Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
File: PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft (raw, json)
Hash identifier: gMpe0pA0or22wJ1OJcvbuk8KfzBX3+TEYFi2U69kg+w=
Subject key identifier: 13:B1:74:62:3B:4A:96:0A:91:DA:2A:26:22:EB:C4:CE:68:15:5E:51
Authority key identifier: 3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2
Certificate issuer: /CN=3d4c79394062376bca63a63a0bf973992a9f80a2
Certificate serial: 019D27E027A21FE035030FE31F716D5899D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
Manifest number: 1080
Signing time: Thu 26 Mar 2026 02:01:34 +0000
Manifest this update: Thu 26 Mar 2026 02:01:34 +0000
Manifest next update: Fri 27 Mar 2026 02:01:34 +0000
Files and hashes: 1: PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl (hash: l9nNX+0jdgND4CCvWzwjchEgh41BPVBg6hX+a2P6z9A=)
2: eaUkDUyviPefCc67-kFDMHq_RqQ.roa (hash: rInk7xSgUrA48qjh6/0iysB5Dr8JGb1TaNsKIV4JtXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:27:a2:1f:e0:35:03:0f:e3:1f:71:6d:58:99:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4c79394062376bca63a63a0bf973992a9f80a2
Validity
Not Before: Mar 26 02:01:34 2026 GMT
Not After : Mar 27 02:01:34 2026 GMT
Subject: CN=13b174623b4a960a91da2a2622ebc4ce68155e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:db:a3:4b:d1:fb:d6:57:12:9c:94:db:62:5d:
31:af:b7:65:79:e7:e8:90:15:d7:84:e8:26:07:cf:
89:8f:52:42:c6:7d:00:51:7a:ab:ed:56:6e:44:8e:
3e:97:f7:01:a4:b0:dd:41:d9:7e:4e:07:d2:47:6d:
1c:c8:1e:46:21:71:8c:05:0b:30:19:4b:f9:b7:ca:
49:87:18:1e:9c:9f:79:5c:93:a9:45:63:de:f4:a7:
21:f6:1b:fb:f6:10:1b:39:19:38:ff:bf:c0:e3:93:
2b:2c:de:c5:e1:42:51:cf:36:87:b1:76:d6:39:17:
8c:1f:5b:e0:cc:01:62:93:a9:ce:eb:0b:10:9f:b0:
fc:a2:2c:d2:4d:a7:78:fc:05:56:3e:74:f3:46:b1:
f9:bf:94:ab:98:7d:ee:75:dd:1f:d3:d9:98:53:de:
05:31:0f:3f:eb:97:36:f3:3e:64:3b:c2:00:13:ca:
fb:32:6c:e9:14:20:63:a9:bf:93:8b:86:9c:8f:ea:
bd:90:ec:90:bf:ec:6f:22:36:27:b3:89:bf:6f:f8:
dd:2b:f5:47:b5:ad:dd:cf:69:fe:62:a5:4f:cf:6a:
a5:53:9c:7e:96:9d:83:3a:f0:2c:77:36:5c:2b:3e:
f8:84:68:c8:54:a0:9d:f7:76:15:10:7b:fc:62:bf:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B1:74:62:3B:4A:96:0A:91:DA:2A:26:22:EB:C4:CE:68:15:5E:51
X509v3 Authority Key Identifier:
keyid:3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:97:5a:e3:e2:da:ed:16:c6:55:54:5e:6e:de:41:98:7a:3a:
8f:f0:1d:f9:37:3c:f6:64:d0:03:87:c5:6f:4b:7e:57:e1:1b:
50:d5:38:0d:79:bc:79:36:0a:bf:71:8e:3f:a5:dd:ed:56:dd:
2a:f9:4b:76:2b:41:b6:b1:50:f0:f2:11:98:4a:1d:a7:b2:1a:
8c:49:cd:8b:a5:6f:e6:ce:40:59:d1:62:3d:6e:40:1b:7c:8a:
91:06:57:92:52:7a:e7:11:52:c2:cb:48:36:6e:5d:4d:0f:24:
2e:62:b3:91:65:e0:02:8c:66:d1:93:f6:f6:7a:26:57:e8:9a:
93:63:f7:92:84:66:22:94:46:72:3c:82:b1:ca:81:19:d4:48:
03:ce:73:ab:e3:93:c7:35:19:c0:30:67:94:9b:ed:24:1f:53:
fe:44:9d:bc:96:2e:16:44:16:56:c1:49:0f:92:cb:2c:c2:9b:
ad:9e:24:c8:af:ff:16:a0:61:11:21:7b:99:a1:e6:65:f8:1d:
12:03:ae:42:0a:92:a9:01:8c:03:60:43:88:8c:19:56:db:ed:
51:44:73:99:c5:63:d3:18:59:2a:53:aa:8c:c1:7a:7c:11:33:
a0:f8:de:0d:cb:4d:b5:82:7e:28:84:7b:ae:43:03:55:d1:77:
97:4e:2b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:26 2026 by rpki-client