Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
File: PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json)
Hash identifier: 0OOifBBAeUtKtjsFkeVCRbgQHGDqpDjyS6wYDyqSsSY=
Subject key identifier: 35:7B:EE:F8:A0:D4:10:EB:B1:07:04:4D:F6:35:80:C6:9A:07:C7:2C
Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Certificate issuer: /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Certificate serial: 019CACEBE0077E641EF02797ABD17B4DD71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
Manifest number: 02C0
Signing time: Mon 02 Mar 2026 05:01:05 +0000
Manifest this update: Mon 02 Mar 2026 05:01:05 +0000
Manifest next update: Tue 03 Mar 2026 05:01:05 +0000
Files and hashes: 1: 2P0Kjjt5-7UDTZhBwA-FFuDiDYM.roa (hash: e8dlsMoEY5OAzunOS6SXf0tgQsD9v9aE1pqpQ/DOvsk=)
2: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: zAdS7ztJ46Y3AGXnJn6/fSQk8wKhS50YBuPGImBO3rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:e0:07:7e:64:1e:f0:27:97:ab:d1:7b:4d:d7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Validity
Not Before: Mar 2 05:01:05 2026 GMT
Not After : Mar 3 05:01:05 2026 GMT
Subject: CN=357beef8a0d410ebb107044df63580c69a07c72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:f3:5a:c6:a6:25:2b:f4:7f:73:54:86:98:
4e:a1:83:af:10:1b:d1:2e:0d:c5:80:4e:d0:e6:8c:
ed:6e:c2:64:a7:fb:29:85:5b:f9:2b:7f:7c:31:38:
cc:e5:bd:0c:cf:b6:92:89:49:ad:eb:b1:04:4a:53:
75:ec:07:4f:77:50:9b:ab:fa:9e:69:e8:c2:6f:a1:
30:70:b2:4e:61:a1:cc:d9:4e:95:b7:b1:7e:c0:71:
4c:e6:bf:5a:f6:3f:04:a2:b4:1e:f3:c4:0c:c2:c8:
32:13:06:f5:d5:95:dd:c1:8f:5f:59:f0:75:98:10:
96:04:89:3b:2f:70:3f:8c:49:b0:bd:bf:0f:42:eb:
38:28:a5:fa:76:36:7e:af:f8:e6:9e:9e:16:c6:89:
2b:7e:75:95:3e:62:cb:97:7c:e7:95:43:f3:28:d4:
05:4d:88:6a:e5:a7:9e:37:e7:39:57:c8:c0:19:f1:
7f:46:e2:29:a5:32:7f:ae:41:e8:49:fb:f8:be:7d:
8f:c9:58:59:8f:87:fa:bd:b2:6d:a4:12:47:f6:2a:
f0:59:cb:8d:26:a6:f9:a0:4c:29:73:db:48:b8:b3:
7b:74:3e:ab:4b:fe:4d:30:d7:35:45:50:31:e8:97:
73:e3:f6:08:e3:61:31:9c:29:a3:47:33:61:59:8d:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7B:EE:F8:A0:D4:10:EB:B1:07:04:4D:F6:35:80:C6:9A:07:C7:2C
X509v3 Authority Key Identifier:
keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:64:cd:e7:b1:08:41:b1:0a:4d:13:3d:e2:82:7f:d1:f4:a2:
b2:8e:57:df:8c:a8:44:3a:7f:18:ed:4d:d6:ee:e3:3e:9d:2b:
f1:4d:22:1b:02:ed:8b:66:b4:2a:9d:33:8e:c9:04:21:f7:fa:
4e:b3:1d:7b:fd:03:ff:a4:2b:b6:da:9f:99:b6:aa:1f:cb:c9:
a9:24:0d:ba:2d:e2:14:68:77:de:c1:b8:3e:9f:75:d1:9c:52:
72:ce:69:02:a0:21:fc:d8:c4:4e:c6:e4:57:bf:9b:ef:66:8d:
93:b8:8a:dc:6f:7f:76:5d:b6:af:61:42:35:03:70:03:2b:a4:
ca:f5:4a:fc:1e:6f:25:28:56:3b:19:1f:22:fe:60:5b:96:06:
0b:63:37:01:c5:be:79:6b:f1:b6:e2:ee:a9:67:37:37:b5:ab:
62:92:62:60:0f:fa:de:10:f5:1a:78:1c:4f:e8:b4:0e:9f:76:
71:be:15:8a:14:f1:5e:03:13:6f:d0:7d:1a:32:fc:1e:54:d5:
dc:89:0c:42:66:54:0d:1c:0a:f8:cf:9e:64:60:43:41:f7:6a:
dc:43:e9:8c:a7:18:ed:d0:b9:a8:4f:ab:08:30:85:a7:02:61:
8f:ed:f7:4a:de:95:76:c0:7a:23:86:55:57:ad:00:7d:9f:e6:
23:00:d1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:04 2026 by rpki-client