Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
File: Puk-t9S1uv9yBoVbFODuWGET0J8.mft (raw, json)
Hash identifier: RyYEIpbWTZ5TKtW//8p66p0KpBgY+BxeWoduZ04jB8A=
Subject key identifier: 40:93:2F:48:30:AA:09:7F:69:A7:1A:5A:9E:18:A7:DA:5F:1B:86:2C
Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
Certificate issuer: /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Certificate serial: 019E1EA2CFF40838019CA16EB7BA46A3EB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
Manifest number: 16C6
Signing time: Wed 13 May 2026 00:00:46 +0000
Manifest this update: Wed 13 May 2026 00:00:46 +0000
Manifest next update: Thu 14 May 2026 00:00:46 +0000
Files and hashes: 1: Puk-t9S1uv9yBoVbFODuWGET0J8.crl (hash: fFof00onIwZ5rRc7TikhoFeg8BiHLQmDms0B8LNSn3E=)
2: miIF7cKPQgBw0FAQgFgTnKxWG70.roa (hash: RlEN9ZFVRfvKtRA7xfX2xwkOVgWXXIc6PBrgfB1+iXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:cf:f4:08:38:01:9c:a1:6e:b7:ba:46:a3:eb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Validity
Not Before: May 13 00:00:46 2026 GMT
Not After : May 14 00:00:46 2026 GMT
Subject: CN=40932f4830aa097f69a71a5a9e18a7da5f1b862c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:58:a5:b0:5b:fd:99:f5:d8:25:0c:e8:82:
e3:39:64:6a:95:ef:a8:6c:fd:c0:cd:2e:34:07:20:
d7:8b:95:0a:74:65:16:1e:7d:e1:5c:a4:86:2e:43:
dc:fa:7d:c3:9a:7f:da:2e:5f:1a:9d:91:02:02:23:
39:9d:89:be:94:9f:e8:83:81:19:9f:30:e0:f6:15:
52:80:ab:ed:43:2e:c4:10:fa:74:f9:d7:33:cd:7d:
93:0e:74:ff:0e:8f:97:61:f9:5d:1c:cd:96:7d:fd:
71:86:81:8c:54:18:6e:98:8c:8c:e1:da:74:88:09:
56:46:d3:57:c2:86:5a:e0:14:ee:0f:b0:b3:62:e0:
35:05:fa:1d:ac:29:c2:3a:b9:14:2a:7b:5c:2e:ed:
84:b0:6b:b7:0b:2a:0a:11:09:b5:07:fa:b1:25:76:
6d:eb:11:29:ff:b9:b7:ab:87:c6:25:9b:01:1f:b4:
41:a7:59:9d:ee:f9:b7:39:a7:32:31:2e:f2:4c:9c:
d2:52:52:e2:0a:85:f3:3b:76:f1:83:5c:31:7a:27:
68:a0:02:fa:fc:4a:fd:08:43:f6:97:0a:09:05:c2:
20:43:a4:1a:19:5e:63:86:11:6f:2c:e7:09:c9:39:
a1:75:9e:d0:9c:94:ee:b1:f6:e6:a8:ed:c3:18:87:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:93:2F:48:30:AA:09:7F:69:A7:1A:5A:9E:18:A7:DA:5F:1B:86:2C
X509v3 Authority Key Identifier:
keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:07:62:a5:1d:a6:b2:01:68:d9:e9:b8:7c:8b:2f:ee:50:62:
d5:30:0f:04:aa:47:86:1a:36:0f:95:67:26:e9:0c:c1:39:9c:
eb:83:96:e5:78:12:22:ef:23:03:0d:b6:fa:9d:0e:74:89:d0:
ef:f0:a2:60:1a:3b:4d:2a:97:dc:0b:db:91:37:93:02:0a:73:
44:bd:90:ae:82:0f:32:dc:b3:9e:f1:bf:b5:55:a3:74:8a:b3:
01:eb:83:dd:8d:0f:7a:1e:93:d8:48:5a:7a:40:16:8d:9f:08:
01:89:59:f5:07:86:04:8a:bc:bd:6e:cb:d9:7f:06:1c:be:55:
d6:f8:50:84:ea:4b:aa:c3:9d:d9:38:c9:25:d9:ce:18:a6:fb:
6a:48:2a:a7:93:dd:c6:fb:01:bd:61:70:d3:6a:5c:27:51:6b:
33:f2:8d:61:fd:f6:3b:82:b1:5c:93:8b:bd:db:c7:e4:53:c0:
83:13:fb:95:8c:47:8b:de:a4:a1:20:15:d1:9b:38:87:50:ea:
c4:50:ba:ac:f1:f4:94:0a:dd:09:5b:91:5e:1a:3f:f8:36:8e:
b8:67:d5:06:d4:7c:2a:8c:47:5e:cd:97:ad:e1:dd:43:54:94:
03:30:44:a0:8f:7a:c5:93:6e:2a:29:a8:65:fe:8c:76:29:47:
92:a6:18:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:05 2026 by rpki-client