Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.mft
File: PUzic0DX-A7zynKKy_oqO7CrjV4.mft (raw, json)
Hash identifier: YqZWGg2vRRcYPpYqSvkJsQhOr5ZIluxgNRIIP94KggM=
Subject key identifier: E5:44:FC:1F:8C:3E:2A:30:CA:6D:D8:80:7A:3F:3C:8F:B4:52:FC:1A
Authority key identifier: 3D:4C:E2:73:40:D7:F8:0E:F3:CA:72:8A:CB:FA:2A:3B:B0:AB:8D:5E
Certificate issuer: /CN=3d4ce27340d7f80ef3ca728acbfa2a3bb0ab8d5e
Certificate serial: 019FF8DA63BA39340F682A0112A80719902E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUzic0DX-A7zynKKy_oqO7CrjV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.mft
Manifest number: D5
Signing time: Thu 13 Aug 2026 02:01:29 +0000
Manifest this update: Thu 13 Aug 2026 02:01:29 +0000
Manifest next update: Fri 14 Aug 2026 02:01:29 +0000
Files and hashes: 1: 4tc9b1J3g8HKGW78h2gsUdsi-So.roa (hash: N3RkDkRR8pXlGO0DiXAf3GkUlZHp63KpZjhj0rT9HOU=)
2: PUzic0DX-A7zynKKy_oqO7CrjV4.crl (hash: 92tzar052joZUot7ocMa/9Oi7604T636+S8Z8blGpo4=)
3: ZZ7D7ygHIGH4aGXCmcYzhDarmXM.asa (hash: nOY/COT+cSwrFiUqzjbJas1fTKduZg1xMeptISqPNwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUzic0DX-A7zynKKy_oqO7CrjV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:da:63:ba:39:34:0f:68:2a:01:12:a8:07:19:90:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4ce27340d7f80ef3ca728acbfa2a3bb0ab8d5e
Validity
Not Before: Aug 13 02:01:29 2026 GMT
Not After : Aug 14 02:01:29 2026 GMT
Subject: CN=e544fc1f8c3e2a30ca6dd8807a3f3c8fb452fc1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:87:c2:a1:78:a9:6f:c3:26:b9:09:16:4b:
a9:ae:85:b1:30:d8:52:b4:12:16:4a:64:fb:23:5f:
4e:9a:6b:80:1e:78:55:9e:a8:67:f1:7c:5b:41:64:
fb:e5:c8:28:d7:c2:1d:95:3f:29:ea:49:0d:ce:9a:
c7:cf:e2:53:e1:f3:ac:bc:66:ab:9d:c9:93:3f:f4:
a0:54:4c:7d:f8:50:fa:80:43:5a:03:56:69:86:3c:
c0:d2:93:42:c8:c8:bd:52:49:8a:c3:4a:d5:8d:5f:
e6:d5:bb:3c:a9:cb:6d:13:00:47:f5:f2:49:47:11:
d2:95:1c:2c:c2:03:f1:c0:bd:f0:1f:e9:34:ea:d7:
99:2d:4c:b0:ce:81:0e:78:03:a4:3e:60:25:ba:1c:
51:c5:4c:9e:55:10:c3:40:39:7e:46:c7:00:05:49:
3d:6c:82:97:3d:69:af:c5:29:69:d8:02:5b:01:8b:
91:ee:fb:ab:77:25:34:aa:ef:0f:0f:81:a0:4c:a1:
6a:c2:42:a9:71:33:a6:b7:a6:15:59:7d:06:c9:5e:
55:82:76:c3:09:b3:41:4f:96:bc:49:f1:29:9e:e6:
4b:7c:ce:36:ae:fd:b8:ff:e7:e7:55:db:47:8d:44:
fd:74:b6:58:3e:12:0c:43:ef:a7:79:82:6e:95:e3:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:44:FC:1F:8C:3E:2A:30:CA:6D:D8:80:7A:3F:3C:8F:B4:52:FC:1A
X509v3 Authority Key Identifier:
keyid:3D:4C:E2:73:40:D7:F8:0E:F3:CA:72:8A:CB:FA:2A:3B:B0:AB:8D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUzic0DX-A7zynKKy_oqO7CrjV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/76b55b-7636-44aa-8104-8524878ca307/1/PUzic0DX-A7zynKKy_oqO7CrjV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4c:e9:fd:4e:35:cd:fa:55:69:a7:f0:3b:32:bf:23:52:a7:
b2:d5:f1:3b:9f:0d:a8:cb:21:5e:b6:14:19:cd:7c:85:d6:a8:
df:8c:8c:e1:a6:05:ba:d9:f9:58:c0:b0:e8:22:5f:cd:e9:1c:
0c:a4:91:62:ba:c5:6b:f2:8b:90:d6:f7:45:a4:b4:3c:05:87:
5a:6f:0f:06:c1:07:05:e2:c9:da:8e:f8:40:71:fe:a5:e9:90:
92:2b:3b:6c:c9:53:9f:c1:f0:8f:24:6f:97:e3:18:f7:79:d2:
8c:e4:71:a6:68:1a:c9:3a:7d:0f:85:ea:b4:0b:00:6a:b8:32:
f1:c6:07:77:8a:47:63:f6:d5:c6:aa:fa:5f:75:c5:5c:37:07:
84:6d:5b:2a:97:46:d4:81:95:ff:93:73:50:0b:39:ef:8e:b6:
1b:75:25:32:bf:30:2c:f7:19:42:bc:70:2e:96:3f:9d:84:bb:
4a:29:27:1d:ef:ea:41:6a:6a:53:56:ed:6a:a2:37:16:a1:43:
0a:e7:3b:ef:2a:fd:39:69:f9:b1:4d:b3:20:e6:31:12:48:72:
40:db:40:92:00:a3:6b:6a:e9:5d:1e:2b:31:81:32:18:ad:ca:
39:cb:dc:09:df:36:33:50:10:c1:35:16:6c:50:73:4d:9a:28:
f6:f2:05:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:05:37 2026 by rpki-client