Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: 721qJZ2H2H6LZzxRl48kiIHNWt2dsAZgWuH1QRb/aqQ=
Subject key identifier: 08:D8:91:E3:BA:EA:57:3A:69:08:01:08:F8:29:A9:53:13:0A:C5:80
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 01A0C445227421881CD342AA3F57D120C9E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 1A74
Signing time: Mon 21 Sep 2026 14:01:00 +0000
Manifest this update: Mon 21 Sep 2026 14:01:00 +0000
Manifest next update: Tue 22 Sep 2026 14:01:00 +0000
Files and hashes: 1: Sd9Inu8fRPZCviAypagCQcKKkmw.roa (hash: 0ZUMOh3JNBttpQEEjg9e7KJhBDQfVabAIV5ANe3h4Ng=)
2: UlsUu7gepOaa3SQKJJkuwOw5-Ow.roa (hash: hU1g21d4Xv9edIn/CDl1qXeVfqS91ol/VVK46174T28=)
3: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: u+be/OKJbT7G4IpL4c3uv8UEdiqr4nhlViokQUIPQ14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:45:22:74:21:88:1c:d3:42:aa:3f:57:d1:20:c9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Sep 21 14:01:00 2026 GMT
Not After : Sep 22 14:01:00 2026 GMT
Subject: CN=08d891e3baea573a69080108f829a953130ac580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:7e:28:55:0a:3c:98:53:1e:5b:cf:9b:a5:
52:aa:1b:71:11:01:19:d1:58:74:fd:53:12:88:ef:
27:cc:43:f7:e5:cf:d8:b1:ca:01:32:f8:55:94:4a:
94:6c:0c:b1:ac:0d:38:72:17:98:c6:65:b6:b3:e5:
35:ca:91:34:c7:98:ac:7d:92:fa:dd:4a:58:0b:d0:
9c:2d:0b:2a:16:b0:16:05:8e:7a:61:0f:a1:36:0d:
80:83:1b:ac:95:ca:77:36:20:eb:79:9c:97:00:08:
ed:15:24:cb:0f:1b:22:ff:bc:20:d5:5c:16:38:1e:
87:42:83:db:03:9d:b7:82:38:91:98:51:f5:9b:a7:
b0:20:15:ac:1c:64:08:7c:63:9f:e3:38:0d:07:ac:
ea:76:3b:19:54:00:17:cc:57:ca:1d:9d:af:ec:b8:
f2:60:ae:49:67:d8:82:fb:02:1a:a5:fd:02:86:80:
ca:b4:66:9f:56:82:ad:70:08:88:75:b5:b5:a7:4c:
e8:dd:d5:be:2e:95:79:4c:a3:ca:d0:18:f8:14:bf:
56:d3:7b:61:be:97:10:55:cf:c9:d0:86:b9:c0:50:
9f:ad:d3:3e:25:2b:2f:25:3a:a9:63:31:9e:3b:36:
d1:68:17:e7:bd:15:be:31:29:6b:6d:fc:05:08:93:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D8:91:E3:BA:EA:57:3A:69:08:01:08:F8:29:A9:53:13:0A:C5:80
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:29:fd:cb:57:a2:a3:38:69:e2:01:48:34:c1:4d:74:af:b1:
1a:59:5e:4c:25:4c:34:17:a7:3c:49:06:c9:e0:42:a7:81:aa:
93:ca:9f:2e:20:f1:d0:5d:a7:48:9c:81:04:04:05:19:d5:da:
c6:cd:62:53:fc:20:3c:5a:bb:ca:9e:23:27:5a:dc:94:9a:ed:
23:0f:ea:c9:75:e1:e3:64:eb:40:40:47:29:d8:7a:69:47:0f:
b2:84:ef:65:39:81:c1:a6:13:4c:bb:dc:08:ae:c4:6c:48:c3:
07:51:df:e9:95:c6:a2:d1:19:16:10:cb:30:c8:1b:06:44:b7:
75:4b:ab:5a:f1:ed:0e:30:03:65:a3:f5:67:49:ef:62:3c:62:
47:7e:f1:1a:8c:08:20:bd:48:50:69:93:21:8d:d4:e4:1c:6f:
56:35:4b:41:d0:85:f3:68:28:34:d5:f6:c7:fc:a2:30:c8:8b:
54:3d:04:29:ad:3c:6a:45:87:4c:2c:04:0b:02:a9:ca:cd:3e:
4d:5a:35:60:b3:53:64:78:11:97:06:84:32:09:47:b0:84:77:
79:0a:a3:e7:bf:21:b4:58:bb:30:a5:af:1f:bf:07:32:f0:42:
81:32:7f:8d:b6:1b:60:7b:7a:16:1f:56:ee:8d:0a:4a:20:27:
bd:52:72:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:50:14 2026 by rpki-client