Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
File: puiiWpN5KlizotgPsarZWeZa7d8.mft (raw, json)
Hash identifier: 6dN+HjkZ3Eh9q3PcyEj0r6FvxtPAn/A1cylsNnUN4M4=
Subject key identifier: 55:67:1D:BC:65:2B:8C:A0:9E:D9:F6:02:5D:12:20:1B:7C:0D:D1:4F
Authority key identifier: A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
Certificate issuer: /CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Certificate serial: 019D2A04EA11879EA6A6D05A35E0B356329E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
Manifest number: 17E2
Signing time: Thu 26 Mar 2026 12:00:58 +0000
Manifest this update: Thu 26 Mar 2026 12:00:58 +0000
Manifest next update: Fri 27 Mar 2026 12:00:58 +0000
Files and hashes: 1: g9eUHufAbqCnyoz7MWSGoEXgVqk.roa (hash: h3ZbwcX8TFezVBJLOgnMiqp7D8R/Las6MgO0OvsuqC0=)
2: puiiWpN5KlizotgPsarZWeZa7d8.crl (hash: X/kcimw0lwtNQ5jhngJdsR4vzdLbNv9tY0NCD1gS8NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:ea:11:87:9e:a6:a6:d0:5a:35:e0:b3:56:32:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Validity
Not Before: Mar 26 12:00:58 2026 GMT
Not After : Mar 27 12:00:58 2026 GMT
Subject: CN=55671dbc652b8ca09ed9f6025d12201b7c0dd14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:4f:e8:3f:61:47:d3:47:a7:eb:8e:c9:96:
62:b8:5e:ac:d4:c7:63:45:ae:8b:b9:97:4e:a0:97:
02:c1:fc:61:e4:07:1b:55:7b:fc:31:bb:7f:16:70:
6c:05:e3:16:2a:eb:f2:ce:85:02:72:ba:a0:b9:17:
2b:e2:52:a2:ed:b0:d2:81:e2:06:7c:ce:e6:87:e3:
97:8b:12:f3:be:3c:cc:eb:e3:18:01:15:41:92:52:
26:88:38:39:0c:25:08:93:b2:9d:53:d4:46:08:67:
3e:93:43:7a:21:3f:14:32:3d:46:5f:69:8f:3a:76:
05:fc:e0:e1:7a:16:40:e0:31:3c:18:58:8c:98:95:
3c:4f:7a:cd:ef:7f:64:a2:89:b8:e3:e2:24:bd:66:
70:41:fb:00:54:ea:91:1f:66:24:15:4e:fd:c6:20:
fc:06:a6:b4:2f:f7:1a:cf:72:19:fe:7e:7b:f4:f5:
fb:73:70:e7:9a:f0:37:9c:f4:f1:4d:7e:6c:75:6d:
35:af:74:ec:d5:bb:87:06:7f:8e:43:36:fc:18:58:
cf:86:d3:80:7e:05:0a:f1:05:68:94:be:db:0b:11:
07:51:f5:0a:ae:de:b9:b9:1c:82:b5:8a:a8:8b:d0:
e1:ca:80:6f:70:c2:6e:92:f3:4f:bb:cc:68:84:54:
cf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:67:1D:BC:65:2B:8C:A0:9E:D9:F6:02:5D:12:20:1B:7C:0D:D1:4F
X509v3 Authority Key Identifier:
keyid:A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9d:cc:38:28:cc:b0:4d:88:b3:2b:a4:40:3c:db:45:2d:24:
d2:62:38:e9:ec:ff:88:8c:c2:6f:7d:49:cc:0f:c2:8f:bb:6a:
94:81:41:21:65:29:05:0d:e4:89:b4:a1:07:42:68:e9:1f:cc:
2b:08:3b:d1:03:bf:5a:01:00:1e:a0:1f:3d:56:12:d5:cc:b8:
11:e7:d5:91:91:7e:6c:cf:96:07:3d:fd:6a:ef:43:3d:24:79:
94:52:74:c7:73:ce:11:36:cc:27:cc:fb:fe:cc:53:cb:f5:3a:
91:0a:6f:05:f8:b8:e5:65:57:bc:28:8f:63:03:1a:c0:7a:f6:
01:4a:28:8e:5a:80:07:45:da:6b:a1:84:6b:04:27:23:78:e5:
fb:71:09:09:94:e3:ad:a4:b7:43:46:32:9e:ba:71:b6:1c:51:
f8:08:f4:e5:33:2a:f0:8d:a7:5c:21:48:bf:3d:13:28:e0:e0:
21:2e:88:4b:74:1a:5a:7f:16:14:00:73:0d:de:36:db:a1:63:
04:b1:8b:7d:da:2d:ab:07:b7:db:f3:df:06:48:3b:c3:25:65:
89:86:41:a7:49:ea:03:e4:eb:58:27:93:52:48:73:ad:d7:fb:
da:e6:5a:25:00:bf:5c:28:77:d6:be:d3:49:b9:3a:36:5c:36:
8b:df:b2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:26 2026 by rpki-client