Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
File: Puk-t9S1uv9yBoVbFODuWGET0J8.mft (raw, json)
Hash identifier: 2T1EfGNPpRcqc9VAeyGWzlYqRgG+YE9eC/fR0M50+vk=
Subject key identifier: 1C:6D:B6:6A:64:A1:7D:D7:C4:47:56:DE:A8:29:5C:58:AB:C0:C8:A0
Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
Certificate issuer: /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Certificate serial: 01A0DDCEA1C25CEE1B9E38BF54F7DB61545D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
Manifest number: 1833
Signing time: Sat 26 Sep 2026 13:01:41 +0000
Manifest this update: Sat 26 Sep 2026 13:01:41 +0000
Manifest next update: Sun 27 Sep 2026 13:01:41 +0000
Files and hashes: 1: Puk-t9S1uv9yBoVbFODuWGET0J8.crl (hash: rLfV9fHdmF8L9QUN7blOVH5pU+zdqf+e/n03HQJNfeU=)
2: _82rn3kS0GA6FriFivBr31gF5UE.roa (hash: D5RBaDmHDEoPBeCWuS4WbmDK8YoC90IEPe3eHRU+tkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:a1:c2:5c:ee:1b:9e:38:bf:54:f7:db:61:54:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Validity
Not Before: Sep 26 13:01:41 2026 GMT
Not After : Sep 27 13:01:41 2026 GMT
Subject: CN=1c6db66a64a17dd7c44756dea8295c58abc0c8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:82:82:f4:4e:cd:bd:91:ef:77:74:b3:db:
b7:75:17:f3:ea:31:02:f2:b2:b9:80:3f:4e:b2:c3:
1d:6e:59:e8:f4:35:3f:a1:ed:43:3e:d9:bd:7c:13:
6d:e1:ca:e7:2c:09:8a:19:67:87:2f:eb:d3:36:62:
c4:5f:0b:9a:0f:d5:5d:99:ab:53:e5:36:36:0b:3d:
a1:b1:4a:8c:5a:30:82:a7:63:61:57:57:6b:ff:6a:
bb:98:82:d7:73:89:2f:9e:e0:2c:97:a7:51:c1:29:
a3:7e:47:9f:3e:46:82:9b:22:da:48:e5:28:09:3d:
ad:6b:11:df:f2:a8:b6:d8:c8:4b:13:63:b2:ca:d8:
82:e2:48:c7:f1:ac:20:d8:e2:05:0e:7a:a0:d7:5f:
e0:cb:2f:32:fa:95:54:24:ed:40:c5:a3:76:41:7b:
dd:18:d5:74:9a:b8:bd:e8:00:8b:f3:38:6d:b0:db:
50:5f:c0:66:7b:f1:e4:6c:66:93:98:3f:be:89:9f:
d9:26:41:e0:c2:23:0e:71:b0:0e:cd:e6:6a:8d:3e:
0b:45:4f:23:8d:55:a8:5e:b0:44:1d:bd:59:a2:87:
12:43:6b:f2:1d:60:9c:c3:d8:45:d1:bb:b7:c9:36:
a2:f4:e9:82:5f:49:f9:d3:cb:78:60:30:ea:b3:54:
d9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6D:B6:6A:64:A1:7D:D7:C4:47:56:DE:A8:29:5C:58:AB:C0:C8:A0
X509v3 Authority Key Identifier:
keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b6:27:ab:0c:32:44:42:d3:e7:95:78:78:11:04:ff:0d:7e:
c9:2a:4e:0e:5a:71:6b:93:98:8b:f7:d3:dc:f2:6e:c9:53:a6:
93:a4:a0:5b:1b:bd:00:8f:1a:96:2e:ce:e7:aa:a5:88:3b:ad:
94:f2:d1:11:70:79:6e:a0:98:04:f4:f7:2c:e9:b3:5f:95:18:
89:ce:56:4f:7e:a8:af:13:a9:df:a0:14:4d:bf:f5:38:85:df:
cd:cd:74:61:d9:68:7b:aa:41:73:6d:50:02:4a:e4:35:e7:a5:
79:b7:c5:c5:1d:1e:47:39:bf:2c:ce:68:de:c0:7f:16:96:0c:
eb:62:ab:18:27:52:82:12:fd:f7:43:14:9b:fb:2c:a8:04:39:
8f:ef:c2:80:6c:c7:b9:c4:e1:d3:23:f3:63:f9:6b:76:97:da:
f3:a4:e5:28:8f:b3:f3:b8:b0:3c:6c:b5:78:51:dc:68:43:81:
24:fe:ef:dc:6d:34:e0:49:78:60:7b:72:73:b8:a6:79:c5:4c:
59:5b:85:7d:45:52:29:2b:79:06:9c:d7:c4:76:35:f9:8a:bc:
7d:08:ab:1b:1d:14:c4:c3:92:d0:c7:f4:69:85:ab:4c:c6:c8:
c8:32:82:27:7d:24:08:cc:56:db:38:79:e0:7d:ff:f3:df:c0:
89:44:f2:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdzqHCXO4bnji/VPfbYVRdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTkzZWI3ZDRiNWJhZmY3MjA2ODU1YjE0ZTBlZTU4NjEx
M2QwOWYwHhcNMjYwOTI2MTMwMTQxWhcNMjYwOTI3MTMwMTQxWjAzMTEwLwYDVQQD
EygxYzZkYjY2YTY0YTE3ZGQ3YzQ0NzU2ZGVhODI5NWM1OGFiYzBjOGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoomCgvROzb2R73d0s9u3dRfz6jEC
8rK5gD9OssMdblno9DU/oe1DPtm9fBNt4crnLAmKGWeHL+vTNmLEXwuaD9VdmatT
5TY2Cz2hsUqMWjCCp2NhV1dr/2q7mILXc4kvnuAsl6dRwSmjfkefPkaCmyLaSOUo
CT2taxHf8qi22MhLE2OyytiC4kjH8awg2OIFDnqg11/gyy8y+pVUJO1AxaN2QXvd
GNV0mri96ACL8zhtsNtQX8Bme/HkbGaTmD++iZ/ZJkHgwiMOcbAOzeZqjT4LRU8j
jVWoXrBEHb1ZoocSQ2vyHWCcw9hF0bu3yTai9OmCX0n508t4YDDqs1TZswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxttmpkoX3XxEdW3qgpXFirwMigMB8GA1UdIwQY
MBaAFD7pPrfUtbr/cgaFWxTg7lhhE9CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zYzVkZGQtZDYyMS00ZGQwLWFkNjct
OThkOTA0NjY5NGU3LzEvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zYzVkZGQtZDYyMS00ZGQwLWFkNjctOThkOTA0NjY5NGU3
LzEvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLYnqwwy
RELT55V4eBEE/w1+ySpODlpxa5OYi/fT3PJuyVOmk6SgWxu9AI8ali7O56qliDut
lPLREXB5bqCYBPT3LOmzX5UYic5WT36orxOp36AUTb/1OIXfzc10Ydloe6pBc21Q
AkrkNeelebfFxR0eRzm/LM5o3sB/FpYM62KrGCdSghL990MUm/ssqAQ5j+/CgGzH
ucTh0yPzY/lrdpfa86TlKI+z87iwPGy1eFHcaEOBJP7v3G004El4YHtyc7imecVM
WVuFfUVSKSt5BpzXxHY1+Yq8fQirGx0UxMOS0Mf0aYWrTMbIyDKCJ30kCMxW2zh5
4H3/89/AiUTyVg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:12:53 2026 by rpki-client