Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: 4eeY9WAaQkW1PtBSO16SZXcw0b1Qoe962/ym5RwjQws=
Subject key identifier: C6:B4:98:DA:86:FC:8C:B8:46:B4:FF:F3:16:E2:50:45:01:76:2D:0A
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 019FAB9A0AC3D6E66E1D820793994448A078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 19DD
Signing time: Wed 29 Jul 2026 02:00:26 +0000
Manifest this update: Wed 29 Jul 2026 02:00:26 +0000
Manifest next update: Thu 30 Jul 2026 02:00:26 +0000
Files and hashes: 1: VQZz-okygci0q4bPk4NrG70FL80.roa (hash: zB51qkJyOipwoBy4eTPTCUbwd332werRHx90DRFh23E=)
2: mQL1nW7K7ybu0TZ9G8v3WzDDFmg.roa (hash: O084txLhwyZ8zQFJ9DRJsh8HYo5IGT97mu78wCO555Y=)
3: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: gjUDxovqeLZHU18TcEVH6sva+92fEY3g4XGW51BDj8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:0a:c3:d6:e6:6e:1d:82:07:93:99:44:48:a0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Jul 29 02:00:26 2026 GMT
Not After : Jul 30 02:00:26 2026 GMT
Subject: CN=c6b498da86fc8cb846b4fff316e2504501762d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:53:a6:7b:d2:56:bc:cb:e9:7d:02:af:b5:
ae:ba:61:ad:3a:a9:61:61:e3:5d:b0:31:cb:db:5a:
c2:22:80:c1:f5:1d:7a:b4:45:94:82:e0:c6:ff:fb:
b2:76:b9:51:3d:b4:e7:a9:f9:2b:50:f1:32:d2:31:
81:c1:3c:1b:8a:99:cc:92:20:c5:ef:92:69:07:65:
89:2f:16:4a:c1:57:4b:34:4b:5e:70:a7:51:a4:98:
10:e8:ef:46:71:61:6f:e5:43:1e:4e:e2:86:de:fd:
10:db:b4:5d:48:a2:f7:ac:50:82:96:9a:d3:52:4c:
a0:87:92:ee:2f:ad:68:0b:fb:8b:d9:21:2b:d8:56:
10:bc:cc:2b:8f:9c:1a:44:b7:c0:c6:3e:1c:b0:b2:
cb:92:fa:52:3f:fe:bc:bf:f4:cd:4d:ce:7d:f6:53:
55:e3:8b:8a:cf:6c:f3:f4:96:ff:e9:17:b8:b7:8e:
34:a4:11:cb:59:03:57:c8:77:05:2f:c2:27:cd:87:
bf:2c:1b:44:82:65:7c:4a:5d:5a:7f:f9:07:1b:ca:
42:45:b6:87:82:34:e4:60:51:d8:46:21:76:34:2e:
8d:f9:ab:40:b0:a3:66:a7:7f:0d:4d:6d:f7:c1:d8:
db:bd:17:21:24:46:dc:65:05:5d:c5:87:3f:12:e4:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B4:98:DA:86:FC:8C:B8:46:B4:FF:F3:16:E2:50:45:01:76:2D:0A
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b3:c1:aa:14:e1:92:69:b5:d1:b5:cf:33:89:ab:9e:9e:93:
67:d1:94:15:89:7c:98:c9:a4:c1:c3:4c:24:66:9c:9a:15:f4:
29:31:71:91:d6:6e:0a:20:2a:61:7c:43:ac:bd:bd:62:96:3c:
fc:18:eb:e4:5f:73:b6:25:f0:f1:9e:ce:6d:dc:da:0b:58:f4:
49:2a:ca:d1:97:5b:76:da:19:c6:7c:d9:e4:2c:4e:b3:77:61:
6a:d7:3b:a2:87:0a:31:b4:ff:75:56:29:68:fb:70:ca:7d:10:
6f:01:af:5e:fa:00:26:10:38:6c:e3:ab:7e:39:c6:5b:35:9f:
3d:eb:71:7e:52:88:1c:e9:a6:a6:4d:f5:c4:1c:47:3f:cf:8a:
19:ea:54:b6:0a:48:e3:fd:c9:87:f0:05:57:55:55:94:d7:21:
93:09:4c:2d:87:fd:44:83:4a:b6:e5:6d:ee:7b:3b:91:23:15:
4f:38:15:fa:24:d8:eb:23:73:bd:1b:d1:9b:c1:4f:8e:d0:33:
4f:b8:a7:5f:9a:0f:48:01:ff:b2:a9:d7:09:ed:b5:00:37:9d:
1b:6a:fa:75:f7:55:f1:7f:eb:de:1b:52:57:30:cb:6a:df:e4:
80:bf:56:68:e6:db:1c:be:26:3c:d5:8f:9c:b5:0e:8e:7f:3f:
52:76:7d:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmgrD1uZuHYIHk5lESKB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ZWQ0NDJiOTFkNGU4M2E2ZGUzOWZiNjc5NzFhMWU3OWM2
YjFlZDUwHhcNMjYwNzI5MDIwMDI2WhcNMjYwNzMwMDIwMDI2WjAzMTEwLwYDVQQD
EyhjNmI0OThkYTg2ZmM4Y2I4NDZiNGZmZjMxNmUyNTA0NTAxNzYyZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfdTpnvSVrzL6X0Cr7WuumGtOqlh
YeNdsDHL21rCIoDB9R16tEWUguDG//uydrlRPbTnqfkrUPEy0jGBwTwbipnMkiDF
75JpB2WJLxZKwVdLNEtecKdRpJgQ6O9GcWFv5UMeTuKG3v0Q27RdSKL3rFCClprT
Ukygh5LuL61oC/uL2SEr2FYQvMwrj5waRLfAxj4csLLLkvpSP/68v/TNTc599lNV
44uKz2zz9Jb/6Re4t440pBHLWQNXyHcFL8InzYe/LBtEgmV8Sl1af/kHG8pCRbaH
gjTkYFHYRiF2NC6N+atAsKNmp38NTW33wdjbvRchJEbcZQVdxYc/EuS5owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMa0mNqG/Iy4RrT/8xbiUEUBdi0KMB8GA1UdIwQY
MBaAFKbtRCuR1Og6beOftnlxoeecax7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81NTNkYzYtMTJkMC00ZDRhLWEyOTQt
OTdjNWQ1OWIwYmJmLzEvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS81NTNkYzYtMTJkMC00ZDRhLWEyOTQtOTdjNWQ1OWIwYmJm
LzEvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLPBqhTh
kmm10bXPM4mrnp6TZ9GUFYl8mMmkwcNMJGacmhX0KTFxkdZuCiAqYXxDrL29YpY8
/Bjr5F9ztiXw8Z7ObdzaC1j0SSrK0ZdbdtoZxnzZ5CxOs3dhatc7oocKMbT/dVYp
aPtwyn0QbwGvXvoAJhA4bOOrfjnGWzWfPetxflKIHOmmpk31xBxHP8+KGepUtgpI
4/3Jh/AFV1VVlNchkwlMLYf9RINKtuVt7ns7kSMVTzgV+iTY6yNzvRvRm8FPjtAz
T7inX5oPSAH/sqnXCe21ADedG2r6dfdV8X/r3htSVzDLat/kgL9WaObbHL4mPNWP
nLUOjn8/UnZ9tw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:09:57 2026 by rpki-client