Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
File: 1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json)
Hash identifier: BVMBswOXFDYCL1laJuK5Fuv3avK5T3ziclniec/dO+4=
Subject key identifier: 1E:D0:8E:FE:32:C6:99:CD:A0:E9:0B:A1:D6:53:D1:A9:77:85:FA:13
Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Certificate serial: 019EC06E28C34FA171571C213FD66BC49730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
Manifest number: 1768
Signing time: Sat 13 Jun 2026 10:01:45 +0000
Manifest this update: Sat 13 Jun 2026 10:01:45 +0000
Manifest next update: Sun 14 Jun 2026 10:01:45 +0000
Files and hashes: 1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: bHLEc3LVi34TIojA8lyakDTRVZLrEY3ZearETbp8k3A=)
2: 5VBqrJ3l2bBgVNFXgKoPrPjtOoo.roa (hash: pw/y5AALVmMkOsomb76pGvibV4sU9NfaodslXc53Ans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:28:c3:4f:a1:71:57:1c:21:3f:d6:6b:c4:97:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Validity
Not Before: Jun 13 10:01:45 2026 GMT
Not After : Jun 14 10:01:45 2026 GMT
Subject: CN=1ed08efe32c699cda0e90ba1d653d1a97785fa13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:69:06:e4:a9:2a:75:0e:39:45:cb:8f:4c:
88:1d:7a:b4:5e:16:de:49:10:67:b8:91:28:8b:93:
ca:14:d7:6b:bb:f0:ab:8b:9e:63:64:99:81:c2:58:
f0:4b:b4:89:f6:4f:b1:2c:1a:0c:d4:dc:fb:69:72:
44:4f:6d:ec:5b:fd:31:e3:d7:1f:1c:9a:b8:64:d7:
50:32:6d:af:35:58:a4:82:ee:19:22:7c:19:38:e6:
c2:1f:02:5a:0f:6b:8e:4c:fb:9b:bd:a5:2b:2e:ad:
7a:6c:46:c4:35:b3:46:f2:cb:a7:7a:2d:03:95:79:
0d:10:01:43:3c:9f:8a:81:c4:dd:54:07:19:7a:fa:
5a:6f:55:7b:29:70:21:64:90:c1:78:5e:c1:24:14:
23:1c:47:6f:48:73:80:60:f6:01:7e:bf:5e:a7:c0:
4f:cc:f6:0f:9b:20:91:61:1c:ec:14:1e:2d:5b:cd:
f4:15:d9:de:c3:f8:01:fe:f9:e1:0f:6b:a0:cf:a9:
3b:6b:8b:2d:6d:40:ed:ca:b8:a5:8f:1b:07:f7:b6:
18:e6:d1:2e:24:44:97:42:b3:15:a6:e3:76:72:53:
7d:c2:26:6a:fa:37:ed:c8:f8:03:80:8f:67:95:bc:
4c:f0:3e:8d:43:0c:f3:d6:61:02:ed:fb:3a:3e:07:
b5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D0:8E:FE:32:C6:99:CD:A0:E9:0B:A1:D6:53:D1:A9:77:85:FA:13
X509v3 Authority Key Identifier:
keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:55:37:82:9b:66:37:97:67:de:36:c8:15:a8:0a:bd:aa:8a:
e1:11:e7:a5:0e:b7:ae:db:13:84:ad:10:23:7e:d6:ba:b6:20:
ea:15:a1:02:93:6a:b5:04:e9:9c:7c:af:0a:38:0d:37:d2:5a:
13:e0:cb:22:8b:3d:b8:5d:96:4f:00:63:4e:2e:3b:04:8e:88:
c3:05:31:af:a9:cf:78:c9:ec:67:7c:f7:13:c1:22:2d:30:54:
93:82:51:85:ee:1d:38:11:03:80:1a:84:8d:34:af:22:3c:6a:
29:5a:0b:47:22:62:73:71:c6:87:13:ed:80:79:fd:52:a1:89:
5a:03:bc:09:f5:5d:d7:b9:79:e4:da:34:3c:3b:0b:4c:7c:3e:
4a:c4:ea:a0:8d:06:b6:1a:d6:97:fa:e6:d9:37:b2:63:98:35:
cc:4a:de:81:80:0c:f1:11:5f:6a:36:8f:b1:72:be:2d:1e:64:
0b:bb:22:ac:88:e6:ae:d5:f5:b4:13:53:01:3a:ac:99:17:a8:
dd:c1:99:e0:ba:ab:82:cf:32:a6:96:ed:71:d5:ff:ca:90:d0:
ac:f2:c9:b4:c5:15:8c:50:a1:aa:6b:cb:0b:50:d6:3f:48:ed:
0b:b7:da:36:34:52:6f:5d:d1:e2:7f:20:ab:da:ea:0f:f8:85:
7f:46:4d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:51:00 2026 by rpki-client