Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: MAia049x8FveNsqwnlP63KOiPXfheYw5WwXIN58LrTQ=
Subject key identifier: 40:4D:9F:23:DA:80:13:FE:20:B6:5E:F6:62:61:E7:8F:0F:0A:00:ED
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 019D27A930C86B064341F0D57CBB1A29A7B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 01:01:32 +0000
Manifest this update: Thu 26 Mar 2026 01:01:32 +0000
Manifest next update: Fri 27 Mar 2026 01:01:32 +0000
Files and hashes: 1: mQL1nW7K7ybu0TZ9G8v3WzDDFmg.roa (hash: O084txLhwyZ8zQFJ9DRJsh8HYo5IGT97mu78wCO555Y=)
2: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: 89McDq4rXTBI2J87YKz+Q/gi7HMmJVNNzu6Dief44BU=)
3: xkglo0MgpXeki5u8G7Zx40WueBw.roa (hash: P+lJK2YdwGnO2Q6H6+1l2oB4XSkWxXFQgilewZp5utI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:30:c8:6b:06:43:41:f0:d5:7c:bb:1a:29:a7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Mar 26 01:01:32 2026 GMT
Not After : Mar 27 01:01:32 2026 GMT
Subject: CN=404d9f23da8013fe20b65ef66261e78f0f0a00ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:90:c3:6d:5b:3c:44:2b:8d:be:fa:9f:2b:
95:5b:59:ff:96:de:9b:07:1c:e3:5e:30:9a:e6:17:
66:d7:a5:11:03:3a:cd:37:a2:f3:76:f0:f0:69:a7:
46:df:24:71:40:4f:1d:c8:63:35:a8:d3:2b:0f:89:
57:d5:b5:f2:1c:d8:bd:fc:63:f0:8b:76:99:33:47:
db:6a:4a:56:c7:34:1f:db:b3:f6:5b:9a:70:66:9f:
67:f0:f9:48:c6:72:09:a5:04:a0:d4:12:93:5a:7a:
ea:e6:36:7f:ed:be:66:cf:de:27:ad:e3:8f:8b:f6:
ea:2e:0a:d4:1c:d3:1a:e0:1e:d4:22:8b:f6:72:4a:
23:c8:df:b4:1c:9b:bb:c0:c6:63:7b:5b:08:0c:02:
da:6a:87:62:a6:ba:e1:09:7f:59:fe:47:d2:e8:b2:
1b:bf:39:42:46:f5:01:94:8e:f2:54:91:58:e0:06:
72:5c:cc:cd:e7:0e:60:36:dc:73:7e:27:b6:a0:4c:
2c:fd:f9:98:c6:7e:a4:78:ed:e4:1a:a8:fb:5c:98:
3d:68:1e:e7:7e:ed:ee:a0:41:98:21:18:e9:0c:da:
9b:62:2c:70:37:d1:3c:a3:2e:f5:ff:27:78:8d:08:
20:e5:da:9e:22:15:83:15:34:8b:03:22:fb:ef:30:
4b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4D:9F:23:DA:80:13:FE:20:B6:5E:F6:62:61:E7:8F:0F:0A:00:ED
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0a:50:2c:b2:62:2f:b8:89:16:b4:7b:1c:98:80:75:0e:55:
6f:bc:dc:82:49:d2:dc:03:53:4f:ff:33:a9:83:40:f1:69:f9:
da:fd:93:96:1e:c2:ab:dc:30:ce:c1:28:35:ab:7f:20:af:7a:
36:b3:a5:3d:73:c0:c6:ee:e7:40:58:29:57:8c:94:3c:a4:26:
3d:6c:b1:81:9c:2f:50:ad:5c:28:d5:2c:18:f6:e7:cf:a7:60:
ac:3f:66:2a:7a:45:f2:c2:b4:43:9e:9a:28:59:26:e4:72:d2:
d2:96:75:a9:5a:00:2f:74:03:30:50:12:17:03:7a:f9:94:bc:
69:25:d0:a6:c6:fb:0d:07:a5:90:3c:d0:98:27:40:28:f3:53:
5d:fb:05:c5:aa:00:5c:8e:95:dc:46:6c:27:72:ce:7f:37:68:
31:ce:60:04:6a:66:7e:f6:e8:64:93:d8:e9:cc:fa:5a:64:1c:
16:6b:33:23:59:f3:66:35:ee:ff:03:34:fb:3b:1a:08:46:59:
7f:02:21:55:bf:d4:8b:fb:ee:29:e3:6e:52:d7:81:26:ee:06:
56:79:43:0c:7b:78:81:28:3d:94:60:43:2b:8d:55:3d:d0:0b:
93:ed:2f:27:1e:12:0c:37:6e:65:36:24:a7:2d:64:67:b1:60:
47:2c:f6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:55 2026 by rpki-client