Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
File: PUM0D60kZGXejmFNA5VjppllfY0.mft (raw, json)
Hash identifier: hyLRxXCfQFYL2CeTdS6zbWCB4ynATJxyia28CGoNgps=
Subject key identifier: 3C:DF:93:8B:F5:F8:42:5C:3D:2E:D9:75:55:B5:5F:88:46:47:B8:F2
Authority key identifier: 3D:43:34:0F:AD:24:64:65:DE:8E:61:4D:03:95:63:A6:99:65:7D:8D
Certificate issuer: /CN=3d43340fad246465de8e614d039563a699657d8d
Certificate serial: 01A0EAAE56B2F9CD276843A128CB7C734E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUM0D60kZGXejmFNA5VjppllfY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
Manifest number: 050A
Signing time: Tue 29 Sep 2026 01:01:29 +0000
Manifest this update: Tue 29 Sep 2026 01:01:29 +0000
Manifest next update: Wed 30 Sep 2026 01:01:29 +0000
Files and hashes: 1: PUM0D60kZGXejmFNA5VjppllfY0.crl (hash: K+uxMMovtjNY0xlZ1xFVvfDSUOd0qG4y6wV72/LWyao=)
2: tW6tlYVnkXnq9oP8owXcbYW47kU.roa (hash: g2+Pc2wN2E52WWpsZZidSy7PbjRy5/I1OGghh4rSkGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUM0D60kZGXejmFNA5VjppllfY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:56:b2:f9:cd:27:68:43:a1:28:cb:7c:73:4e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d43340fad246465de8e614d039563a699657d8d
Validity
Not Before: Sep 29 01:01:29 2026 GMT
Not After : Sep 30 01:01:29 2026 GMT
Subject: CN=3cdf938bf5f8425c3d2ed97555b55f884647b8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9f:8d:45:8d:ad:77:a9:d7:9a:b5:31:4a:21:
37:ff:26:cf:08:f9:d2:6b:78:76:a9:a9:47:f6:d9:
f6:87:2a:16:d4:da:c8:d3:f0:80:63:ec:14:9b:79:
05:56:ff:e3:0e:95:d1:a6:22:47:71:87:dd:eb:c2:
e0:2b:ba:0f:66:5b:5a:8c:60:b7:a3:de:50:31:8a:
43:fa:4f:01:a6:0f:f6:07:7f:36:de:31:df:e3:58:
6c:97:11:e8:7f:8d:2b:5d:45:b4:a9:2d:9a:8b:77:
7a:c1:13:5d:2f:fb:11:4e:9c:77:03:56:ed:7a:44:
a3:43:29:18:48:b9:0f:19:7e:c1:66:5b:c2:ac:5b:
71:26:6c:b8:44:ec:56:dc:27:0d:b2:3a:71:d1:f2:
2d:a8:ca:ee:04:e7:e0:8b:11:86:d1:22:5f:0e:37:
ce:3b:d3:a5:58:b3:0b:fc:11:e4:54:71:4c:da:67:
01:4e:9d:0b:7a:04:82:22:70:42:f1:ad:23:7d:26:
34:8c:98:cd:8d:b2:dd:11:56:1f:49:24:81:a4:0c:
2b:5f:35:b8:b1:fc:af:f4:82:87:99:68:a4:e6:ec:
39:f3:c4:98:88:e1:b6:61:3a:67:d7:96:4a:19:55:
1e:4c:8a:1c:dc:50:6c:37:b3:e7:32:d9:cb:37:e4:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DF:93:8B:F5:F8:42:5C:3D:2E:D9:75:55:B5:5F:88:46:47:B8:F2
X509v3 Authority Key Identifier:
keyid:3D:43:34:0F:AD:24:64:65:DE:8E:61:4D:03:95:63:A6:99:65:7D:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUM0D60kZGXejmFNA5VjppllfY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f1:c2:e5:63:40:fc:d5:91:95:3a:f8:b2:79:20:35:7c:d9:
46:78:a6:1a:13:85:ff:c2:da:cc:29:46:31:fd:f7:5e:93:16:
ec:45:9d:a3:44:a8:63:6f:77:0a:16:c2:b1:8c:80:d5:c4:ba:
3e:3e:94:11:5e:19:a9:e7:4c:6b:38:84:3f:54:a3:09:22:f8:
2f:29:59:a1:52:14:cf:3e:51:68:74:f9:14:58:da:d4:35:f5:
2c:9a:19:6f:9e:47:2b:57:89:e6:a8:06:b0:a2:d3:8b:9b:c9:
a3:2d:78:e7:d5:31:90:49:96:70:b1:8a:40:88:a9:c1:7e:8a:
e8:d4:5b:12:81:c3:79:7c:02:ee:f5:5a:1a:03:f6:9c:94:a7:
19:a3:2b:5c:47:3b:6b:31:d9:c7:6f:f1:6b:f3:26:67:32:64:
b2:d9:3e:84:62:bd:71:a4:8e:51:f8:73:7e:07:7d:4c:80:26:
0a:25:fa:1b:61:5d:8c:b2:42:cc:1b:7c:c7:02:2e:76:71:34:
8a:16:90:a5:a6:3c:fc:36:63:f0:0f:ea:71:1b:4d:b7:f1:6b:
be:5b:6c:43:1a:b9:d6:23:dd:59:d4:5b:02:e4:8c:d7:51:21:
9a:bc:3b:d9:34:a3:e2:20:08:2e:09:16:64:5a:aa:31:16:7e:
08:d7:9b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:50:39 2026 by rpki-client