Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
File: PUM0D60kZGXejmFNA5VjppllfY0.mft (raw, json)
Hash identifier: 0PkajYNJ/KHl/9vJO7YKRT0T6P2LekVtF/rOpbCrfmk=
Subject key identifier: 3A:3C:CE:69:C0:E0:80:DF:A6:42:41:06:49:C2:BD:65:93:64:3A:E5
Authority key identifier: 3D:43:34:0F:AD:24:64:65:DE:8E:61:4D:03:95:63:A6:99:65:7D:8D
Certificate issuer: /CN=3d43340fad246465de8e614d039563a699657d8d
Certificate serial: 01A1287A81F5DFDE5AF965D9987D4B96BCE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUM0D60kZGXejmFNA5VjppllfY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
Manifest number: 052A
Signing time: Sun 11 Oct 2026 01:01:19 +0000
Manifest this update: Sun 11 Oct 2026 01:01:19 +0000
Manifest next update: Mon 12 Oct 2026 01:01:19 +0000
Files and hashes: 1: PUM0D60kZGXejmFNA5VjppllfY0.crl (hash: jS5NLzScxJljeQYOzauiRFIpOWlkFxzOBjKVLZRCWU8=)
2: tW6tlYVnkXnq9oP8owXcbYW47kU.roa (hash: g2+Pc2wN2E52WWpsZZidSy7PbjRy5/I1OGghh4rSkGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUM0D60kZGXejmFNA5VjppllfY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:81:f5:df:de:5a:f9:65:d9:98:7d:4b:96:bc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d43340fad246465de8e614d039563a699657d8d
Validity
Not Before: Oct 11 01:01:19 2026 GMT
Not After : Oct 12 01:01:19 2026 GMT
Subject: CN=3a3cce69c0e080dfa642410649c2bd6593643ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:79:3f:9e:6b:3d:d7:d2:9e:a6:e0:ee:2c:91:
50:f9:ca:3e:24:ef:d8:f1:52:d9:27:d6:fb:8f:c6:
4a:a6:94:97:49:18:86:7f:4d:f0:81:03:23:2b:2b:
09:6b:f3:c5:af:51:cc:25:a7:62:1f:34:22:5e:a6:
18:6e:b1:d8:7b:b7:ff:ae:55:6e:90:4a:2f:71:1f:
f0:de:62:2d:9e:eb:2c:9a:41:7a:b7:7b:1c:97:53:
85:86:79:66:53:d5:68:c8:2a:66:e5:fc:dc:d1:f0:
17:30:a7:71:8b:e9:7d:76:d9:23:eb:88:56:1d:7e:
53:62:a4:f3:f7:9a:3d:48:3c:d6:df:f4:77:92:45:
16:b9:77:c4:2f:3c:71:91:a1:36:76:e3:aa:f8:bc:
17:a6:8e:17:57:46:0c:72:c4:96:e7:df:54:82:38:
dc:b7:7f:a1:bb:07:84:07:7e:12:2d:70:64:d4:d8:
99:7b:a9:52:25:5e:f7:bc:70:0f:c7:a4:f6:a9:0a:
20:b2:5c:b5:4f:82:9f:60:d0:b9:c7:23:6b:85:28:
a4:d6:ea:3c:55:47:f1:d8:a5:73:9c:b1:a2:33:da:
96:c1:61:62:fc:8c:8d:b4:b4:27:eb:1c:05:0c:05:
e2:01:27:ae:c9:82:4d:c8:35:76:02:8d:93:b2:f1:
41:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3C:CE:69:C0:E0:80:DF:A6:42:41:06:49:C2:BD:65:93:64:3A:E5
X509v3 Authority Key Identifier:
keyid:3D:43:34:0F:AD:24:64:65:DE:8E:61:4D:03:95:63:A6:99:65:7D:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUM0D60kZGXejmFNA5VjppllfY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:03:48:07:fc:b1:c1:e7:f1:d2:01:b0:c1:f3:88:e0:81:5f:
70:8a:3a:ac:d3:30:94:53:81:dc:73:da:6a:de:60:26:76:21:
52:24:de:20:47:aa:11:8b:14:ab:6b:6f:9d:88:e7:42:12:87:
a0:68:5a:1b:21:82:4a:a4:98:46:a5:8c:04:9f:57:0a:88:4e:
a3:57:58:08:bd:fc:40:9b:aa:88:03:5c:59:4a:83:4e:62:bb:
fb:3d:11:12:97:b8:81:02:9b:2e:db:72:95:34:42:7f:a4:64:
a3:0a:3e:76:e6:8c:19:b2:14:b8:8b:96:57:2a:28:5f:ee:70:
0c:fb:ae:57:07:b7:d3:73:62:9a:e8:28:4b:41:0d:b6:d9:b1:
76:04:b8:c7:eb:34:5d:2d:15:44:c5:ce:8d:d9:99:96:8d:dd:
43:37:40:88:f8:3c:ca:bd:2e:b3:59:ad:75:a9:52:af:d5:d8:
d4:cf:82:b2:75:c6:72:be:84:e0:16:15:16:87:56:5d:d2:15:
bd:9a:6d:78:04:14:ea:16:2c:c7:5a:16:e6:eb:81:c1:f6:40:
87:ec:c3:fd:d7:49:fd:99:b5:1c:2d:34:ca:d6:0c:0a:51:7e:
17:d5:de:31:ef:51:27:3a:a4:72:b4:ae:a8:7e:21:78:71:d3:
c8:02:70:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:47:57 2026 by rpki-client