Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
File: pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft (raw, json)
Hash identifier: aJ+GAaGLcjxtAOaCs+kdyoLXSd/225WWL3IEDBq29Ts=
Subject key identifier: 05:07:E0:4E:09:B5:43:03:66:C8:41:2F:C2:91:2A:DA:77:FB:13:8E
Authority key identifier: A6:EF:D4:E6:EF:19:DC:5B:09:4F:7D:A1:89:02:AC:35:F3:FE:2C:19
Certificate issuer: /CN=a6efd4e6ef19dc5b094f7da18902ac35f3fe2c19
Certificate serial: 01A0BE42E112E6AE36E85819C816D1E5E7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
Manifest number: 014D
Signing time: Sun 20 Sep 2026 10:00:49 +0000
Manifest this update: Sun 20 Sep 2026 10:00:49 +0000
Manifest next update: Mon 21 Sep 2026 10:00:49 +0000
Files and hashes: 1: kHouM2VLdzKRZTCra3l9Z36Mmyk.asa (hash: sV07n58Gs6Mq12Maj9pNWDdpH7lTopJq8te/ptrRpDw=)
2: pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl (hash: 8AmBQiEQY6LbS8MbTY0feEtRg0UOIMgrSR9L/Zs4OfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:42:e1:12:e6:ae:36:e8:58:19:c8:16:d1:e5:e7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6efd4e6ef19dc5b094f7da18902ac35f3fe2c19
Validity
Not Before: Sep 20 10:00:49 2026 GMT
Not After : Sep 21 10:00:49 2026 GMT
Subject: CN=0507e04e09b5430366c8412fc2912ada77fb138e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:df:87:07:69:91:c8:97:02:41:b4:8e:e3:
83:57:ab:0e:16:7c:18:31:22:9d:1d:75:c7:fb:56:
bb:cf:17:de:7c:8b:ee:cc:36:64:88:66:78:4c:37:
9c:f9:b7:da:a8:84:8d:5f:94:37:42:ea:ed:18:55:
bc:58:65:c1:f4:69:34:46:9a:f4:bc:6b:1d:98:72:
3e:92:12:a3:97:0e:0b:58:c2:bd:48:84:17:93:a7:
f2:4d:4e:cc:22:9e:28:21:34:d4:e1:fe:20:56:02:
09:4f:b9:93:4d:32:d8:a1:b9:bc:12:21:b8:68:ed:
ea:20:56:d6:ea:dd:d5:e1:0d:e4:ea:93:f5:c1:a6:
c4:7e:89:e5:ef:a0:96:09:67:af:ab:40:b2:8f:3e:
d7:a9:20:a2:a2:1f:e5:d7:e0:a2:3f:d6:a7:a9:eb:
29:30:d4:e4:51:b2:3e:30:0d:23:95:26:d2:81:96:
92:f5:32:ff:36:e8:0a:ce:51:a1:08:e1:d1:51:f7:
5c:4e:f4:ca:da:0a:8b:1b:dc:7a:60:f6:1c:17:50:
a8:a8:55:ab:ed:4c:5b:52:e6:78:30:f0:2d:a9:b5:
36:94:9f:6f:26:80:ef:56:40:af:49:a2:22:2b:9d:
79:43:4d:47:98:c7:d9:19:96:6c:f8:58:77:80:41:
d4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:07:E0:4E:09:B5:43:03:66:C8:41:2F:C2:91:2A:DA:77:FB:13:8E
X509v3 Authority Key Identifier:
keyid:A6:EF:D4:E6:EF:19:DC:5B:09:4F:7D:A1:89:02:AC:35:F3:FE:2C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:00:41:ec:f3:62:0e:49:63:b7:7c:45:4f:5e:36:92:d1:df:
79:9c:a3:79:7f:68:db:8d:be:59:f5:38:09:c1:fd:34:d6:0d:
60:e0:be:29:23:2c:6b:82:d7:65:15:f3:6d:cd:bd:6f:0c:51:
de:b5:8f:d4:4e:71:6f:8f:2a:ca:44:55:46:09:a3:1c:1b:ee:
41:61:44:14:6b:04:dd:a3:a8:00:05:19:69:6c:4c:d6:77:42:
eb:d6:b7:8e:43:d4:0d:86:f6:79:8e:74:b2:be:ac:51:91:90:
24:86:ae:26:9b:93:29:ef:bd:b4:db:46:fd:14:1f:c9:79:cd:
07:c7:2a:a2:0d:64:ed:e1:65:04:2b:13:59:61:ef:0f:dc:93:
33:e4:59:70:99:20:d6:75:26:de:22:6a:4d:3e:af:43:b4:db:
e5:b0:ad:8a:07:fa:3f:33:26:3e:6c:b5:2b:23:db:28:15:6d:
5b:5f:82:b9:06:54:73:d9:0a:17:c3:ba:24:e3:b0:9c:8b:ff:
c2:e9:c5:09:e6:91:0b:77:c9:9e:91:fa:a9:e3:12:24:79:2a:
ea:07:bf:34:e9:d4:e6:02:7b:8c:86:e7:92:75:ce:62:54:1e:
a3:40:29:55:77:e9:e5:57:34:9f:0e:7f:19:91:50:dd:19:96:
d1:7c:64:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:54:09 2026 by rpki-client