Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: 4peLCQYftUhtIKHNgkNib6aH7rehQxXfL0F/fmcc3DQ=
Subject key identifier: 37:63:B6:23:99:88:E2:69:0D:A6:42:2D:9F:A6:6E:B9:F6:0C:E5:37
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 019CAA2131BF01430D7F80D157D93B04D0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 16:00:28 +0000
Manifest this update: Sun 01 Mar 2026 16:00:28 +0000
Manifest next update: Mon 02 Mar 2026 16:00:28 +0000
Files and hashes: 1: mQL1nW7K7ybu0TZ9G8v3WzDDFmg.roa (hash: O084txLhwyZ8zQFJ9DRJsh8HYo5IGT97mu78wCO555Y=)
2: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: KjSxoMWrlOb2pDVmjGsrg/SS1PWkxdSBz5f+c1WIdBE=)
3: xkglo0MgpXeki5u8G7Zx40WueBw.roa (hash: P+lJK2YdwGnO2Q6H6+1l2oB4XSkWxXFQgilewZp5utI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:31:bf:01:43:0d:7f:80:d1:57:d9:3b:04:d0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Mar 1 16:00:28 2026 GMT
Not After : Mar 2 16:00:28 2026 GMT
Subject: CN=3763b6239988e2690da6422d9fa66eb9f60ce537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:4f:08:78:26:2d:d3:a2:72:88:9f:f8:8c:
5e:c4:e5:be:33:be:09:a4:16:d9:b9:88:98:bf:d9:
4f:06:b5:59:f6:d6:7b:90:78:fb:ac:66:fe:57:e0:
71:4c:9a:42:87:1b:8c:e0:12:9b:09:c6:1a:71:60:
a7:7c:75:72:7b:e0:c7:60:23:12:64:b1:c6:66:d8:
73:b4:06:b8:e1:bc:63:b4:38:11:d4:5a:09:c1:14:
ee:78:e7:3e:06:4b:66:d4:2b:1a:cc:de:21:2f:af:
f0:c3:2c:9a:9a:a0:4f:71:56:ca:94:96:b0:b0:de:
5d:b3:41:82:47:9c:37:26:d6:91:64:6d:a6:60:27:
82:82:ee:e0:3b:2f:84:38:c8:d0:2c:39:f9:9f:7e:
0d:eb:38:99:23:c6:bf:a8:b2:4e:b7:9b:c6:e2:bd:
a4:99:7e:c9:9f:c8:d7:e6:a7:38:df:ec:59:e9:5d:
59:2f:85:f7:74:34:c0:63:63:14:a4:12:02:08:7a:
34:80:6b:da:5c:29:7d:ff:a1:cd:3b:08:2f:38:85:
0b:8d:6c:ac:a5:ae:9c:ed:a3:c8:39:45:84:cb:c0:
96:0c:3e:d4:85:45:8c:fc:ce:0a:62:26:67:92:50:
80:07:32:a8:a1:79:21:c3:f2:38:71:bb:bf:bb:e1:
ba:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:63:B6:23:99:88:E2:69:0D:A6:42:2D:9F:A6:6E:B9:F6:0C:E5:37
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:af:98:32:32:60:e9:15:59:cf:5c:3b:7f:cf:42:6f:a0:87:
4d:d5:df:7b:ad:f5:e9:45:e2:8f:31:5b:e1:0f:44:bf:af:54:
56:84:e4:43:b7:bc:ba:b7:90:37:0c:87:f9:94:43:a7:60:3b:
df:6b:2c:4c:77:de:91:d3:c2:7f:89:06:fd:37:d1:33:fc:39:
6b:23:e0:64:18:47:8d:15:22:d5:8b:ad:42:e3:e3:e1:65:a6:
95:67:01:0f:0c:ed:1a:1f:e8:cb:13:a0:2e:32:0f:58:70:2f:
4c:cc:27:02:7f:14:48:cc:d9:ea:4c:f1:35:cc:83:d1:e4:05:
f6:97:b7:0a:ad:a6:19:e1:e1:ee:c3:2e:0c:af:1f:9f:a2:0b:
ab:c2:dc:73:9d:ad:c9:6c:c3:4f:b6:2e:bf:d6:a4:3e:48:4e:
6d:0e:25:60:d3:63:ee:0f:26:53:44:97:e2:af:32:8e:93:d1:
8e:d1:1f:dd:fe:cb:71:05:5e:a7:84:b5:7e:61:73:52:6d:ce:
92:62:40:5c:b0:e1:32:83:01:ed:7e:3f:ea:3c:91:50:ee:35:
dc:91:c4:0b:5d:b4:ab:dc:53:10:06:a5:a2:ce:2b:fa:30:f3:
25:36:8f:be:e7:12:13:7b:b6:98:f5:8b:a1:bb:cc:5c:03:52:
8c:4f:53:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:43 2026 by rpki-client