Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
File: PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json)
Hash identifier: zQX9KFhTuXDWGTtmmB9hMwlVgEXEvCKji47q9v7QftE=
Subject key identifier: 7B:8A:89:71:F1:6D:B7:2F:49:64:13:88:FD:F4:60:82:63:E6:37:33
Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Certificate issuer: /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Certificate serial: 019D28843ECFCFEE4CC0981CE09CA6DAF37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
Manifest number: 0300
Signing time: Thu 26 Mar 2026 05:00:48 +0000
Manifest this update: Thu 26 Mar 2026 05:00:48 +0000
Manifest next update: Fri 27 Mar 2026 05:00:48 +0000
Files and hashes: 1: 2P0Kjjt5-7UDTZhBwA-FFuDiDYM.roa (hash: e8dlsMoEY5OAzunOS6SXf0tgQsD9v9aE1pqpQ/DOvsk=)
2: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: Q4KKEvpIpE8FCNfzLq5cEAKRwmJdVBU7eZlK70vOo8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:3e:cf:cf:ee:4c:c0:98:1c:e0:9c:a6:da:f3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Validity
Not Before: Mar 26 05:00:48 2026 GMT
Not After : Mar 27 05:00:48 2026 GMT
Subject: CN=7b8a8971f16db72f49641388fdf4608263e63733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:5a:68:5d:d1:82:42:65:94:7c:1d:6e:6f:
2e:bc:80:8a:8a:44:b4:43:f7:de:01:d2:1f:9f:99:
5e:22:0c:2f:b2:e6:ba:4f:46:cb:fc:53:1b:f6:b0:
c4:19:7a:5c:16:9e:3c:e2:d9:b8:a1:1a:f7:5b:2e:
44:5b:36:ce:a9:33:d4:fd:2e:b0:65:3c:43:c4:96:
fc:d9:54:f4:ba:98:81:e0:c5:ce:20:0d:59:02:7a:
fa:85:29:51:99:e3:8d:a3:b8:fe:bc:bd:ed:dd:35:
d8:7c:a2:af:f5:63:77:d4:fe:eb:65:94:6b:e9:bf:
6c:95:11:6c:9e:32:02:90:6d:a8:7b:01:33:74:f9:
c9:b3:76:2a:39:6a:a1:ed:2b:00:e8:b3:94:8d:82:
e3:1d:52:c0:94:68:3c:9b:ce:51:c8:2f:62:87:fc:
56:d1:cc:db:e3:37:2f:0c:84:19:a0:d4:a7:39:07:
83:ba:fe:84:ac:98:08:c7:0f:1f:d7:ce:5b:1a:88:
7e:b8:f7:01:ba:87:a9:93:20:cb:b7:87:92:39:2d:
47:08:f8:fd:e1:13:27:eb:2e:68:63:a0:78:85:b6:
e4:f5:99:c4:98:63:16:0b:85:9c:cd:8a:86:ba:41:
96:ad:d7:6d:35:1f:ee:2c:15:3f:67:15:08:d4:cd:
54:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8A:89:71:F1:6D:B7:2F:49:64:13:88:FD:F4:60:82:63:E6:37:33
X509v3 Authority Key Identifier:
keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c3:6c:ed:59:2a:9c:76:57:cd:2a:7b:85:14:36:99:41:6f:
27:57:f3:2c:7b:16:a9:2e:d1:71:60:03:b0:08:f3:c6:44:f4:
fb:b2:8c:d0:b0:63:59:76:05:34:f2:3f:47:b3:96:5a:0c:e2:
74:74:e8:b8:91:26:16:dd:89:bb:70:d6:f2:3b:d1:4b:f8:14:
d9:49:3c:18:6a:21:4c:54:66:2f:e0:9b:a5:0f:e6:4b:d6:94:
f7:a7:49:fb:d1:ff:b7:76:db:2c:77:84:76:59:66:eb:49:3f:
1b:95:f8:2f:3d:12:0b:7d:5e:c6:0a:a3:e8:6c:29:c1:0e:3a:
60:1e:fa:82:40:20:0e:59:98:31:0d:fa:1a:ca:1c:8c:f4:2e:
2e:83:a2:d5:77:83:b3:76:57:59:a2:03:b1:39:24:38:91:94:
d7:a6:43:3c:28:b9:1b:7e:c5:42:78:f4:69:44:c4:b1:da:14:
b0:10:18:08:1f:b4:dd:af:2d:20:58:26:57:35:42:a9:c0:bf:
d4:ad:5c:9b:96:d5:9c:2e:69:fb:10:da:44:e1:a8:9e:e4:6e:
ca:3a:12:66:fa:fb:ee:5b:86:fc:46:d1:f2:e3:3b:fb:3a:70:
b2:25:20:64:d5:3b:2b:4f:bd:6a:b4:51:a6:60:86:32:63:06:
70:a7:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:40 2026 by rpki-client