Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: DcB2qnNBpuzm7lWq/utf6NUhJ+O6mOYwXzGsXA4QXOg=
Subject key identifier: 53:3D:2D:20:17:04:8B:CC:1D:6A:F7:C5:FA:42:BA:55:57:0E:7D:CB
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 01A0D5A71BFDC8686898ADEB3A7E7E52D358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 1A7D
Signing time: Thu 24 Sep 2026 23:01:33 +0000
Manifest this update: Thu 24 Sep 2026 23:01:33 +0000
Manifest next update: Fri 25 Sep 2026 23:01:33 +0000
Files and hashes: 1: Sd9Inu8fRPZCviAypagCQcKKkmw.roa (hash: 0ZUMOh3JNBttpQEEjg9e7KJhBDQfVabAIV5ANe3h4Ng=)
2: UlsUu7gepOaa3SQKJJkuwOw5-Ow.roa (hash: hU1g21d4Xv9edIn/CDl1qXeVfqS91ol/VVK46174T28=)
3: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: CznwbA9If6iJdzM2j7ybMZCrOVCskIxQUoj65ilv8Hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:1b:fd:c8:68:68:98:ad:eb:3a:7e:7e:52:d3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Sep 24 23:01:33 2026 GMT
Not After : Sep 25 23:01:33 2026 GMT
Subject: CN=533d2d2017048bcc1d6af7c5fa42ba55570e7dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:04:15:69:99:eb:3a:2f:c7:e4:7b:93:16:
5a:c8:f3:fe:c2:d3:59:6c:d3:00:a0:0d:9d:18:00:
dd:31:9e:48:82:ed:df:25:99:71:d5:ad:fd:10:b7:
e4:a5:d7:67:20:b6:8c:f1:02:47:21:7f:8c:56:84:
94:7f:90:29:e0:e7:d2:ac:d8:40:dd:13:11:80:bc:
8f:d0:1c:a4:dd:c4:f8:4c:30:67:c6:d7:8e:0a:80:
2d:6a:6f:50:c8:a7:c9:8e:ee:70:ab:4a:c0:14:a8:
b9:dd:74:f8:8a:36:2e:3f:46:07:96:61:c8:a6:dd:
35:43:d6:1a:8e:71:9e:e1:2b:d9:04:4b:7e:d9:0b:
f8:3d:61:2c:87:0b:d5:79:c1:7a:ad:0f:f9:94:df:
a6:ce:b6:4c:9a:24:a9:a9:f1:1e:c8:25:e8:4f:42:
2f:39:02:c1:3d:82:ee:d8:e5:de:b7:58:60:f3:c7:
8c:3c:3f:f2:72:86:fa:e9:0b:a5:43:d9:49:14:08:
58:1d:5d:0d:cd:7e:1c:2d:67:44:ee:55:79:e1:2e:
ac:d8:e0:17:f9:e4:3d:8b:30:d9:82:b2:3e:83:5e:
58:bf:1a:44:6f:6f:8a:3b:72:1c:76:da:33:8c:3c:
5b:49:e2:6f:5d:9e:21:e7:f7:d8:71:2e:3b:2a:9a:
c0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3D:2D:20:17:04:8B:CC:1D:6A:F7:C5:FA:42:BA:55:57:0E:7D:CB
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:48:d6:38:87:40:da:47:e4:0e:d6:55:91:45:62:e8:ea:c5:
59:0c:74:01:08:d8:c2:b1:74:b0:1f:ee:83:94:db:f8:a2:4f:
88:67:e9:40:46:3f:86:25:74:36:8b:b1:eb:24:37:98:1c:87:
15:11:e5:32:e2:b3:a0:dd:e1:d5:27:44:66:14:fc:83:ca:45:
43:7b:0b:97:f8:ca:98:32:02:81:5a:5f:37:12:31:bc:e6:80:
16:01:80:49:55:53:3b:1a:d0:c6:89:5d:d7:e9:95:4b:04:53:
b8:db:7e:a5:84:9f:1a:e9:60:3c:3e:a8:0e:21:16:97:5e:0d:
85:9a:fc:cb:87:49:5c:cd:b1:3e:8e:b0:b6:76:91:0e:0c:4f:
e9:00:68:a1:8d:45:c7:ff:bd:69:8e:6f:d9:e0:5f:ee:9c:0d:
a7:2c:b8:d0:f2:b7:2c:99:82:de:a3:22:ab:73:8e:bc:50:4c:
ad:45:60:03:da:57:6a:d2:dc:58:b0:30:81:d1:45:b8:fe:86:
ae:f1:3d:a8:12:eb:ae:48:3f:dd:87:02:78:8b:d5:eb:47:db:
8f:9f:d5:d5:4d:cc:94:7b:5e:70:47:19:69:2c:40:2e:44:9e:
d4:b4:de:dd:a8:61:1b:81:b0:29:10:34:c5:90:65:e5:66:8b:
0c:e4:0c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:50:03 2026 by rpki-client