Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
File: pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft (raw, json)
Hash identifier: 3rPsdTVzucvit0HBkUzfTPmXiP51OGalnhO2/Jq1nW0=
Subject key identifier: 61:28:9C:15:61:92:89:04:17:6B:CD:4D:D8:50:48:76:9F:13:F6:E7
Authority key identifier: A6:EF:D4:E6:EF:19:DC:5B:09:4F:7D:A1:89:02:AC:35:F3:FE:2C:19
Certificate issuer: /CN=a6efd4e6ef19dc5b094f7da18902ac35f3fe2c19
Certificate serial: 019FA82C14A5570C1B6550BEB1D78F0EF3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
Manifest number: BD
Signing time: Tue 28 Jul 2026 10:01:28 +0000
Manifest this update: Tue 28 Jul 2026 10:01:28 +0000
Manifest next update: Wed 29 Jul 2026 10:01:28 +0000
Files and hashes: 1: kHouM2VLdzKRZTCra3l9Z36Mmyk.asa (hash: sV07n58Gs6Mq12Maj9pNWDdpH7lTopJq8te/ptrRpDw=)
2: pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl (hash: ZDXSpX9ecdrOUP0HIsMBMFl0l8RoXW8gNSsN0W+jWX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2c:14:a5:57:0c:1b:65:50:be:b1:d7:8f:0e:f3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6efd4e6ef19dc5b094f7da18902ac35f3fe2c19
Validity
Not Before: Jul 28 10:01:28 2026 GMT
Not After : Jul 29 10:01:28 2026 GMT
Subject: CN=61289c1561928904176bcd4dd85048769f13f6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5f:e8:78:63:b6:9b:cb:dc:4e:68:93:5d:6f:
cb:59:84:6e:cc:31:d1:e3:52:36:69:b3:72:b8:00:
01:6c:1a:1c:5b:2e:ed:7f:b9:bb:e7:06:33:e9:ad:
5c:44:56:51:05:48:39:08:2c:e6:52:10:84:56:6f:
da:cb:5c:38:cc:63:92:92:da:d3:38:40:70:19:63:
27:8a:90:1c:79:ed:2f:ac:9e:e8:3a:ad:d2:26:c1:
dc:6a:39:5d:8e:c9:7c:8c:29:01:52:19:f1:f4:ff:
34:2c:6a:a0:c1:27:ae:a1:8b:d7:f7:c3:9b:03:f4:
42:fd:a5:a5:66:a1:cc:d7:11:31:e9:50:b9:18:6b:
38:af:c8:be:b4:7c:a3:eb:39:4a:45:b4:d0:5b:a3:
c9:1c:a2:7e:86:a6:ec:77:d3:a8:43:84:78:36:d4:
5d:67:4b:22:ba:f5:e6:f8:df:39:24:55:c9:e8:9b:
ac:d7:61:13:df:6d:a2:32:b4:ed:9d:7e:27:4b:70:
cb:4c:64:51:9c:26:a1:8b:49:4d:35:d3:ee:ea:af:
e1:0a:13:4b:aa:71:46:05:b8:e3:97:cf:2c:c4:c3:
51:1b:d7:0a:df:7f:8d:24:32:44:97:53:7e:54:50:
ca:b4:59:5d:51:9b:cc:f2:49:6b:28:af:12:da:55:
e9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:28:9C:15:61:92:89:04:17:6B:CD:4D:D8:50:48:76:9F:13:F6:E7
X509v3 Authority Key Identifier:
keyid:A6:EF:D4:E6:EF:19:DC:5B:09:4F:7D:A1:89:02:AC:35:F3:FE:2C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a9:aa:85:ee:c8:59:41:82:60:15:59:cb:73:2c:3d:84:9d:
96:20:86:e4:de:bf:85:50:37:6e:66:e5:34:ef:e0:e8:b8:78:
8d:c0:92:ad:7c:1a:b1:4c:9c:73:61:71:0b:0b:f5:61:4a:3d:
7e:f6:5b:6c:78:1b:f0:f0:97:21:14:65:26:f3:82:fc:c8:26:
37:a2:6f:33:36:54:71:5e:e3:24:f2:26:c2:69:05:c3:0a:5f:
dc:02:58:72:e4:24:77:12:91:fe:2b:14:8d:c2:17:e6:63:05:
5e:03:28:16:e5:78:eb:9e:d3:ef:a0:e8:9d:bc:62:34:2a:50:
51:7f:22:74:67:8d:5e:24:70:c2:c1:44:79:f8:f5:51:0a:eb:
d8:db:77:87:ed:d2:90:f6:7f:00:cf:f4:98:48:e0:24:cf:4f:
51:cc:cc:68:6c:8f:fb:c3:db:74:b1:32:5c:e6:67:36:c0:be:
36:55:c5:74:ff:60:79:4c:17:b4:13:0e:4c:55:71:15:c1:14:
68:bc:b2:32:88:55:f9:ed:93:70:fc:2a:78:83:3f:26:c6:93:
4f:6f:5f:81:ed:6d:a5:27:fc:f1:54:45:b7:e9:8d:4a:ea:d1:
fb:50:2e:52:46:ec:e6:0a:01:e1:ba:ff:b1:19:02:57:51:a3:
04:2f:4f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:48:49 2026 by rpki-client