Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
File: PUJ2NzsED6msd-VmxbbN81tTuTc.mft (raw, json)
Hash identifier: Q+BYfaGaaHq684VjvaZmx0A0rG8s60SiNs8/qu21xis=
Subject key identifier: 08:E8:E8:94:00:5C:24:9A:FC:98:03:BD:3E:C0:0D:A4:27:27:97:6F
Authority key identifier: 3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
Certificate issuer: /CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Certificate serial: 01A0D2A6296BBFA437519BEA962026A265D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
Manifest number: 094F
Signing time: Thu 24 Sep 2026 09:01:39 +0000
Manifest this update: Thu 24 Sep 2026 09:01:39 +0000
Manifest next update: Fri 25 Sep 2026 09:01:39 +0000
Files and hashes: 1: PUJ2NzsED6msd-VmxbbN81tTuTc.crl (hash: u3rOfuQCR4iHUr8bFtrp4znMo+DVZzPhxdK8QSf8fzo=)
2: ci6tN1QYoZrZv06rGimHLD0X5JE.roa (hash: WnzalM5cF/dIA1v+fSMQnZMN9WMkUhH0XGHms4w38Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:29:6b:bf:a4:37:51:9b:ea:96:20:26:a2:65:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Validity
Not Before: Sep 24 09:01:39 2026 GMT
Not After : Sep 25 09:01:39 2026 GMT
Subject: CN=08e8e894005c249afc9803bd3ec00da42727976f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:c4:79:4f:58:f5:3c:fc:12:e6:ac:91:60:
ae:e1:c9:0f:83:7b:b7:ff:30:62:bc:62:58:b5:99:
16:bc:07:0d:f2:42:eb:67:b2:58:d8:fd:df:71:e9:
e5:e2:b2:4c:3d:bb:3b:25:de:52:91:bf:d2:3f:53:
e3:6e:01:ad:09:35:17:9b:8a:50:3a:65:8d:b5:81:
0a:2d:f0:b1:f2:c3:d5:c7:6b:21:63:2d:61:d8:7e:
b3:0f:2c:3b:7d:df:24:28:a2:ed:6b:05:98:e4:44:
8c:db:0d:e0:ba:07:84:2c:53:67:26:9e:0e:74:09:
c1:f7:15:c6:90:04:5d:dc:04:52:bc:f0:0c:dd:70:
ad:41:90:6c:f4:f6:49:13:6c:ec:e6:4f:1c:db:9f:
57:b6:56:d2:c2:ab:ca:e9:55:f0:a6:69:c5:c0:29:
4b:8e:37:76:25:dd:df:db:3d:75:65:f8:f2:95:5c:
93:3f:30:1f:99:e5:bb:f8:3a:e8:ce:e1:bd:d6:5d:
64:c9:9b:53:82:98:30:86:44:44:fc:46:a6:58:87:
80:b0:28:c0:78:1f:fb:cf:14:5a:4a:6a:e4:0b:f0:
8e:a3:7e:7d:a2:4a:91:9b:6f:8d:be:5c:74:ca:83:
4d:a8:bd:2b:e3:b1:42:fe:6d:49:23:08:24:a7:c9:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E8:E8:94:00:5C:24:9A:FC:98:03:BD:3E:C0:0D:A4:27:27:97:6F
X509v3 Authority Key Identifier:
keyid:3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:27:91:d4:3f:42:bc:9e:01:53:fc:f1:e6:87:bd:80:c4:64:
d2:9b:08:d6:8e:53:33:f8:2a:e0:70:0b:c9:46:47:33:8f:36:
43:4a:1b:21:aa:10:51:b3:ab:45:5f:b7:a3:5b:72:00:f3:97:
57:99:29:ad:2a:3c:03:5e:7f:10:ea:12:36:d9:c3:7b:53:fd:
a7:07:4a:db:a8:0f:21:da:09:ed:ff:3d:8f:53:49:4e:9f:e9:
50:91:24:17:66:4a:06:2e:6a:b9:97:f9:e8:9b:ba:52:f9:48:
a1:c8:0f:a4:dc:c6:84:a5:5f:56:88:2a:26:83:97:a4:7c:87:
1e:f7:ab:85:9c:c8:62:ca:26:5b:6d:89:04:2e:2a:a0:f3:6e:
67:9f:78:b8:ea:86:ef:c1:3a:61:7d:8d:58:1d:96:5c:f2:dc:
59:09:2e:0a:c9:5d:e2:57:81:76:1b:ef:18:e8:45:06:20:b0:
48:7d:41:a0:5e:2e:98:ef:49:95:18:4c:4c:fb:ac:59:d8:5d:
73:c2:a0:04:c8:50:eb:7f:0b:f8:b7:56:20:da:95:36:0e:71:
f6:7e:42:81:27:4f:7b:65:da:fa:2b:3a:1a:76:dc:ed:ce:a0:
ed:73:d8:8b:90:3e:1d:89:5e:f3:2b:6d:44:3b:dd:0e:87:c5:
15:fc:e9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:59:02 2026 by rpki-client