Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
File: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft (raw, json)
Hash identifier: 51QPzZKxifNEA5B5YwtH7FGtbUbEWTfqM6GAXgEzds0=
Subject key identifier: 3E:CE:EB:7C:D2:EE:CF:23:94:C2:B4:0D:A9:DB:25:06:BB:F5:10:A7
Authority key identifier: 3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
Certificate issuer: /CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Certificate serial: 019F93C88B2D61B202F4C1CF1C5AFC38E818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 11:00:21 +0000
Manifest this update: Fri 24 Jul 2026 11:00:21 +0000
Manifest next update: Sat 25 Jul 2026 11:00:21 +0000
Files and hashes: 1: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl (hash: 0iXt/ByjXRynbFDQLbfbfBfPWWzU+zh7jIJHKQjgoq8=)
2: ZIfLwvSvOdji3MtHcGgMuSoqhAQ.roa (hash: JIFRgTtvZClZWs/BH3CyPh0KvLINAkB1ip40YGPLcQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:8b:2d:61:b2:02:f4:c1:cf:1c:5a:fc:38:e8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Validity
Not Before: Jul 24 11:00:21 2026 GMT
Not After : Jul 25 11:00:21 2026 GMT
Subject: CN=3eceeb7cd2eecf2394c2b40da9db2506bbf510a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:da:8f:95:e0:5b:d3:04:22:9c:69:ed:49:
24:fd:2e:2e:c9:db:b9:82:1d:e7:a7:f9:17:d2:16:
de:3f:8f:a8:81:fb:8b:15:92:2b:f4:d2:06:0c:82:
a8:14:c8:41:82:0f:7e:a5:43:55:8b:5a:76:5f:d8:
4c:2f:16:5f:bb:34:38:3d:55:30:84:d1:39:2e:4e:
da:f3:bc:63:dd:de:86:51:45:b4:9b:ca:36:c4:42:
8c:02:df:4e:0a:d7:57:98:a2:a3:f1:e0:50:28:cd:
80:41:da:74:ab:77:b3:05:3a:cb:80:7e:5b:b7:dd:
c2:c6:4c:24:58:cd:50:2a:75:e1:45:0d:14:85:d1:
6a:0c:23:37:e2:ef:ff:d9:b3:99:57:b5:ea:1e:55:
d5:e9:4b:85:86:a6:df:1b:b6:cd:83:73:7c:87:80:
cb:cf:cb:69:29:82:ff:72:0d:17:c2:96:9c:a3:fa:
7e:4c:59:58:17:3a:1e:9a:94:8d:73:7a:7d:e2:b9:
15:f3:44:7b:d6:27:ad:a4:c9:9a:3c:58:4d:74:a0:
fb:8f:04:36:26:56:12:f9:51:53:8c:6a:56:8c:95:
4a:fa:21:de:fe:80:7f:0f:1b:fa:2e:bc:db:a9:11:
25:11:db:e1:90:1d:e4:b2:fb:6c:bc:2a:2e:64:1d:
4c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CE:EB:7C:D2:EE:CF:23:94:C2:B4:0D:A9:DB:25:06:BB:F5:10:A7
X509v3 Authority Key Identifier:
keyid:3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2e:ef:1c:b1:95:b7:cc:92:86:d1:83:fc:b5:6b:44:da:79:
d8:65:f8:73:db:77:ef:33:15:94:09:45:74:1b:9f:9c:f7:7a:
a9:9f:99:a3:3e:ae:1c:ab:dc:b2:dd:c8:54:80:2f:87:d9:b3:
e2:ec:67:94:a6:72:11:98:16:e8:75:44:e8:e1:1a:77:38:44:
65:1b:e8:86:3d:92:1d:43:b1:e0:a5:32:d9:86:f8:93:0d:47:
01:31:10:79:96:41:b4:ab:b7:3c:8a:a6:7a:6e:24:11:af:13:
50:d0:c3:81:3a:0e:29:5e:79:f2:79:3d:9f:6c:40:90:b8:bb:
f5:79:e6:90:31:cb:4f:e1:1c:a1:b5:af:4a:7e:82:86:ed:7b:
9f:f5:28:96:57:41:c1:4a:03:e8:b6:ee:c3:1a:b0:34:42:bb:
af:f5:6c:81:23:9f:8d:39:ef:d8:77:db:00:39:e9:28:5c:5c:
08:6c:14:c0:d8:33:88:0e:93:16:80:13:50:ee:fb:63:c3:da:
a9:97:9d:ee:02:af:c1:9c:aa:a4:0a:7e:ac:55:f8:4f:56:ee:
5a:ff:6b:85:46:7f:4f:02:36:c0:02:62:2c:6c:ba:82:19:8a:
a9:c8:d2:96:b5:50:a6:30:c7:07:a3:5f:0b:0d:d3:e0:40:48:
23:ed:84:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyIstYbIC9MHPHFr8OOgYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTVhMWRkMGNlZTg3NGMwNmUxZWExZjcyODI3ZDk3Y2Jj
NjcxODcwHhcNMjYwNzI0MTEwMDIxWhcNMjYwNzI1MTEwMDIxWjAzMTEwLwYDVQQD
EygzZWNlZWI3Y2QyZWVjZjIzOTRjMmI0MGRhOWRiMjUwNmJiZjUxMGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosfaj5XgW9MEIpxp7Ukk/S4uydu5
gh3np/kX0hbeP4+ogfuLFZIr9NIGDIKoFMhBgg9+pUNVi1p2X9hMLxZfuzQ4PVUw
hNE5Lk7a87xj3d6GUUW0m8o2xEKMAt9OCtdXmKKj8eBQKM2AQdp0q3ezBTrLgH5b
t93CxkwkWM1QKnXhRQ0UhdFqDCM34u//2bOZV7XqHlXV6UuFhqbfG7bNg3N8h4DL
z8tpKYL/cg0Xwpaco/p+TFlYFzoempSNc3p94rkV80R71ietpMmaPFhNdKD7jwQ2
JlYS+VFTjGpWjJVK+iHe/oB/Dxv6LrzbqRElEdvhkB3ksvtsvCouZB1MDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7O63zS7s8jlMK0DanbJQa79RCnMB8GA1UdIwQY
MBaAFD7lod0M7odMBuHqH3KCfZfLxnGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHVXaDNRenVoMHdHNGVvZmNvSjlsOHZHY1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85NWZmZDktMTlkMy00NTE3LThjNDct
YzYxNjYxZDFiNzFiLzEvUHVXaDNRenVoMHdHNGVvZmNvSjlsOHZHY1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny85NWZmZDktMTlkMy00NTE3LThjNDctYzYxNjYxZDFiNzFi
LzEvUHVXaDNRenVoMHdHNGVvZmNvSjlsOHZHY1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoS7vHLGV
t8yShtGD/LVrRNp52GX4c9t37zMVlAlFdBufnPd6qZ+Zoz6uHKvcst3IVIAvh9mz
4uxnlKZyEZgW6HVE6OEadzhEZRvohj2SHUOx4KUy2Yb4kw1HATEQeZZBtKu3PIqm
em4kEa8TUNDDgToOKV558nk9n2xAkLi79XnmkDHLT+EcobWvSn6Chu17n/UolldB
wUoD6LbuwxqwNEK7r/VsgSOfjTnv2HfbADnpKFxcCGwUwNgziA6TFoATUO77Y8Pa
qZed7gKvwZyqpAp+rFX4T1buWv9rhUZ/TwI2wAJiLGy6ghmKqcjSlrVQpjDHB6Nf
Cw3T4EBII+2EIQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:39:52 2026 by rpki-client