Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: AgXhqmm7H2zmbaJg0az6PdK9WvCB++HveWqDb0LNLSA=
Subject key identifier: D6:45:23:36:FB:C4:E9:CD:AF:C4:27:42:7B:79:F7:A5:98:41:CD:D9
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 019F927F47D1027959C0D402803F9020F8D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 19D0
Signing time: Fri 24 Jul 2026 05:00:42 +0000
Manifest this update: Fri 24 Jul 2026 05:00:42 +0000
Manifest next update: Sat 25 Jul 2026 05:00:42 +0000
Files and hashes: 1: VQZz-okygci0q4bPk4NrG70FL80.roa (hash: zB51qkJyOipwoBy4eTPTCUbwd332werRHx90DRFh23E=)
2: mQL1nW7K7ybu0TZ9G8v3WzDDFmg.roa (hash: O084txLhwyZ8zQFJ9DRJsh8HYo5IGT97mu78wCO555Y=)
3: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: ly3BCIPG5hAdWcr1ZcTLM7iyCn1gPeNQpdtcfpVijXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:47:d1:02:79:59:c0:d4:02:80:3f:90:20:f8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Jul 24 05:00:42 2026 GMT
Not After : Jul 25 05:00:42 2026 GMT
Subject: CN=d6452336fbc4e9cdafc427427b79f7a59841cdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:0e:d6:37:cf:a6:2e:c7:aa:23:d4:b5:65:
44:3c:73:40:55:a3:fb:05:c0:44:f6:c4:ad:e0:db:
66:7f:2b:f5:c4:bb:ca:b0:6d:0c:de:40:72:ba:8c:
b0:e0:79:0a:24:13:c2:45:f5:e1:e9:23:ed:6e:7a:
eb:25:c9:27:ca:45:a5:97:b1:5a:4c:c9:92:0f:2d:
4d:82:5a:b2:eb:9f:d4:c6:32:77:57:38:59:62:92:
0f:70:8c:ee:a4:af:1c:cc:fb:e6:12:c9:c4:2f:d0:
8b:3b:1d:28:c3:96:7f:7c:05:6a:7a:39:98:ac:15:
dd:6f:97:3c:3f:1e:a9:69:c8:ca:2c:81:3e:2e:73:
92:d9:6f:6d:63:e9:4c:18:d1:1d:55:16:74:e3:f4:
94:eb:52:44:ad:39:ce:70:da:35:0b:8a:20:2e:40:
5a:2c:bc:d6:4d:4d:62:f4:bf:0d:50:1b:93:74:74:
c9:3c:ec:46:32:c5:21:3a:3c:55:7d:4c:6d:ef:4b:
03:37:f6:3d:7d:78:9b:06:03:8f:d3:25:ef:c9:af:
cb:40:ea:cf:47:29:79:f0:9e:2c:fa:6d:6e:2d:a6:
01:d2:1f:67:e7:6a:96:f0:d1:86:de:bb:96:ee:b7:
73:2a:11:1f:7b:1b:fc:58:7e:51:f1:39:a9:17:02:
8d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:45:23:36:FB:C4:E9:CD:AF:C4:27:42:7B:79:F7:A5:98:41:CD:D9
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d2:1e:a7:a8:57:0f:37:27:42:07:2c:b5:bc:4d:a6:a1:7a:
f0:c4:71:7e:04:a9:23:8d:97:78:96:eb:12:77:79:48:47:c4:
1e:76:cb:8e:10:7c:a3:d7:2b:06:60:c5:17:4e:e8:c3:33:d7:
75:68:e9:f6:1d:b0:40:e2:63:19:71:34:2b:24:07:a4:59:70:
75:07:1b:8c:a1:dc:ac:fa:25:79:0f:99:52:2f:37:b1:0f:54:
4c:09:37:c2:a8:12:ed:78:56:d4:fd:f5:cc:79:41:5a:ce:d8:
50:4c:24:f7:8c:b4:9d:0c:33:87:b8:f0:83:80:26:1c:38:ac:
9e:48:f4:a7:9d:8c:fe:93:b7:2a:55:ce:2b:c5:d2:4f:33:bf:
01:8d:6f:58:6c:12:41:f9:6a:53:09:9d:82:de:07:4b:59:90:
e7:72:ae:7c:30:d8:54:89:e1:c7:2b:fd:3e:11:c2:8a:53:81:
ff:f6:d5:ca:e6:3a:62:42:b0:29:41:49:af:bb:5f:d9:63:a1:
f8:38:bc:9d:29:ab:72:4a:e1:73:00:35:ea:60:2e:7b:c4:cd:
e7:ec:0f:3f:06:1e:5a:48:87:3d:36:0e:24:76:0e:5a:e5:c5:
b7:da:8d:0b:28:92:96:f6:3b:95:9f:5c:7a:a9:6a:f1:82:57:
6e:de:ce:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:38:34 2026 by rpki-client