Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
File: pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft (raw, json)
Hash identifier: AkF7PHtN4vGtdnEqvJ19nr0ABPUOhcQ+r2wqn3Hd2m4=
Subject key identifier: 57:FA:9E:9D:FB:36:F9:51:29:C8:62:23:29:B1:2E:47:05:92:14:7D
Authority key identifier: A6:EF:D4:E6:EF:19:DC:5B:09:4F:7D:A1:89:02:AC:35:F3:FE:2C:19
Certificate issuer: /CN=a6efd4e6ef19dc5b094f7da18902ac35f3fe2c19
Certificate serial: 019EBE480DCE5D1DBEF50D5073382F379891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
Manifest number: 43
Signing time: Sat 13 Jun 2026 00:00:53 +0000
Manifest this update: Sat 13 Jun 2026 00:00:53 +0000
Manifest next update: Sun 14 Jun 2026 00:00:53 +0000
Files and hashes: 1: fQqoytdZe3efQdtbRgKaQr_FGkA.asa (hash: oVC/eeHkYxE/OzAWRpiZywStaTtlvwubtfIZBNNN4CI=)
2: pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl (hash: 80PiDcvYhC98BKX8QOE70GIqRP2DDrTgF22CdaaXWkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:0d:ce:5d:1d:be:f5:0d:50:73:38:2f:37:98:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6efd4e6ef19dc5b094f7da18902ac35f3fe2c19
Validity
Not Before: Jun 13 00:00:53 2026 GMT
Not After : Jun 14 00:00:53 2026 GMT
Subject: CN=57fa9e9dfb36f95129c8622329b12e470592147d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3f:14:f8:cd:0a:f7:80:fc:c3:28:b2:71:e8:
93:78:a9:ef:a1:69:b9:df:bc:30:ea:72:9b:d9:27:
6b:ca:08:b0:c9:e2:15:3a:ce:d8:62:df:94:f3:b5:
01:2f:2f:9b:42:d9:a2:07:53:42:c4:47:b2:6f:93:
b1:00:00:05:b0:4b:5e:f7:fe:1f:c2:7c:ed:a4:f5:
e6:dd:55:8e:34:77:76:5f:bb:a9:eb:43:ac:5e:3d:
7a:05:cb:ab:c3:5e:25:80:70:e4:17:27:d8:04:62:
f1:86:05:79:f1:d5:b8:13:76:ca:d8:11:fb:a3:4a:
5c:ca:c8:5c:7c:a2:32:b7:75:c4:fd:f5:84:ee:ed:
1a:59:ac:07:89:bd:3b:90:c1:69:93:a1:ab:6c:a3:
6c:11:7e:a6:70:ec:4e:a6:9b:02:a3:f7:98:9f:dd:
f6:e9:85:69:77:07:94:d8:93:2e:24:6f:7a:6d:3f:
33:b4:10:65:70:85:d9:d3:cd:6c:1d:66:21:85:1f:
f8:e3:39:6b:7b:ba:d9:bb:3d:9c:2f:2a:ac:06:6b:
ac:4f:23:93:7e:d2:f1:96:d6:14:24:9c:08:e4:d3:
09:d9:a3:8c:37:e8:d4:59:a1:dd:fd:25:1b:a0:db:
eb:2a:49:d2:63:c8:3e:3b:ac:af:e8:48:ff:1c:46:
c7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FA:9E:9D:FB:36:F9:51:29:C8:62:23:29:B1:2E:47:05:92:14:7D
X509v3 Authority Key Identifier:
keyid:A6:EF:D4:E6:EF:19:DC:5B:09:4F:7D:A1:89:02:AC:35:F3:FE:2C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu_U5u8Z3FsJT32hiQKsNfP-LBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13737e-a1d6-45d1-b998-2477583b2833/1/pu_U5u8Z3FsJT32hiQKsNfP-LBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0b:92:5b:b3:97:29:d7:ba:25:37:52:67:64:a9:81:e0:ea:
b5:e5:34:50:ae:90:5d:c7:a6:06:f8:6d:78:e2:67:11:df:f4:
dd:fc:c5:da:e8:83:34:80:64:9f:9b:cd:11:4b:99:02:8a:10:
ad:53:20:6a:60:25:3c:c7:b3:9e:27:18:0c:d7:0a:4a:e1:cb:
7e:a7:4f:d3:7d:15:d6:59:cf:b3:de:2a:18:3a:c3:c4:69:23:
00:09:f8:06:9b:55:7c:04:2b:fc:39:fd:58:32:66:e3:d8:18:
38:c4:b3:30:88:87:9b:b3:5a:49:33:44:95:43:b5:f3:86:8d:
06:33:7d:11:dc:a0:8d:e4:15:95:1b:d7:09:92:a3:93:78:ca:
14:a5:69:bf:70:92:43:e6:41:00:92:62:81:1e:aa:01:35:0f:
4f:9b:5b:e5:b3:2e:d7:4a:e5:35:c3:80:24:70:66:86:b2:80:
ec:be:20:4d:f8:b9:da:f8:1d:85:22:53:bc:f9:f7:c2:e2:bb:
db:8b:60:b6:3f:da:1d:58:cb:75:a1:6d:e9:6a:ef:28:e6:43:
35:31:15:aa:e0:e0:59:90:cc:7a:47:e3:8a:7d:1b:92:dc:32:
40:6f:cc:dc:65:9d:49:7b:c5:e3:6a:d2:53:f8:a7:41:1a:69:
55:24:3e:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+SA3OXR2+9Q1QczgvN5iRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ZWZkNGU2ZWYxOWRjNWIwOTRmN2RhMTg5MDJhYzM1ZjNm
ZTJjMTkwHhcNMjYwNjEzMDAwMDUzWhcNMjYwNjE0MDAwMDUzWjAzMTEwLwYDVQQD
Eyg1N2ZhOWU5ZGZiMzZmOTUxMjljODYyMjMyOWIxMmU0NzA1OTIxNDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6z8U+M0K94D8wyiyceiTeKnvoWm5
37ww6nKb2SdrygiwyeIVOs7YYt+U87UBLy+bQtmiB1NCxEeyb5OxAAAFsEte9/4f
wnztpPXm3VWONHd2X7up60OsXj16Bcurw14lgHDkFyfYBGLxhgV58dW4E3bK2BH7
o0pcyshcfKIyt3XE/fWE7u0aWawHib07kMFpk6GrbKNsEX6mcOxOppsCo/eYn932
6YVpdweU2JMuJG96bT8ztBBlcIXZ081sHWYhhR/44zlre7rZuz2cLyqsBmusTyOT
ftLxltYUJJwI5NMJ2aOMN+jUWaHd/SUboNvrKknSY8g+O6yv6Ej/HEbH/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFf6np37NvlRKchiIymxLkcFkhR9MB8GA1UdIwQY
MBaAFKbv1ObvGdxbCU99oYkCrDXz/iwZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHVfVTV1OFozRnNKVDMyaGlRS3NOZlAtTEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8xMzczN2UtYTFkNi00NWQxLWI5OTgt
MjQ3NzU4M2IyODMzLzEvcHVfVTV1OFozRnNKVDMyaGlRS3NOZlAtTEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8xMzczN2UtYTFkNi00NWQxLWI5OTgtMjQ3NzU4M2IyODMz
LzEvcHVfVTV1OFozRnNKVDMyaGlRS3NOZlAtTEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAuSW7OX
Kde6JTdSZ2SpgeDqteU0UK6QXcemBvhteOJnEd/03fzF2uiDNIBkn5vNEUuZAooQ
rVMgamAlPMeznicYDNcKSuHLfqdP030V1lnPs94qGDrDxGkjAAn4BptVfAQr/Dn9
WDJm49gYOMSzMIiHm7NaSTNElUO184aNBjN9EdygjeQVlRvXCZKjk3jKFKVpv3CS
Q+ZBAJJigR6qATUPT5tb5bMu10rlNcOAJHBmhrKA7L4gTfi52vgdhSJTvPn3wuK7
24tgtj/aHVjLdaFt6WrvKOZDNTEVquDgWZDMekfjin0bktwyQG/M3GWdSXvF42rS
U/inQRppVSQ+oQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:54:04 2026 by rpki-client