Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
File: PUM0D60kZGXejmFNA5VjppllfY0.mft (raw, json)
Hash identifier: 3eZxQAj5/oCHD/lZGC8lHyEm9O+h2DZSPFp1oMIUOAg=
Subject key identifier: ED:7E:31:D0:DA:84:77:65:36:09:D9:DF:D6:81:1A:68:71:95:09:1B
Authority key identifier: 3D:43:34:0F:AD:24:64:65:DE:8E:61:4D:03:95:63:A6:99:65:7D:8D
Certificate issuer: /CN=3d43340fad246465de8e614d039563a699657d8d
Certificate serial: 019F92EDA6667210B341E85375295F48B4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUM0D60kZGXejmFNA5VjppllfY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
Manifest number: 0458
Signing time: Fri 24 Jul 2026 07:01:15 +0000
Manifest this update: Fri 24 Jul 2026 07:01:15 +0000
Manifest next update: Sat 25 Jul 2026 07:01:15 +0000
Files and hashes: 1: PUM0D60kZGXejmFNA5VjppllfY0.crl (hash: +GSFdHZRm4kPPvXGrPiuvHbMAe9pthCgDc17GV/joqc=)
2: tW6tlYVnkXnq9oP8owXcbYW47kU.roa (hash: g2+Pc2wN2E52WWpsZZidSy7PbjRy5/I1OGghh4rSkGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUM0D60kZGXejmFNA5VjppllfY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:a6:66:72:10:b3:41:e8:53:75:29:5f:48:b4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d43340fad246465de8e614d039563a699657d8d
Validity
Not Before: Jul 24 07:01:15 2026 GMT
Not After : Jul 25 07:01:15 2026 GMT
Subject: CN=ed7e31d0da8477653609d9dfd6811a687195091b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1e:02:90:86:be:af:61:9f:67:0b:76:58:9e:
96:87:55:17:02:e2:68:be:9d:ef:b2:42:be:8e:54:
88:ad:70:03:e4:c8:d8:14:ec:9a:f7:4c:d1:21:82:
85:35:3f:29:49:99:4e:b4:c7:af:4c:27:96:f5:e6:
b3:f1:29:f5:fc:a6:80:57:73:57:95:0f:09:ce:14:
45:4e:9d:2c:c3:f7:fe:4b:7f:22:fc:8b:06:41:6d:
68:b2:57:06:1f:a1:cd:05:b6:6e:35:5b:5d:a4:52:
29:b2:cc:f1:ff:3c:96:c9:f9:63:39:26:e7:11:a2:
6a:26:74:87:2f:33:dd:62:08:e6:28:ad:0e:20:ff:
d4:8e:4a:68:e2:37:46:19:5b:17:a1:df:33:9d:13:
6f:6a:24:ca:8c:1f:49:7e:29:35:04:35:e3:a8:6e:
b1:92:74:a4:1d:e2:16:ea:1b:32:42:88:e4:07:cc:
f4:2e:1e:a7:11:08:e5:a6:30:c3:5f:2a:4b:6a:08:
ab:72:b6:c2:ff:b1:06:6b:7d:cc:e6:b8:6a:b3:71:
cf:de:5d:5e:48:3d:7d:ce:b3:bb:4f:9f:55:c7:16:
cf:7b:51:e8:b2:83:47:b2:a8:a5:e8:b1:01:fe:e7:
7a:5b:fd:aa:28:5f:df:2a:75:90:e4:01:97:44:39:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7E:31:D0:DA:84:77:65:36:09:D9:DF:D6:81:1A:68:71:95:09:1B
X509v3 Authority Key Identifier:
keyid:3D:43:34:0F:AD:24:64:65:DE:8E:61:4D:03:95:63:A6:99:65:7D:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUM0D60kZGXejmFNA5VjppllfY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bc:8b:05:4c:7e:77:26:00:8f:89:a1:0c:de:c0:04:62:00:
37:f3:66:6b:fb:b0:7c:bb:1b:e7:c3:1c:f6:87:9e:3d:4d:58:
55:46:72:2f:90:9d:c8:b8:c2:46:07:bf:8d:e1:03:84:f0:11:
a6:df:71:b4:55:2e:15:78:4f:88:80:22:17:3f:d6:e9:9e:eb:
1c:65:a6:89:f0:e1:93:dd:52:f8:15:27:c3:ab:28:43:be:bc:
cc:b4:69:83:c4:ff:ac:cd:37:9c:ad:3c:4b:11:78:e8:88:be:
9f:70:1e:a5:d3:b2:d9:a0:e1:f6:ab:13:96:35:64:63:02:8c:
75:d5:8f:c7:44:db:98:ba:3e:2a:58:98:24:75:20:1b:c0:4c:
0a:31:34:6e:53:12:a0:4f:1e:65:0d:6b:93:05:14:ba:2b:dc:
04:53:97:f1:71:e5:b1:bc:a9:47:06:50:50:32:eb:4a:bb:28:
23:c1:7f:30:29:46:56:9b:8f:9d:98:3d:e9:27:1c:44:3e:f0:
69:f2:cd:22:a8:24:9d:e3:19:d4:8d:c9:54:83:b2:3b:38:fa:
4c:52:5d:2b:0b:ca:7f:65:19:df:fb:21:46:30:48:1e:5c:c6:
2b:e2:5b:96:ae:fe:43:98:77:ee:5c:70:16:a5:9d:49:b4:8a:
b7:d6:c0:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7aZmchCzQehTdSlfSLTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNDMzNDBmYWQyNDY0NjVkZThlNjE0ZDAzOTU2M2E2OTk2
NTdkOGQwHhcNMjYwNzI0MDcwMTE1WhcNMjYwNzI1MDcwMTE1WjAzMTEwLwYDVQQD
EyhlZDdlMzFkMGRhODQ3NzY1MzYwOWQ5ZGZkNjgxMWE2ODcxOTUwOTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB4CkIa+r2GfZwt2WJ6Wh1UXAuJo
vp3vskK+jlSIrXAD5MjYFOya90zRIYKFNT8pSZlOtMevTCeW9eaz8Sn1/KaAV3NX
lQ8JzhRFTp0sw/f+S38i/IsGQW1oslcGH6HNBbZuNVtdpFIpsszx/zyWyfljOSbn
EaJqJnSHLzPdYgjmKK0OIP/Ujkpo4jdGGVsXod8znRNvaiTKjB9Jfik1BDXjqG6x
knSkHeIW6hsyQojkB8z0Lh6nEQjlpjDDXypLagircrbC/7EGa33M5rhqs3HP3l1e
SD19zrO7T59VxxbPe1HosoNHsqil6LEB/ud6W/2qKF/fKnWQ5AGXRDlrQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1+MdDahHdlNgnZ39aBGmhxlQkbMB8GA1UdIwQY
MBaAFD1DNA+tJGRl3o5hTQOVY6aZZX2NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFVNMEQ2MGtaR1hlam1GTkE1VmpwcGxsZlkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82Y2U5MjItY2RjZS00YzdhLWIzNDYt
YTQzN2NlODkyODQxLzEvUFVNMEQ2MGtaR1hlam1GTkE1VmpwcGxsZlkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82Y2U5MjItY2RjZS00YzdhLWIzNDYtYTQzN2NlODkyODQx
LzEvUFVNMEQ2MGtaR1hlam1GTkE1VmpwcGxsZlkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMryLBUx+
dyYAj4mhDN7ABGIAN/Nma/uwfLsb58Mc9oeePU1YVUZyL5CdyLjCRge/jeEDhPAR
pt9xtFUuFXhPiIAiFz/W6Z7rHGWmifDhk91S+BUnw6soQ768zLRpg8T/rM03nK08
SxF46Ii+n3AepdOy2aDh9qsTljVkYwKMddWPx0TbmLo+KliYJHUgG8BMCjE0blMS
oE8eZQ1rkwUUuivcBFOX8XHlsbypRwZQUDLrSrsoI8F/MClGVpuPnZg96SccRD7w
afLNIqgkneMZ1I3JVIOyOzj6TFJdKwvKf2UZ3/shRjBIHlzGK+Jblq7+Q5h37lxw
FqWdSbSKt9bACQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:12 2026 by rpki-client