Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
File: 1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json)
Hash identifier: 0ODuQ9r86acvsaR2seuB1QztuTHA4v9azhOKtJgTbgE=
Subject key identifier: A1:45:27:25:32:C2:CD:FD:0B:E4:2D:E8:45:8C:B1:A3:4B:51:F7:88
Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Certificate serial: 019D98F4B0464580701160F71740F5228038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
Manifest number: 16CF
Signing time: Fri 17 Apr 2026 01:01:05 +0000
Manifest this update: Fri 17 Apr 2026 01:01:05 +0000
Manifest next update: Sat 18 Apr 2026 01:01:05 +0000
Files and hashes: 1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: SndPRrBN55k7j/zvW51labu0pg4Ix2VgGSKzqELtK4U=)
2: 5VBqrJ3l2bBgVNFXgKoPrPjtOoo.roa (hash: pw/y5AALVmMkOsomb76pGvibV4sU9NfaodslXc53Ans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:b0:46:45:80:70:11:60:f7:17:40:f5:22:80:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Validity
Not Before: Apr 17 01:01:05 2026 GMT
Not After : Apr 18 01:01:05 2026 GMT
Subject: CN=a145272532c2cdfd0be42de8458cb1a34b51f788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:9d:16:63:7b:ff:37:40:04:38:77:30:21:
b8:ba:d2:03:92:5f:a7:14:7b:e6:c2:ee:72:f5:a2:
a4:a8:c6:d8:c7:03:2e:3f:da:bb:fc:6c:50:56:89:
59:6a:d9:dd:7f:0d:db:35:e8:8f:4a:31:90:b1:33:
3f:44:cd:f9:cb:c8:1b:e1:7f:ad:e1:ff:54:e3:cc:
00:6e:74:09:63:9a:69:e6:7d:45:6a:d4:ff:a6:7b:
70:26:37:c4:dd:67:b6:bd:3e:51:a0:c2:98:d5:ca:
cc:0b:6a:bd:ab:23:ca:1c:d0:54:ad:fc:23:de:03:
d1:2f:26:ff:eb:d2:b5:8c:b9:63:d7:88:34:e5:18:
39:76:e3:21:16:3b:7e:19:37:f2:a9:7d:df:c0:10:
99:a9:40:e1:e8:ab:c7:ed:3b:7d:9f:19:e2:e1:19:
8f:24:a0:be:21:12:d8:d5:8a:ac:88:b0:ca:6b:1e:
8a:97:cc:5d:8e:57:c9:0e:3b:ac:19:53:7e:89:7e:
f3:bf:4f:2b:62:ed:33:c2:39:ec:b8:49:3e:8c:87:
3d:5b:8c:9a:f1:36:bf:a9:6e:f4:22:34:8e:c9:4f:
6a:43:76:ca:5e:36:47:33:a7:8b:ae:98:ab:2d:62:
03:43:7a:e2:9a:50:4b:03:a7:3c:bd:3f:ee:ed:26:
ae:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:45:27:25:32:C2:CD:FD:0B:E4:2D:E8:45:8C:B1:A3:4B:51:F7:88
X509v3 Authority Key Identifier:
keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:05:b7:5a:c5:93:75:b8:bc:7f:dc:29:60:55:58:27:3b:fa:
74:26:1e:eb:2f:bd:bb:e8:19:37:b7:b9:ef:8f:6b:85:38:ed:
d3:6c:34:c3:e4:53:dc:82:22:14:25:73:b9:f1:5b:31:99:bd:
9e:90:fb:2f:41:7a:f4:d9:96:59:42:c2:67:63:38:b3:79:c9:
a6:7c:af:d5:41:a4:40:86:ef:7f:45:da:63:cb:23:aa:47:77:
e4:19:8c:6e:f8:ed:35:29:33:68:98:06:5a:0c:d1:ec:10:97:
23:bd:53:58:46:e4:d1:60:f5:f9:68:f3:58:f4:5a:26:11:6f:
6f:ea:0e:b4:ab:75:de:50:1c:38:54:60:65:f1:d0:ce:4a:cf:
cb:4f:d4:86:88:07:d0:89:27:6a:8e:c8:e6:9e:70:b1:27:5d:
c6:e2:34:e2:32:1d:31:e6:fe:03:da:df:d4:49:83:44:f5:ea:
54:67:0d:9b:82:8c:16:62:26:ab:c2:8f:34:48:5f:2a:c0:a0:
9d:c5:02:3b:ec:3e:ac:43:c7:45:e8:93:bb:a2:48:bc:39:cf:
42:38:9a:8f:e6:dc:14:49:8e:e0:17:9d:b2:f2:a2:40:1a:a0:
fc:18:1f:1f:7b:c0:f6:cd:0b:b4:d7:ab:e3:e2:6e:10:15:46:
59:ee:16:b0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2Y9LBGRYBwEWD3F0D1IoA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOWI4OWYzNjdkNGZiOTUwMjg3NzAxZjYyZDRhMDM5Yjdm
NmNiMjAwHhcNMjYwNDE3MDEwMTA1WhcNMjYwNDE4MDEwMTA1WjAzMTEwLwYDVQQD
EyhhMTQ1MjcyNTMyYzJjZGZkMGJlNDJkZTg0NThjYjFhMzRiNTFmNzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoOdFmN7/zdABDh3MCG4utIDkl+n
FHvmwu5y9aKkqMbYxwMuP9q7/GxQVolZatndfw3bNeiPSjGQsTM/RM35y8gb4X+t
4f9U48wAbnQJY5pp5n1FatT/pntwJjfE3We2vT5RoMKY1crMC2q9qyPKHNBUrfwj
3gPRLyb/69K1jLlj14g05Rg5duMhFjt+GTfyqX3fwBCZqUDh6KvH7Tt9nxni4RmP
JKC+IRLY1YqsiLDKax6Kl8xdjlfJDjusGVN+iX7zv08rYu0zwjnsuEk+jIc9W4ya
8Ta/qW70IjSOyU9qQ3bKXjZHM6eLrpirLWIDQ3rimlBLA6c8vT/u7SaugwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKFFJyUyws39C+Qt6EWMsaNLUfeIMB8GA1UdIwQY
MBaAFPqbifNn1PuVAodwH2LUoDm39ssgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1wdUo4MmZVLTVVQ2gzQWZZdFNnT2JmMnl5QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvOTg5MzNhLTc1ODEtNDk3OS05MTIx
LTBlMWE2OGM3NTYzYi8xLzEtcHVKODJmVS01VUNoM0FmWXRTZ09iZjJ5eUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY1Lzk4OTMzYS03NTgxLTQ5NzktOTEyMS0wZTFhNjhjNzU2
M2IvMS8xLXB1SjgyZlUtNVVDaDNBZll0U2dPYmYyeXlBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwW3
WsWTdbi8f9wpYFVYJzv6dCYe6y+9u+gZN7e5749rhTjt02w0w+RT3IIiFCVzufFb
MZm9npD7L0F69NmWWULCZ2M4s3nJpnyv1UGkQIbvf0XaY8sjqkd35BmMbvjtNSkz
aJgGWgzR7BCXI71TWEbk0WD1+WjzWPRaJhFvb+oOtKt13lAcOFRgZfHQzkrPy0/U
hogH0Iknao7I5p5wsSddxuI04jIdMeb+A9rf1EmDRPXqVGcNm4KMFmImq8KPNEhf
KsCgncUCO+w+rEPHReiTu6JIvDnPQjiaj+bcFEmO4BedsvKiQBqg/BgfH3vA9s0L
tNer4+JuEBVGWe4WsA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:04:16 2026 by rpki-client