Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: a3owHhh0WV2Kgl7lqB3C522hUHMxYFGyH+9oJQOVfys=
Subject key identifier: B1:66:26:C3:88:AE:8F:CE:96:33:99:BA:86:9F:BE:95:EE:C5:40:20
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 019EC1120639F3CD1A89B7DAEB7E38DA149A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 1960
Signing time: Sat 13 Jun 2026 13:00:44 +0000
Manifest this update: Sat 13 Jun 2026 13:00:44 +0000
Manifest next update: Sun 14 Jun 2026 13:00:44 +0000
Files and hashes: 1: mQL1nW7K7ybu0TZ9G8v3WzDDFmg.roa (hash: O084txLhwyZ8zQFJ9DRJsh8HYo5IGT97mu78wCO555Y=)
2: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: 2/nqtQA7wRHIxOiGLMtiv/tj7kt+wgWspx3aApqWQr0=)
3: xkglo0MgpXeki5u8G7Zx40WueBw.roa (hash: P+lJK2YdwGnO2Q6H6+1l2oB4XSkWxXFQgilewZp5utI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:06:39:f3:cd:1a:89:b7:da:eb:7e:38:da:14:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Jun 13 13:00:44 2026 GMT
Not After : Jun 14 13:00:44 2026 GMT
Subject: CN=b16626c388ae8fce963399ba869fbe95eec54020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e9:55:ed:13:37:41:a8:cf:1f:8a:5e:1b:8c:
92:b7:ca:29:36:09:81:a4:a9:fe:26:2b:32:98:00:
0c:64:b8:45:1a:bb:f6:9a:6a:73:b2:71:ef:10:65:
b1:9e:4c:77:f5:d6:97:5e:d0:6d:17:83:4c:7e:11:
ce:a5:0a:84:30:57:c7:05:70:c4:dd:0c:74:fb:c8:
9b:88:82:03:29:a4:9f:c9:9f:0c:2a:26:97:ee:75:
46:2b:14:0b:ff:02:86:b3:de:22:5d:59:a3:24:f0:
c1:fe:4b:68:8e:43:78:02:46:e6:6f:3d:77:ae:ef:
21:f4:72:30:6b:d3:c3:7c:f4:ca:26:26:b6:90:7e:
bf:ed:b5:a9:2a:53:8c:c8:65:52:1c:f6:99:f9:63:
bc:c4:9d:50:ff:b1:32:39:a9:c2:fd:20:04:f7:c4:
43:5f:2e:5e:9d:46:9f:a6:fb:57:8d:bf:8b:59:13:
87:eb:2d:45:93:f3:d3:6d:56:07:96:6b:c7:b4:c3:
4d:b5:37:6a:41:ad:1c:d7:a8:57:5e:cf:7f:09:22:
e2:b5:cc:ff:cc:38:69:49:17:c0:25:6f:b0:6e:2b:
65:24:0b:31:39:e3:35:16:95:c9:c8:e4:98:d9:2c:
a7:a2:19:5c:38:03:6b:87:ba:f7:1f:19:b8:10:81:
b5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:66:26:C3:88:AE:8F:CE:96:33:99:BA:86:9F:BE:95:EE:C5:40:20
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:0e:81:5c:9f:d4:a0:cf:90:35:4a:f5:f9:2d:81:4b:11:f9:
2f:89:6a:5f:f9:e4:d5:f3:a4:50:59:c9:e4:16:20:bd:16:1e:
28:3b:98:d0:88:84:73:48:e3:24:b5:fc:5a:5f:17:64:0a:34:
47:e5:7b:78:d7:8d:d1:c1:ed:a4:ad:0b:9e:64:72:fa:b5:8b:
65:d1:f0:d3:27:e7:1a:07:19:b6:c6:44:96:4d:83:f7:82:b5:
59:04:8b:8b:da:84:73:89:74:a9:73:76:2e:21:e5:66:af:8c:
8f:19:b9:6c:da:49:93:cf:d6:dd:39:6e:f7:90:01:a7:7a:cd:
34:3a:19:76:f5:2c:44:af:92:66:3e:e2:b7:37:34:6c:13:38:
a8:45:af:da:0e:dd:42:40:de:cb:a4:71:84:6e:74:89:d9:25:
65:26:9c:58:5f:06:71:78:07:64:71:69:a7:f6:70:8e:2b:f4:
c3:89:1a:c5:82:48:22:2a:be:58:36:f0:b7:52:16:b6:57:72:
e6:5d:23:19:a1:87:49:55:e7:5e:f6:a2:b5:d8:ef:65:ae:22:
ae:5c:b3:be:8b:2f:78:9d:9a:e1:de:56:85:31:91:69:aa:2a:
37:a1:09:a2:9a:e7:0e:60:31:dc:1f:b4:34:c0:d1:98:74:24:
3a:1a:91:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEgY5880aibfa63442hSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ZWQ0NDJiOTFkNGU4M2E2ZGUzOWZiNjc5NzFhMWU3OWM2
YjFlZDUwHhcNMjYwNjEzMTMwMDQ0WhcNMjYwNjE0MTMwMDQ0WjAzMTEwLwYDVQQD
EyhiMTY2MjZjMzg4YWU4ZmNlOTYzMzk5YmE4NjlmYmU5NWVlYzU0MDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOlV7RM3QajPH4peG4ySt8opNgmB
pKn+JisymAAMZLhFGrv2mmpzsnHvEGWxnkx39daXXtBtF4NMfhHOpQqEMFfHBXDE
3Qx0+8ibiIIDKaSfyZ8MKiaX7nVGKxQL/wKGs94iXVmjJPDB/ktojkN4Akbmbz13
ru8h9HIwa9PDfPTKJia2kH6/7bWpKlOMyGVSHPaZ+WO8xJ1Q/7EyOanC/SAE98RD
Xy5enUafpvtXjb+LWROH6y1Fk/PTbVYHlmvHtMNNtTdqQa0c16hXXs9/CSLitcz/
zDhpSRfAJW+wbitlJAsxOeM1FpXJyOSY2SynohlcOANrh7r3Hxm4EIG1HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFmJsOIro/OljOZuoafvpXuxUAgMB8GA1UdIwQY
MBaAFKbtRCuR1Og6beOftnlxoeecax7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81NTNkYzYtMTJkMC00ZDRhLWEyOTQt
OTdjNWQ1OWIwYmJmLzEvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS81NTNkYzYtMTJkMC00ZDRhLWEyOTQtOTdjNWQ1OWIwYmJm
LzEvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsg6BXJ/U
oM+QNUr1+S2BSxH5L4lqX/nk1fOkUFnJ5BYgvRYeKDuY0IiEc0jjJLX8Wl8XZAo0
R+V7eNeN0cHtpK0LnmRy+rWLZdHw0yfnGgcZtsZElk2D94K1WQSLi9qEc4l0qXN2
LiHlZq+Mjxm5bNpJk8/W3Tlu95ABp3rNNDoZdvUsRK+SZj7itzc0bBM4qEWv2g7d
QkDey6RxhG50idklZSacWF8GcXgHZHFpp/Zwjiv0w4kaxYJIIiq+WDbwt1IWtldy
5l0jGaGHSVXnXvaitdjvZa4irlyzvosveJ2a4d5WhTGRaaoqN6EJoprnDmAx3B+0
NMDRmHQkOhqRqw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:43:11 2026 by rpki-client