Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
File: PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json)
Hash identifier: ZKW5oAARxa67MhKT7BgxuQDMvropyy7xKpP89kAXlFo=
Subject key identifier: D1:4C:CB:21:EB:F4:BE:77:D3:E2:AD:B1:C2:1A:37:33:50:23:BD:09
Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Certificate issuer: /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Certificate serial: 019CAAFD3ABB221306D322F68920351476DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
Manifest number: 02BF
Signing time: Sun 01 Mar 2026 20:00:48 +0000
Manifest this update: Sun 01 Mar 2026 20:00:48 +0000
Manifest next update: Mon 02 Mar 2026 20:00:48 +0000
Files and hashes: 1: 2P0Kjjt5-7UDTZhBwA-FFuDiDYM.roa (hash: e8dlsMoEY5OAzunOS6SXf0tgQsD9v9aE1pqpQ/DOvsk=)
2: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: Vu7zGtfYPcUXIITKLeZurs1dKlamsSNZHcTWKypgQ44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:3a:bb:22:13:06:d3:22:f6:89:20:35:14:76:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Validity
Not Before: Mar 1 20:00:48 2026 GMT
Not After : Mar 2 20:00:48 2026 GMT
Subject: CN=d14ccb21ebf4be77d3e2adb1c21a37335023bd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:78:10:c1:19:6f:2b:64:9b:91:82:e5:a6:
f6:d4:8e:7b:50:fb:cc:24:dd:4e:68:86:da:f4:09:
fb:0e:14:7f:83:7b:3a:5e:3f:63:89:88:2b:c3:44:
56:03:fc:3f:94:c8:b7:6e:fa:d3:5f:1a:30:69:be:
5b:91:15:a6:48:5c:01:1d:83:0f:10:a0:65:6c:41:
f5:37:41:04:70:48:05:a6:5d:4d:28:ca:38:7f:49:
e9:79:e7:a8:e5:bd:c7:82:11:25:cd:ed:18:53:7f:
1f:88:e8:ac:33:09:53:b8:31:83:eb:f8:3c:17:ae:
3e:20:72:73:28:9c:30:2b:dc:43:65:01:c8:6f:0f:
3b:1f:d2:b9:e1:53:10:f1:4b:28:13:25:e8:39:05:
d9:aa:44:e2:d9:be:96:ea:92:fb:24:d2:d3:19:71:
ce:78:1d:15:69:d7:97:0a:de:1c:9b:2f:71:e9:d9:
df:5e:17:47:12:8a:48:c2:15:5e:b6:aa:cb:20:9a:
80:16:f1:15:dc:92:af:36:c4:a7:40:79:e2:01:59:
53:52:2c:bc:50:77:a9:c7:c2:bf:13:61:4b:26:5d:
6d:bc:49:9c:c0:ed:34:a3:3f:6b:cd:02:58:cb:25:
ad:cf:de:9a:b2:92:74:21:a9:72:ea:c1:7b:47:70:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4C:CB:21:EB:F4:BE:77:D3:E2:AD:B1:C2:1A:37:33:50:23:BD:09
X509v3 Authority Key Identifier:
keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bc:e8:5e:7f:c2:85:91:0b:96:58:64:5e:0b:1d:51:d7:89:
e0:64:06:b2:e3:4e:4d:ba:7a:64:c3:45:3f:91:83:c9:65:64:
a0:e8:d9:53:50:13:30:26:8e:21:92:65:76:0f:0a:3f:ba:42:
7a:c4:57:68:02:64:c8:d0:ba:92:55:40:f2:e7:b0:5d:a6:c0:
15:6d:98:e3:d3:45:ba:f8:30:18:3e:29:95:0a:75:e1:24:f9:
63:cb:f9:b6:b3:9c:1a:77:c5:78:4e:ed:6e:fe:47:c5:c4:17:
91:b9:d3:bb:44:46:73:50:99:d9:dd:91:8e:bd:59:7b:bc:16:
93:95:9d:a2:f8:e0:71:35:47:59:14:c2:53:57:74:fb:f8:2d:
b1:08:96:c8:e6:03:f6:e7:c7:a2:31:d5:50:10:73:10:aa:5f:
4e:a8:e1:0a:a2:bb:37:cd:a8:bd:1e:85:15:81:67:e3:64:50:
dd:5d:c4:ee:fb:96:6e:96:ab:02:c0:85:ee:96:5f:6c:c5:18:
25:7d:5c:74:32:08:57:8b:b0:a0:c9:01:d9:25:8d:2a:24:b9:
ce:24:75:8e:b4:86:d0:40:aa:c2:60:aa:d2:cc:10:75:0b:a5:
f3:59:29:27:80:2b:de:ac:da:d4:42:f8:e7:dc:43:2c:ad:92:
c0:46:e7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:47 2026 by rpki-client