Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
File: PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json)
Hash identifier: SIOL3yj1wT5kLY0ewrg1qor3WGkaClYFkRoQ6Dh25DY=
Subject key identifier: 76:0A:D4:8D:4D:3F:F2:4A:DC:AF:11:B3:DE:28:6C:45:E4:D0:50:A5
Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Certificate issuer: /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Certificate serial: 019D9C63A5FC28879CC23F32D02375FB6B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
Manifest number: 033C
Signing time: Fri 17 Apr 2026 17:01:09 +0000
Manifest this update: Fri 17 Apr 2026 17:01:09 +0000
Manifest next update: Sat 18 Apr 2026 17:01:09 +0000
Files and hashes: 1: 2P0Kjjt5-7UDTZhBwA-FFuDiDYM.roa (hash: e8dlsMoEY5OAzunOS6SXf0tgQsD9v9aE1pqpQ/DOvsk=)
2: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: XN0tvC9oTnk5TJMYFfN4fJDsLyASEjqhYvk6GnoHWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:a5:fc:28:87:9c:c2:3f:32:d0:23:75:fb:6b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Validity
Not Before: Apr 17 17:01:09 2026 GMT
Not After : Apr 18 17:01:09 2026 GMT
Subject: CN=760ad48d4d3ff24adcaf11b3de286c45e4d050a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:18:b1:8b:0a:73:b0:e8:99:9c:ee:73:4b:83:
0d:c5:b5:32:fa:9c:20:50:d1:72:98:63:ab:9a:b1:
fd:c8:c8:8c:2d:71:e3:e4:ea:e4:28:a3:af:05:d6:
d2:17:32:bf:75:7b:bc:e9:5e:6e:c2:88:8f:d5:66:
92:8e:7e:e3:f1:6c:c4:32:06:ac:5f:65:e6:41:aa:
ce:b5:d0:3a:7b:87:e8:82:56:da:83:08:9d:9d:c9:
18:39:25:30:1f:c4:2a:75:7b:62:e3:47:5d:a9:75:
2d:ec:25:d4:d9:30:ec:8b:f5:2e:e5:89:37:66:6c:
1f:bb:b7:26:a5:9f:f2:de:4b:0a:37:bc:3b:43:39:
5a:16:65:b1:f0:64:cc:92:c5:1c:f0:a3:e4:65:b5:
78:21:4a:bf:20:14:74:ef:60:93:a5:bc:ad:6d:82:
c2:c0:92:ed:cc:cc:7c:70:20:48:97:73:6d:bb:55:
a6:8d:0e:c5:3b:87:ae:6e:d2:5c:c4:fc:59:eb:0e:
89:44:a8:9e:7e:01:68:94:26:fe:9d:8f:13:d3:3a:
c7:8d:28:48:9e:30:ed:89:af:9a:70:ec:21:73:4a:
82:ed:eb:43:f6:a6:e0:2a:16:de:4b:65:da:40:41:
ee:92:1e:c7:ce:9b:07:72:32:74:46:90:9f:03:0f:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0A:D4:8D:4D:3F:F2:4A:DC:AF:11:B3:DE:28:6C:45:E4:D0:50:A5
X509v3 Authority Key Identifier:
keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c7:24:70:7f:87:0d:01:94:2f:b4:54:ac:1d:39:85:92:2e:
36:19:37:63:92:67:49:7a:96:17:aa:e8:29:74:93:e3:ae:72:
1e:e2:d8:2c:95:d5:47:46:8e:67:d6:03:0c:d6:4d:22:bb:cd:
0d:db:69:d6:8d:06:18:db:8b:d9:5d:f5:0b:2c:d1:73:9d:82:
8d:a9:77:c7:20:b3:5d:7c:60:26:72:40:d1:19:bd:34:e1:31:
c2:b7:a6:64:17:84:14:31:7a:f8:aa:15:b5:49:38:17:19:d7:
6c:01:58:2c:10:e0:8e:0c:cc:1c:02:67:b4:2c:39:cf:2f:fb:
73:70:7a:46:62:f6:01:6f:5f:10:aa:44:b3:f4:fc:f1:bd:20:
53:73:d8:9e:16:64:a8:0c:23:17:f5:b2:c8:e3:15:e1:2b:04:
d5:f4:54:7a:ca:2a:e2:f8:b9:a8:84:5d:65:ce:ee:ad:5f:a5:
e3:7f:10:c4:cd:27:1a:ab:a0:25:77:8e:71:1f:84:2d:98:f6:
09:4f:43:67:7d:ea:55:4a:e6:35:73:f1:63:96:6f:e6:af:99:
81:81:ff:23:b8:b2:bf:e8:3b:2a:11:1f:2c:e9:30:97:82:83:
d8:26:ba:56:9f:21:f8:cd:f2:0c:d7:81:75:f2:8d:83:5e:ae:
2c:48:17:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:53 2026 by rpki-client