Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
File: PUJ2NzsED6msd-VmxbbN81tTuTc.mft (raw, json)
Hash identifier: MCisxxd0XHmxdSq3WNVan4OdyWwbNDmPfa7tbSSkcM8=
Subject key identifier: A8:77:E2:F8:58:0A:D4:6E:E0:5F:CA:17:B8:AF:6B:2C:65:AB:5F:AF
Authority key identifier: 3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
Certificate issuer: /CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Certificate serial: 019F916D86C9FC186B8C77299BA7CDB2F1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
Manifest number: 08A8
Signing time: Fri 24 Jul 2026 00:01:41 +0000
Manifest this update: Fri 24 Jul 2026 00:01:41 +0000
Manifest next update: Sat 25 Jul 2026 00:01:41 +0000
Files and hashes: 1: 7bvtPGLStjnkciwxFvPTYgFWfQk.roa (hash: vjeKrroXH7m1N2sP7ErrsCURI+wiwxbcMJEOYB8cjgg=)
2: PUJ2NzsED6msd-VmxbbN81tTuTc.crl (hash: YveG6BSezY4Qsv0JRXG9hwXS940N/JHjjWlruHL3KsM=)
3: ci6tN1QYoZrZv06rGimHLD0X5JE.roa (hash: WnzalM5cF/dIA1v+fSMQnZMN9WMkUhH0XGHms4w38Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:86:c9:fc:18:6b:8c:77:29:9b:a7:cd:b2:f1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Validity
Not Before: Jul 24 00:01:41 2026 GMT
Not After : Jul 25 00:01:41 2026 GMT
Subject: CN=a877e2f8580ad46ee05fca17b8af6b2c65ab5faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:0d:6b:3a:1d:c6:bf:b6:41:b6:de:d0:95:
ad:c4:0e:75:5b:5f:20:b7:fa:c5:0c:49:64:73:47:
a4:67:0d:cb:80:c4:67:08:6b:76:d4:e7:74:42:ea:
8b:7c:33:73:7b:74:f1:49:21:21:22:1d:6b:bb:d1:
a4:9a:ba:48:ac:f9:5b:2b:02:08:18:ec:5d:fb:52:
6e:1d:a8:5b:e1:e5:e8:4d:cf:24:39:89:83:cb:ac:
a7:98:d5:79:26:15:08:68:d0:33:ce:ff:75:fa:df:
5d:b5:07:c2:cd:bb:7d:a8:00:f2:27:1c:3c:01:ef:
88:70:08:23:ef:ee:d5:21:21:d4:c5:73:63:04:9d:
d2:6c:a1:e1:3b:cb:a4:10:f7:06:b6:87:f0:25:c4:
af:a9:26:2b:be:56:36:06:13:55:c8:3c:6c:14:46:
04:b1:e7:b6:a6:46:a1:3d:c5:49:80:e5:c3:e3:22:
b3:70:07:26:f5:71:c7:78:75:d2:f2:a5:f1:7c:3c:
bb:ea:e3:e9:67:13:fa:d8:1e:66:86:36:ee:b3:2b:
fc:3b:dd:1f:46:cb:56:5c:be:5a:07:a6:ce:62:e8:
22:9d:5e:10:d5:0b:94:53:30:19:ea:16:1a:ff:43:
1e:29:2a:96:73:9e:61:e7:34:fa:a7:24:6e:ad:59:
92:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:77:E2:F8:58:0A:D4:6E:E0:5F:CA:17:B8:AF:6B:2C:65:AB:5F:AF
X509v3 Authority Key Identifier:
keyid:3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ae:95:b8:a9:ed:fa:54:86:2e:6d:b2:37:47:a2:7b:46:06:
fb:14:19:05:b0:dd:87:7b:30:ff:77:50:93:ea:f0:82:1e:c6:
7f:38:a3:ba:e9:db:8c:06:95:6c:0f:7d:70:1a:94:15:77:31:
fc:b1:61:e6:8e:a1:05:86:42:a8:c2:a7:eb:98:6c:3e:3f:5f:
04:29:8d:4c:13:f8:f2:70:c5:03:ec:5d:7c:5d:36:20:42:61:
e6:33:7f:30:56:12:97:ae:64:46:ba:0d:71:bf:9d:df:31:0c:
e9:ea:46:3b:20:06:43:f0:e1:ad:e2:89:35:f3:56:bf:e2:38:
12:41:c8:61:3b:16:2d:89:28:c9:d7:1e:66:d8:c7:d6:e7:78:
cf:c4:66:c4:53:4b:5f:aa:09:8b:fd:56:dd:ec:75:7a:05:86:
e0:46:92:25:fa:5d:81:93:0b:3c:e1:68:9c:6c:7c:e1:50:0a:
00:2c:b1:0f:ae:cb:21:1a:73:1a:11:79:cd:f8:fd:d1:5f:33:
e5:47:53:3f:71:13:10:02:1c:de:16:07:ec:08:4d:72:51:b4:
3c:25:b3:a4:4b:5b:ed:8c:9a:33:c1:0b:ee:0d:40:27:3b:91:
eb:06:38:06:47:a2:98:27:49:8e:a8:53:9d:23:f6:4a:4e:fb:
4b:4f:c8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:24:10 2026 by rpki-client