
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
File: PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft (raw, json)
Hash identifier: ZfK/ABRz8c+ETaF83ueEl5C5HFUgiPRhKdLhpGBIm9k=
Subject key identifier: 87:A1:8A:8A:96:19:B2:88:5F:F2:09:46:60:05:36:EB:74:6C:22:FA
Authority key identifier: 3D:4F:B9:16:56:DD:ED:5A:0A:FA:F0:71:0D:26:A8:DF:63:6E:E0:78
Certificate issuer: /CN=3d4fb91656dded5a0afaf0710d26a8df636ee078
Certificate serial: 019D27E086E38827143AEABAB8BABF16D13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
Manifest number: 0772
Signing time: Thu 26 Mar 2026 02:01:59 +0000
Manifest this update: Thu 26 Mar 2026 02:01:59 +0000
Manifest next update: Fri 27 Mar 2026 02:01:59 +0000
Files and hashes: 1: PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl (hash: +remk14dcgJdfj/B/qlsOXZiTvfsR1BlCmGF42qHyQk=)
2: ZOFtNvohh1GT6QmRpbTj8yFColo.roa (hash: icnN57OgCydR3QaLKU2WG6f0DKQefqL0klzmHG6LRNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:86:e3:88:27:14:3a:ea:ba:b8:ba:bf:16:d1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4fb91656dded5a0afaf0710d26a8df636ee078
Validity
Not Before: Mar 26 02:01:59 2026 GMT
Not After : Mar 27 02:01:59 2026 GMT
Subject: CN=87a18a8a9619b2885ff20946600536eb746c22fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:f2:74:07:d4:0b:57:6a:d2:13:ce:b1:0f:
c0:65:1f:20:25:50:19:95:88:a6:73:7a:3d:04:96:
c4:eb:ec:ee:e1:72:20:c3:12:98:a6:0e:d3:d8:56:
8d:7f:64:67:15:d7:54:58:85:d8:08:d5:b6:58:52:
76:fc:7a:6c:2d:37:2a:44:da:7c:65:44:c0:d2:a9:
a1:a8:99:29:a8:00:a5:fc:2e:ed:ed:2e:c8:43:3e:
dd:c4:8f:c4:dd:46:d0:18:f7:8b:5a:80:1a:b1:ef:
bb:3f:72:4e:a6:64:90:19:94:42:cb:61:86:ab:68:
22:e3:21:f2:de:8f:98:a5:df:dd:ea:60:da:09:a1:
88:cb:fd:b5:5f:f5:e0:17:64:cd:cd:1e:a4:d6:7a:
53:70:2c:19:97:bb:ae:e6:38:3e:a0:b7:c1:7c:b7:
4c:73:a7:b5:ec:e8:41:c3:fd:ee:65:47:db:39:88:
a2:c6:2f:1c:92:a6:52:93:34:61:aa:a0:dd:ce:c1:
e3:31:d2:bc:77:69:ee:0b:20:db:cf:42:42:46:e2:
28:82:bf:28:2a:fb:a3:db:04:a1:b4:47:fd:be:51:
ab:d0:b1:1e:55:70:2d:d8:fc:a5:0a:58:b0:af:4e:
9a:29:b5:54:58:3c:57:73:b1:d6:a5:4d:a7:71:89:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A1:8A:8A:96:19:B2:88:5F:F2:09:46:60:05:36:EB:74:6C:22:FA
X509v3 Authority Key Identifier:
keyid:3D:4F:B9:16:56:DD:ED:5A:0A:FA:F0:71:0D:26:A8:DF:63:6E:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PU-5Flbd7VoK-vBxDSao32Nu4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92e068-4c9d-4a7e-a92f-52b85cf3fb78/1/PU-5Flbd7VoK-vBxDSao32Nu4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4e:b1:e9:59:0b:a7:6c:95:28:46:19:b9:f5:ae:e0:dd:c4:
43:5d:d1:d4:88:f1:c4:43:77:fa:bb:99:aa:06:fb:19:be:e1:
f3:b2:fd:aa:0f:65:ae:87:38:bc:5d:95:a7:a5:9c:bd:fd:fb:
06:4b:18:64:d2:0f:81:53:d9:62:cc:bf:82:32:be:ca:0b:53:
81:ca:d8:b5:c7:50:94:ed:17:37:dc:21:da:80:a4:06:7d:fb:
18:6d:f5:bf:c0:81:1c:49:c7:07:c4:50:a1:29:b6:9d:c9:35:
e5:25:0c:7b:21:50:9a:2b:03:85:ec:f2:1f:1f:fc:94:a7:4b:
3d:c2:2b:8e:81:79:28:78:26:51:49:dc:6b:87:49:11:11:14:
65:03:7d:f7:29:ce:64:b5:e2:65:5e:dc:67:07:6c:ff:a0:8b:
35:62:a6:49:d9:55:05:9f:2f:cf:3c:c8:ef:8d:ea:f5:b3:9f:
1b:c5:8d:1a:66:7c:f6:fc:59:88:47:ae:c8:77:6b:ff:05:c3:
e1:27:f1:41:ab:ac:9f:62:9d:b6:80:f9:62:82:a9:4d:09:8d:
32:d1:6c:8e:b5:32:72:35:05:79:bb:b0:24:00:70:e0:fa:6d:
1d:86:28:ae:74:9f:05:09:62:4f:04:1c:ad:d5:d6:25:5f:a3:
9c:15:27:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:23 2026 by rpki-client