Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
File: Puk-t9S1uv9yBoVbFODuWGET0J8.mft (raw, json)
Hash identifier: pKMe+18Ht4PmP0O7/DZ2Cu1b3RIL2JpXhXnbTI32Mg4=
Subject key identifier: BA:A1:2B:B0:3D:68:48:D4:26:E9:80:53:99:10:CD:7B:43:9F:38:35
Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
Certificate issuer: /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Certificate serial: 019F9580181542D4165C410314B4A6F7302C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
Manifest number: 1789
Signing time: Fri 24 Jul 2026 19:00:27 +0000
Manifest this update: Fri 24 Jul 2026 19:00:27 +0000
Manifest next update: Sat 25 Jul 2026 19:00:27 +0000
Files and hashes: 1: Puk-t9S1uv9yBoVbFODuWGET0J8.crl (hash: kVy2a8KS9BPgq+WtA8knQw0dGji+4+DOMohWazcmR88=)
2: _82rn3kS0GA6FriFivBr31gF5UE.roa (hash: D5RBaDmHDEoPBeCWuS4WbmDK8YoC90IEPe3eHRU+tkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:18:15:42:d4:16:5c:41:03:14:b4:a6:f7:30:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Validity
Not Before: Jul 24 19:00:27 2026 GMT
Not After : Jul 25 19:00:27 2026 GMT
Subject: CN=baa12bb03d6848d426e980539910cd7b439f3835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:15:d1:00:bf:aa:69:24:93:db:21:72:c2:
30:7d:7a:ae:81:a5:ad:aa:df:46:22:2a:35:8b:db:
33:44:22:5f:16:f7:8a:f3:3f:97:89:fd:76:ec:6b:
4e:73:99:dd:1d:fa:fb:02:54:e5:d0:9d:e7:a3:20:
4d:7e:64:fb:16:2f:20:87:c0:08:46:10:db:67:85:
78:8e:93:10:62:f0:46:e0:f6:6b:a8:cb:bf:96:d8:
b9:5b:c7:bc:28:9b:66:e1:d3:06:ca:22:13:21:31:
a5:a9:8d:bf:76:3b:97:e5:19:cc:8e:5f:b6:68:c0:
f0:dc:71:f1:41:bb:77:2a:84:7b:a0:16:f4:3f:40:
72:1d:5f:66:c8:70:e7:73:a1:80:22:99:47:b9:67:
4e:e0:5b:36:4b:c2:4c:a7:bd:6c:1b:00:1e:9c:32:
19:be:94:2e:fc:22:35:9e:e2:b2:97:57:69:02:35:
e8:64:a9:05:a8:8f:02:36:53:fd:2d:d3:7b:2f:22:
e9:74:a9:32:9c:22:b7:90:52:60:53:83:5b:e8:e0:
df:22:ff:0e:ce:48:47:0d:43:cb:0b:b5:a9:96:8d:
bf:d0:b4:ce:9d:65:e1:9f:3d:d9:54:03:23:6f:57:
53:55:66:cb:52:91:fc:29:10:a4:94:aa:18:e3:53:
72:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A1:2B:B0:3D:68:48:D4:26:E9:80:53:99:10:CD:7B:43:9F:38:35
X509v3 Authority Key Identifier:
keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e1:cc:46:49:65:5e:9a:b9:2d:3b:b1:b4:71:36:c2:24:b1:
f0:b6:13:ef:74:4a:0c:76:07:e3:17:cf:1e:5f:e9:0e:3c:eb:
37:23:3d:32:11:6c:96:84:71:75:c1:c5:91:5a:9a:88:61:4a:
ee:2a:a0:36:e4:43:ef:9c:83:94:a1:e4:a4:4c:1d:3e:19:9c:
33:7b:dc:90:81:cd:4f:59:62:03:dc:6e:4f:c0:5a:ca:af:e2:
91:20:ca:c1:ae:c5:51:8e:48:b1:24:9e:c1:94:45:a3:84:0c:
bf:c9:32:0a:dd:48:df:ee:93:82:9e:f3:df:83:81:31:2c:2d:
52:e1:06:9b:66:4d:39:70:d7:ff:cf:f9:a0:5d:0a:d1:c2:05:
d6:87:d4:a3:a5:f6:9b:88:15:ef:31:a8:1f:6d:a1:ab:57:26:
e7:9d:89:e0:94:ee:89:31:6d:11:6d:9f:b6:79:b4:a3:eb:a8:
89:c5:53:15:4d:a1:ea:cf:f2:5a:2b:75:06:99:4f:ec:5c:f2:
19:6d:8a:69:63:b9:fe:d7:7f:bf:ef:18:0f:6a:f1:56:b9:1b:
52:cb:11:2c:a5:f7:4d:33:5c:45:89:f1:27:e4:7f:b8:56:23:
39:dc:ac:f4:3d:a1:9c:af:db:19:7f:43:8f:aa:3e:1a:42:ae:
68:0d:03:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VgBgVQtQWXEEDFLSm9zAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTkzZWI3ZDRiNWJhZmY3MjA2ODU1YjE0ZTBlZTU4NjEx
M2QwOWYwHhcNMjYwNzI0MTkwMDI3WhcNMjYwNzI1MTkwMDI3WjAzMTEwLwYDVQQD
EyhiYWExMmJiMDNkNjg0OGQ0MjZlOTgwNTM5OTEwY2Q3YjQzOWYzODM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEYV0QC/qmkkk9shcsIwfXqugaWt
qt9GIio1i9szRCJfFveK8z+Xif127GtOc5ndHfr7AlTl0J3noyBNfmT7Fi8gh8AI
RhDbZ4V4jpMQYvBG4PZrqMu/lti5W8e8KJtm4dMGyiITITGlqY2/djuX5RnMjl+2
aMDw3HHxQbt3KoR7oBb0P0ByHV9myHDnc6GAIplHuWdO4Fs2S8JMp71sGwAenDIZ
vpQu/CI1nuKyl1dpAjXoZKkFqI8CNlP9LdN7LyLpdKkynCK3kFJgU4Nb6ODfIv8O
zkhHDUPLC7Wplo2/0LTOnWXhnz3ZVAMjb1dTVWbLUpH8KRCklKoY41NyvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqhK7A9aEjUJumAU5kQzXtDnzg1MB8GA1UdIwQY
MBaAFD7pPrfUtbr/cgaFWxTg7lhhE9CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zYzVkZGQtZDYyMS00ZGQwLWFkNjct
OThkOTA0NjY5NGU3LzEvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zYzVkZGQtZDYyMS00ZGQwLWFkNjctOThkOTA0NjY5NGU3
LzEvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAseHMRkll
Xpq5LTuxtHE2wiSx8LYT73RKDHYH4xfPHl/pDjzrNyM9MhFsloRxdcHFkVqaiGFK
7iqgNuRD75yDlKHkpEwdPhmcM3vckIHNT1liA9xuT8Bayq/ikSDKwa7FUY5IsSSe
wZRFo4QMv8kyCt1I3+6Tgp7z34OBMSwtUuEGm2ZNOXDX/8/5oF0K0cIF1ofUo6X2
m4gV7zGoH22hq1cm552J4JTuiTFtEW2ftnm0o+uoicVTFU2h6s/yWit1BplP7Fzy
GW2KaWO5/td/v+8YD2rxVrkbUssRLKX3TTNcRYnxJ+R/uFYjOdys9D2hnK/bGX9D
j6o+GkKuaA0DPg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:53 2026 by rpki-client