Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
File: Puk-t9S1uv9yBoVbFODuWGET0J8.mft (raw, json)
Hash identifier: E4SBBmMfMUUCbjr7JbR16RDSf+Rz1kwqY2vP/7ArksM=
Subject key identifier: 77:FB:2A:FD:95:24:C0:9F:15:1D:43:B0:F6:DD:4E:3D:98:FE:53:58
Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
Certificate issuer: /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Certificate serial: 019D2B4F12335492C3B7F4591F476573EABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
Manifest number: 1648
Signing time: Thu 26 Mar 2026 18:01:35 +0000
Manifest this update: Thu 26 Mar 2026 18:01:35 +0000
Manifest next update: Fri 27 Mar 2026 18:01:35 +0000
Files and hashes: 1: Puk-t9S1uv9yBoVbFODuWGET0J8.crl (hash: ZPmaZxaGvnwvzk85dBrfQrVsoYV9NUTMByn02pLvons=)
2: miIF7cKPQgBw0FAQgFgTnKxWG70.roa (hash: RlEN9ZFVRfvKtRA7xfX2xwkOVgWXXIc6PBrgfB1+iXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 18:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4f:12:33:54:92:c3:b7:f4:59:1f:47:65:73:ea:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Validity
Not Before: Mar 26 18:01:35 2026 GMT
Not After : Mar 27 18:01:35 2026 GMT
Subject: CN=77fb2afd9524c09f151d43b0f6dd4e3d98fe5358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:c3:fd:87:fb:60:35:4d:26:59:03:01:9e:
9b:b3:36:d0:c4:c5:30:59:dc:69:9a:2d:4b:41:5a:
5a:29:a2:2c:5f:5e:c7:b9:0f:33:5c:7b:b6:75:f2:
4b:b7:a9:d3:d5:54:9c:db:d8:0a:e6:64:59:10:28:
d5:b9:90:de:d8:86:2e:bd:3c:44:e4:3c:4d:58:f6:
3d:06:d9:b4:ff:f2:6a:79:c8:43:66:c2:b5:b1:2c:
ed:2c:0e:64:e9:3f:17:d3:7a:d9:4c:5b:cc:88:a7:
12:26:e8:03:91:36:0b:3c:b7:d4:f0:52:00:e2:81:
ee:83:08:30:82:c0:bb:5e:45:34:4f:ee:f0:8c:8e:
0e:e6:d7:3d:f9:5a:2b:80:6c:e4:08:2c:b6:f1:0c:
61:2b:d0:4b:aa:00:85:ec:3a:b0:db:da:12:02:92:
17:b1:b5:cc:bc:a5:57:1b:99:3b:a2:29:35:01:e2:
cd:47:99:80:e2:b8:71:58:58:3d:d2:b6:2b:45:b6:
6d:e5:ab:99:a4:be:a7:49:6d:fc:e1:d2:70:6c:c6:
01:6d:58:0d:45:48:74:f7:5f:60:0c:52:36:a0:e5:
78:c8:35:f1:3e:2a:c7:29:ba:5a:a1:fb:6e:79:a1:
13:ac:80:38:f3:dc:43:99:73:6d:db:99:04:91:52:
d5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FB:2A:FD:95:24:C0:9F:15:1D:43:B0:F6:DD:4E:3D:98:FE:53:58
X509v3 Authority Key Identifier:
keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:df:6d:2e:4b:83:63:fc:60:8e:48:96:4c:cb:63:3d:06:7a:
9b:da:10:a8:26:d7:f1:74:d2:d3:74:98:01:04:79:86:af:57:
af:85:6f:12:88:90:5d:89:da:15:61:48:90:e2:13:9b:02:dc:
38:b7:c6:5a:56:cd:83:af:f3:e4:43:83:48:00:f2:bc:5e:32:
16:3c:5f:d6:c8:d8:7e:a6:32:f2:1a:1a:89:1d:40:a3:58:56:
fd:da:4e:db:51:b0:4d:82:cf:1c:de:da:a8:99:50:df:f9:91:
9c:47:9b:14:68:fb:f7:92:4c:cd:a8:f4:93:58:29:a8:9b:d2:
cc:77:db:cc:92:01:5d:ef:21:8a:44:47:31:4a:03:3b:69:0b:
40:48:07:3b:35:f6:4b:bd:83:e9:f5:f3:f0:ed:ad:6e:8a:b6:
21:ca:1f:bd:67:29:e6:8c:da:5f:d8:35:1f:f6:13:4e:e0:6c:
f4:89:ad:25:95:d7:6c:e7:ce:c9:f4:31:2b:9e:4f:c3:5f:2a:
d2:2c:b0:a3:b3:2d:ed:c7:0f:19:a4:46:18:2e:b2:63:9d:d7:
00:4e:eb:89:ac:b3:87:39:fd:83:fa:56:e9:30:72:e3:9a:06:
d3:8e:0c:cd:9d:2b:75:03:33:fd:f5:5b:32:0c:ca:e7:e0:21:
50:b2:8a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:36:54 2026 by rpki-client