Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
File: PUM0D60kZGXejmFNA5VjppllfY0.mft (raw, json)
Hash identifier: Na/ILSM1eyoYe0/xAuCJDzmpXkmWMcQ7em/p7EeKEs0=
Subject key identifier: AA:62:3E:BB:3B:33:8E:EB:5E:00:33:1E:BC:47:85:62:21:34:86:82
Authority key identifier: 3D:43:34:0F:AD:24:64:65:DE:8E:61:4D:03:95:63:A6:99:65:7D:8D
Certificate issuer: /CN=3d43340fad246465de8e614d039563a699657d8d
Certificate serial: 019FA82BF623F1470057C3194D682FC79819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUM0D60kZGXejmFNA5VjppllfY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
Manifest number: 0463
Signing time: Tue 28 Jul 2026 10:01:21 +0000
Manifest this update: Tue 28 Jul 2026 10:01:21 +0000
Manifest next update: Wed 29 Jul 2026 10:01:21 +0000
Files and hashes: 1: PUM0D60kZGXejmFNA5VjppllfY0.crl (hash: sBeO0ecu+G8/OxrxWmRs9u3v4ihK/C7veISagUGlWpQ=)
2: tW6tlYVnkXnq9oP8owXcbYW47kU.roa (hash: g2+Pc2wN2E52WWpsZZidSy7PbjRy5/I1OGghh4rSkGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUM0D60kZGXejmFNA5VjppllfY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:f6:23:f1:47:00:57:c3:19:4d:68:2f:c7:98:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d43340fad246465de8e614d039563a699657d8d
Validity
Not Before: Jul 28 10:01:21 2026 GMT
Not After : Jul 29 10:01:21 2026 GMT
Subject: CN=aa623ebb3b338eeb5e00331ebc47856221348682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:54:23:ae:b5:78:d6:a6:75:99:68:fd:8d:
3f:d9:f9:ea:c6:2d:e1:63:5d:88:da:d1:8f:be:5d:
73:6b:55:11:ff:35:2f:7c:74:48:89:9b:5a:e6:74:
3f:40:a6:4b:f5:22:a4:25:fd:51:08:fe:16:c8:4c:
7e:e0:12:ba:48:ff:8d:06:8c:ea:89:b5:c6:81:71:
cf:9d:d1:16:cc:31:a4:0a:d6:03:70:0d:3a:f0:d9:
1c:b4:86:9c:53:48:72:bd:44:44:ef:eb:6e:55:71:
ca:cf:1a:69:d5:cb:ce:82:ab:72:a1:ed:75:b0:af:
25:27:c2:26:e6:06:ac:26:f4:7f:bf:98:40:b8:dc:
84:39:95:8d:73:8b:f4:91:9b:d6:b0:f4:67:f0:99:
fd:32:61:e9:58:81:53:4d:07:8f:4f:96:ab:72:e9:
e5:b1:97:77:e1:d3:8f:95:26:83:98:c7:19:15:26:
b9:81:9f:c8:93:53:5f:6b:6b:50:89:8c:92:b7:ca:
02:15:08:c3:1e:fe:6d:06:1f:17:a4:09:23:62:f6:
59:65:45:81:57:bd:a7:42:b5:bb:7b:5d:8f:be:4b:
2b:15:bc:6a:9d:f3:4a:be:44:78:9c:db:94:39:51:
df:82:ab:e1:02:6f:7c:0d:3b:26:0d:19:1e:9d:58:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:62:3E:BB:3B:33:8E:EB:5E:00:33:1E:BC:47:85:62:21:34:86:82
X509v3 Authority Key Identifier:
keyid:3D:43:34:0F:AD:24:64:65:DE:8E:61:4D:03:95:63:A6:99:65:7D:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUM0D60kZGXejmFNA5VjppllfY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cb:9b:8c:0c:26:cc:ee:86:5c:a0:91:c3:ef:56:03:42:f8:
19:53:fd:d1:2b:52:0b:cf:60:6f:64:6f:2d:22:9f:76:90:f7:
8a:ef:b1:38:e8:db:7e:49:7c:6c:aa:85:82:6c:98:e2:44:96:
0b:e2:25:15:51:94:07:1d:5c:32:c5:ff:86:18:6f:3f:b9:4f:
42:35:27:05:fb:a3:24:26:9b:38:db:e6:b5:4d:bf:1f:1d:79:
a3:97:43:9c:77:aa:b4:e8:87:bc:34:fc:09:21:04:a5:47:c2:
3b:cd:2e:7c:6b:2e:a4:c2:0c:2e:40:df:08:fc:10:33:f1:11:
86:af:96:43:5c:6e:18:05:58:70:dc:f1:ce:2f:28:8f:e9:33:
d5:6a:1a:10:15:c6:f6:6e:53:e9:1c:a8:74:3c:9d:75:1f:8d:
22:6a:94:26:f3:b7:d3:7a:09:9a:31:7e:18:50:f2:ba:0f:1a:
ff:3e:a0:75:67:3f:73:54:c2:bf:45:e2:ac:f8:0c:f1:4c:ee:
3e:7f:54:51:11:1b:73:41:a5:70:9a:08:3f:cb:c9:79:09:d7:
9c:86:1a:f2:bd:10:e3:ea:06:6f:b9:ef:85:77:16:22:09:bc:
53:1d:7c:28:ff:12:7e:a5:0f:d7:2f:40:78:09:0d:c8:f4:9f:
e1:a8:3c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:04:23 2026 by rpki-client