Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
File: pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft (raw, json)
Hash identifier: 44ENk9n9rcCSm++GYAsQrMeal39gx0dVLqMiceAJTkY=
Subject key identifier: 9C:25:D8:74:25:CC:8C:07:79:E7:A7:AF:B0:28:58:26:6A:B0:7C:A4
Authority key identifier: A6:EF:D4:E6:EF:19:DC:5B:09:4F:7D:A1:89:02:AC:35:F3:FE:2C:19
Certificate issuer: /CN=a6efd4e6ef19dc5b094f7da18902ac35f3fe2c19
Certificate serial: 01A0DF188A9138A1E4BFA4351D75740C696A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
Manifest number: 015E
Signing time: Sat 26 Sep 2026 19:02:02 +0000
Manifest this update: Sat 26 Sep 2026 19:02:02 +0000
Manifest next update: Sun 27 Sep 2026 19:02:02 +0000
Files and hashes: 1: kHouM2VLdzKRZTCra3l9Z36Mmyk.asa (hash: sV07n58Gs6Mq12Maj9pNWDdpH7lTopJq8te/ptrRpDw=)
2: pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl (hash: ca+A9ZUNvJ7Y8x+On5QnztyIDPRr1zZeneZuG3hWsmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:18:8a:91:38:a1:e4:bf:a4:35:1d:75:74:0c:69:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6efd4e6ef19dc5b094f7da18902ac35f3fe2c19
Validity
Not Before: Sep 26 19:02:02 2026 GMT
Not After : Sep 27 19:02:02 2026 GMT
Subject: CN=9c25d87425cc8c0779e7a7afb02858266ab07ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:3f:f0:59:dc:16:30:a7:26:db:79:42:d3:
f5:47:2f:26:0d:8f:e5:19:08:df:a6:60:fb:83:e3:
16:34:57:1c:f7:ed:71:29:a3:44:df:28:b3:ab:98:
95:a3:b7:8f:1f:62:77:76:1c:7c:06:38:cd:27:27:
2d:fe:47:b5:90:da:6d:0a:60:55:19:41:fb:65:21:
ca:40:1e:31:ea:d4:45:cd:46:66:42:a6:52:e0:e8:
3e:0c:c9:75:dc:09:48:89:8d:7a:28:e9:69:e6:3a:
df:b0:a0:39:6b:41:c6:2b:16:95:7b:8b:83:38:7f:
27:0b:e2:94:63:e0:ab:b0:be:86:7b:b0:75:c3:8d:
de:c0:3c:33:f1:6e:ac:39:7e:50:a1:49:19:20:84:
e9:5d:aa:8b:d9:86:ab:be:b3:06:4c:ae:59:a5:9a:
d9:40:4b:3d:2e:72:10:69:d6:ea:4e:7b:d9:0d:0b:
18:82:7e:d3:53:86:82:a1:85:9b:12:1d:22:a0:87:
b5:aa:6d:3a:55:db:1d:3e:0a:be:c7:65:04:6c:c5:
79:a0:fc:e6:80:7b:dd:02:a9:57:1f:b4:5d:51:e0:
ac:d1:c3:e7:92:98:2f:6f:4a:a6:3e:a6:61:d8:2f:
89:ca:89:81:6b:13:9f:61:e1:a6:8e:d4:f5:87:64:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:25:D8:74:25:CC:8C:07:79:E7:A7:AF:B0:28:58:26:6A:B0:7C:A4
X509v3 Authority Key Identifier:
keyid:A6:EF:D4:E6:EF:19:DC:5B:09:4F:7D:A1:89:02:AC:35:F3:FE:2C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8b:b1:1e:87:4f:f8:d9:d9:75:90:49:29:1f:0f:ac:db:77:
10:60:43:d7:14:21:76:5a:22:ff:ce:17:21:f8:af:84:27:45:
81:cd:ca:8f:2a:a4:8d:56:c9:8f:b0:5e:85:d3:63:3a:9f:e8:
03:02:72:dc:c2:d2:d7:5c:be:d2:03:cb:e5:01:c5:33:86:0c:
48:7d:44:0e:f4:07:cc:78:5b:fc:bf:62:8c:3d:b3:8a:a9:db:
db:84:65:f7:29:00:87:7a:be:cf:10:10:91:43:5d:c6:76:61:
2c:1d:12:1f:3f:5b:5d:b0:eb:6a:ee:be:0b:11:3f:58:4e:c1:
20:bd:9a:fb:7c:f9:1c:43:d0:6a:c1:e7:27:61:7b:8f:ad:3f:
ed:94:91:37:b2:51:54:3d:fb:71:b9:95:ed:b0:30:7e:77:9b:
81:d8:e0:56:34:c1:29:21:27:35:71:3a:06:b2:d9:fc:c9:97:
e3:86:11:c7:2c:a4:2d:bb:f1:2b:70:fe:11:51:2f:d0:11:7e:
49:91:32:89:f3:ce:3a:0d:9b:d2:a0:de:2c:92:ba:6f:67:5f:
1e:75:7d:d1:f3:a6:2c:79:e0:6b:5f:1a:67:62:a0:9e:40:d4:
07:64:99:25:9d:24:12:74:a1:2c:8a:17:1a:84:32:3b:fe:8b:
db:35:40:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfGIqROKHkv6Q1HXV0DGlqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ZWZkNGU2ZWYxOWRjNWIwOTRmN2RhMTg5MDJhYzM1ZjNm
ZTJjMTkwHhcNMjYwOTI2MTkwMjAyWhcNMjYwOTI3MTkwMjAyWjAzMTEwLwYDVQQD
Eyg5YzI1ZDg3NDI1Y2M4YzA3NzllN2E3YWZiMDI4NTgyNjZhYjA3Y2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4A/8FncFjCnJtt5QtP1Ry8mDY/l
GQjfpmD7g+MWNFcc9+1xKaNE3yizq5iVo7ePH2J3dhx8BjjNJyct/ke1kNptCmBV
GUH7ZSHKQB4x6tRFzUZmQqZS4Og+DMl13AlIiY16KOlp5jrfsKA5a0HGKxaVe4uD
OH8nC+KUY+CrsL6Ge7B1w43ewDwz8W6sOX5QoUkZIITpXaqL2YarvrMGTK5ZpZrZ
QEs9LnIQadbqTnvZDQsYgn7TU4aCoYWbEh0ioIe1qm06VdsdPgq+x2UEbMV5oPzm
gHvdAqlXH7RdUeCs0cPnkpgvb0qmPqZh2C+JyomBaxOfYeGmjtT1h2QIXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwl2HQlzIwHeeenr7AoWCZqsHykMB8GA1UdIwQY
MBaAFKbv1ObvGdxbCU99oYkCrDXz/iwZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHVfVTV1OFozRnNKVDMyaGlRS3NOZlAtTEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8xMzczN2UtYTFkNi00NWQxLWI5OTgt
MjQ3NzU4M2IyODMzLzEvcHVfVTV1OFozRnNKVDMyaGlRS3NOZlAtTEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8xMzczN2UtYTFkNi00NWQxLWI5OTgtMjQ3NzU4M2IyODMz
LzEvcHVfVTV1OFozRnNKVDMyaGlRS3NOZlAtTEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4uxHodP
+NnZdZBJKR8PrNt3EGBD1xQhdloi/84XIfivhCdFgc3KjyqkjVbJj7BehdNjOp/o
AwJy3MLS11y+0gPL5QHFM4YMSH1EDvQHzHhb/L9ijD2ziqnb24Rl9ykAh3q+zxAQ
kUNdxnZhLB0SHz9bXbDrau6+CxE/WE7BIL2a+3z5HEPQasHnJ2F7j60/7ZSRN7JR
VD37cbmV7bAwfnebgdjgVjTBKSEnNXE6BrLZ/MmX44YRxyykLbvxK3D+EVEv0BF+
SZEyifPOOg2b0qDeLJK6b2dfHnV90fOmLHnga18aZ2KgnkDUB2SZJZ0kEnShLIoX
GoQyO/6L2zVAKA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:17:57 2026 by rpki-client