1b:74:8d:f0:b8:07:86:
30:1c:bc:88:c5:bc:94:c6:5d:29:ce:e4:54:dc:79:
f5:88:b3:8f:2b:07:35:78:79:38:45:56:e7:b1:4d:
44:a7:19:51:c5:96:88:ce:f7:71:75:e6:54:e3:35:
02:67:74:aa:20:fa:0c:c9:aa:8e:37:73:65:a8:02:
bb:bf:b7:26:63:9c:f7:fa:dd:d3:97:89:54:b9:4d:
96:f4:bb:c5:42:84:1e:1c:c3:5a:e7:81:77:11:49:
e2:d3:68:cf:c4:56:d4:bb:c1:65:52:63:7f:fa:0e:
43:fa:58:76:7a:1b:24:87:8c:6a:5a:82:0d:6a:a0:
0c:bb:6e:1b:64:df:ff:ca:7c:e7:fd:9b:ce:c4:38:
a7:dd:08:f0:06:18:5c:45:73:57:c1:a3:44:98:3f:
e6:54:1f:e7:9e:ec:ec:ac:09:c6:89:32:20:19:9d:
85:ed:a3:99:57:c7:a8:7d:c3:de:1d:4e:30:6e:b9:
27:a1:92:94:48:2e:df:49:80:0c:8f:85:e8:ec:2d:
b6:fd:fe:a2:d0:b2:06:35:1a:88:b6:5c:25:87:76:
55:30:76:51:19:29:90:ba:70:a8:ea:38:d7:c3:74:
a8:c3:55:29:f2:fc:da:3b:36:11:df:50:51:25:ee:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:61:3F:6C:22:C0:43:A9:E2:68:18:FB:58:63:12:1F:2C:C8:70:C9
X509v3 Authority Key Identifier:
keyid:3D:4C:E2:73:40:D7:F8:0E:F3:CA:72:8A:CB:FA:2A:3B:B0:AB:8D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUzic0DX-A7zynKKy_oqO7CrjV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2d:30:12:b0:35:f6:ae:e3:83:01:c5:dd:73:70:aa:e0:f4:
45:5b:79:3e:ba:51:74:0f:a6:fc:55:3a:64:03:74:11:ea:45:
39:c9:ab:3c:fe:ac:34:a8:5c:d7:33:0e:ed:e1:cd:be:aa:19:
ad:2d:36:1f:ec:3e:83:71:13:46:39:67:46:82:7e:39:f8:f5:
81:7e:84:a2:0f:76:f1:c4:72:f8:6d:9e:75:e4:e9:17:3c:13:
d8:a1:11:94:a5:64:bf:51:f9:cf:6a:7c:fb:81:24:af:e1:fe:
f8:10:5d:c2:b9:39:01:da:31:d9:fa:bc:a9:c9:ce:de:6f:d7:
06:d5:5e:05:50:15:f4:ba:8f:d1:b3:88:01:de:1d:9e:f8:44:
31:b6:40:64:1d:42:85:2b:68:82:39:1c:dd:99:bd:d0:2a:9c:
d7:df:f0:9b:e5:39:8f:48:b2:30:d7:a2:b1:31:07:f9:be:99:
29:00:93:ad:73:3d:37:ce:46:ae:85:b5:93:29:96:33:01:4c:
27:86:08:fe:89:15:aa:11:12:06:78:19:d3:1d:48:1d:b1:10:
38:a9:6d:9b:24:d7:df:3c:26:ee:05:0e:aa:0b:22:d1:1d:de:
30:1f:59:d8:dd:f3:33:ab:bd:56:52:b1:3f:41:ff:61:33:30:
c4:ef:bc:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ78FhVOAlx6uGyB9ZkdjuT7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNGNlMjczNDBkN2Y4MGVmM2NhNzI4YWNiZmEyYTNiYjBh
YjhkNWUwHhcNMjYwNjI1MDAwMjQ2WhcNMjYwNjI2MDAwMjQ2WjAzMTEwLwYDVQQD
EyhhZDYxM2Y2YzIyYzA0M2E5ZTI2ODE4ZmI1ODYzMTIxZjJjYzg3MGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7VZDGq5PBt0jfC4B4YwHLyIxbyU
xl0pzuRU3Hn1iLOPKwc1eHk4RVbnsU1EpxlRxZaIzvdxdeZU4zUCZ3SqIPoMyaqO
N3NlqAK7v7cmY5z3+t3Tl4lUuU2W9LvFQoQeHMNa54F3EUni02jPxFbUu8FlUmN/
+g5D+lh2ehskh4xqWoINaqAMu24bZN//ynzn/ZvOxDin3QjwBhhcRXNXwaNEmD/m
VB/nnuzsrAnGiTIgGZ2F7aOZV8eofcPeHU4wbrknoZKUSC7fSYAMj4Xo7C22/f6i
0LIGNRqItlwlh3ZVMHZRGSmQunCo6jjXw3Sow1Up8vzaOzYR31BRJe6FlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1hP2wiwEOp4mgY+1hjEh8syHDJMB8GA1UdIwQY
MBaAFD1M4nNA1/gO88pyisv6Kjuwq41eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFV6aWMwRFgtQTd6eW5LS3lfb3FPN0NyalY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83NmI1NWItNzYzNi00NGFhLTgxMDQt
ODUyNDg3OGNhMzA3LzEvUFV6aWMwRFgtQTd6eW5LS3lfb3FPN0NyalY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83NmI1NWItNzYzNi00NGFhLTgxMDQtODUyNDg3OGNhMzA3
LzEvUFV6aWMwRFgtQTd6eW5LS3lfb3FPN0NyalY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMi0wErA1
9q7jgwHF3XNwquD0RVt5PrpRdA+m/FU6ZAN0EepFOcmrPP6sNKhc1zMO7eHNvqoZ
rS02H+w+g3ETRjlnRoJ+Ofj1gX6Eog928cRy+G2edeTpFzwT2KERlKVkv1H5z2p8
+4Ekr+H++BBdwrk5Adox2fq8qcnO3m/XBtVeBVAV9LqP0bOIAd4dnvhEMbZAZB1C
hStogjkc3Zm90Cqc19/wm+U5j0iyMNeisTEH+b6ZKQCTrXM9N85GroW1kymWMwFM
J4YI/okVqhESBngZ0x1IHbEQOKltmyTX3zwm7gUOqgsi0R3eMB9Z2N3zM6u9VlKx
P0H/YTMwxO+8uw==
-----END CERTIFICATE-----
Generated at Thu Jun 25 08:26:09 2026 by rpki-client