
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
File: PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json)
Hash identifier: K52Q4P5aIhwob3dPPaFDZndw3fb9u9p6pHV49K/rB/k=
Subject key identifier: 49:57:33:EE:51:FC:9F:34:1B:90:ED:F1:29:B7:9D:2F:2C:63:C2:01
Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Certificate issuer: /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Certificate serial: 01A142A870446F29F98C8FE8A5A904C41BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
Manifest number: 0520
Signing time: Fri 16 Oct 2026 03:01:37 +0000
Manifest this update: Fri 16 Oct 2026 03:01:37 +0000
Manifest next update: Sat 17 Oct 2026 03:01:37 +0000
Files and hashes: 1: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: G8y1Gfyy7cJjmcpbgFvGUGNRQ/otbq+xGAb/5IClPyY=)
2: ZPNFN2SHGEuug7dR3f_5NaqBcYE.roa (hash: 5bnWerfmM11w3yKXSNQNnqjZF9M1e+6+t1oBrlPcPjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:a8:70:44:6f:29:f9:8c:8f:e8:a5:a9:04:c4:1b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Validity
Not Before: Oct 16 03:01:37 2026 GMT
Not After : Oct 17 03:01:37 2026 GMT
Subject: CN=495733ee51fc9f341b90edf129b79d2f2c63c201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:99:ca:cb:ab:fb:a9:4c:32:25:fd:8c:98:
0d:a6:36:6a:b1:dd:f0:25:db:1f:d8:57:a2:b0:52:
3a:48:68:e0:21:3d:7b:da:ec:74:08:63:07:2c:89:
b3:38:34:4e:ea:97:c1:f6:65:a3:a9:c0:cb:f8:ac:
a1:f6:2e:9e:aa:f3:57:07:1d:99:30:40:19:2d:64:
9d:48:57:39:05:a8:9e:4d:58:87:cc:97:47:01:67:
a4:4a:d6:2f:ac:bd:eb:ab:a2:9f:e8:fc:50:b9:34:
2b:6f:f5:a7:42:f1:cf:86:e4:c1:68:20:db:bf:51:
cd:0c:56:85:98:0c:16:8a:20:6f:20:bf:ce:9b:41:
b1:f8:44:8b:64:c2:0c:4e:14:cf:90:7d:bd:92:a1:
71:39:4c:fe:a2:b6:fe:c1:e8:ff:74:10:7b:a5:2c:
a8:b4:d9:8b:41:bb:82:fa:9d:b7:8b:40:99:88:1f:
86:70:ad:95:7c:78:90:2e:5b:6d:0d:58:4b:dd:b2:
fe:22:a1:00:b2:8c:5f:03:b6:81:0a:ef:64:4d:19:
1c:16:8e:34:c3:81:df:f3:db:b7:2d:11:5e:32:15:
7a:85:68:32:23:c1:a3:07:be:c6:07:7c:ce:69:8e:
1a:dc:4f:22:7e:a5:1b:be:61:8c:66:e2:9d:dd:d1:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:57:33:EE:51:FC:9F:34:1B:90:ED:F1:29:B7:9D:2F:2C:63:C2:01
X509v3 Authority Key Identifier:
keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:45:9b:aa:8e:74:e8:36:47:91:0b:20:52:ee:c2:c0:10:fb:
ee:3f:a1:e3:1b:59:b1:b3:41:e2:e2:cd:b7:71:a9:3e:2d:fc:
00:20:bd:50:59:19:8d:28:55:7e:e7:a2:58:2e:12:93:6e:48:
b1:53:cc:c6:f1:1a:83:be:a6:36:07:83:17:94:f8:ea:2a:55:
3c:d6:b7:94:23:a0:e9:ab:f0:3f:ee:5b:ab:95:12:b0:90:51:
b8:50:ed:b7:09:3c:92:b4:9c:8f:78:e9:7a:33:10:35:de:d6:
70:92:49:e0:9c:80:f8:98:3a:dc:40:24:1b:14:2c:77:52:14:
9d:a3:4c:e5:43:64:69:6e:73:f6:31:71:6d:00:f6:06:f6:71:
9c:3d:bf:c5:61:c2:b3:03:d9:ca:14:c3:84:b3:29:eb:5d:3e:
dc:31:a9:62:01:02:c5:d6:28:f9:87:ad:b5:ae:a3:3f:40:21:
ed:1a:1a:0a:ad:d1:e1:9f:b8:29:dd:f7:85:c2:e8:3c:2a:49:
d5:1c:b6:80:55:d3:9d:03:cd:83:b7:d3:de:dd:75:c6:8e:c7:
28:8c:d2:12:22:89:1c:06:44:35:79:59:61:36:f5:f1:1d:4c:
47:66:24:46:90:2b:6d:6d:72:ef:e9:56:fe:63:3c:20:ed:f8:
87:8b:1d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 08:43:56 2026 by rpki-client