Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: cDjhECYIJaX1jihj1QJ8+fTmyyrFtUGELi+XOAdrX0U=
Subject key identifier: 01:F8:F4:6C:55:45:89:38:CA:5A:CE:46:8B:D1:34:7E:06:54:C4:8C
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 019FA9ABA62EA30BB7C00CB5D43F04468873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 19DC
Signing time: Tue 28 Jul 2026 17:00:26 +0000
Manifest this update: Tue 28 Jul 2026 17:00:26 +0000
Manifest next update: Wed 29 Jul 2026 17:00:26 +0000
Files and hashes: 1: VQZz-okygci0q4bPk4NrG70FL80.roa (hash: zB51qkJyOipwoBy4eTPTCUbwd332werRHx90DRFh23E=)
2: mQL1nW7K7ybu0TZ9G8v3WzDDFmg.roa (hash: O084txLhwyZ8zQFJ9DRJsh8HYo5IGT97mu78wCO555Y=)
3: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: njQ9AntlHpJ/8kkhNFqV9EO+WigOT8sIdRzUiUQi/f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:a6:2e:a3:0b:b7:c0:0c:b5:d4:3f:04:46:88:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Jul 28 17:00:26 2026 GMT
Not After : Jul 29 17:00:26 2026 GMT
Subject: CN=01f8f46c55458938ca5ace468bd1347e0654c48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:70:4d:7b:8f:18:73:84:69:28:7c:36:6d:2e:
1f:f0:ed:bd:ff:4a:6f:4d:c7:36:e5:e6:d9:69:4e:
56:2e:93:18:d3:78:af:68:fc:2f:c1:f2:91:79:26:
d9:39:3f:35:5f:7a:d7:03:af:51:10:63:1c:12:7e:
7f:07:01:04:5a:8a:71:e0:e3:52:f2:b1:ae:85:21:
2d:b1:c8:0a:c0:51:d6:a7:cf:1b:4d:e3:23:d5:44:
bc:5d:7a:1f:24:ad:93:7c:27:f9:f1:29:aa:94:cc:
69:9f:71:10:84:3a:7c:18:58:f9:2e:f0:eb:82:0d:
1f:11:70:5e:81:8b:55:d3:1c:fe:46:22:04:41:9d:
38:5b:c9:e6:ee:43:95:0d:81:eb:9e:e2:ec:db:ed:
30:36:5e:e3:4d:c8:e1:2a:66:61:22:08:81:89:d0:
26:c0:01:e8:36:8c:a5:ae:32:9a:18:47:34:00:b1:
32:64:80:17:30:46:44:d9:b8:7f:6b:5d:2a:80:21:
44:20:21:5b:e7:8d:39:24:04:77:a3:be:f3:04:e5:
ad:41:18:60:3b:13:8a:1c:c3:67:11:e1:f4:34:10:
59:27:f8:4a:71:36:e6:ff:61:cf:a4:06:85:8d:ba:
df:3e:3d:b2:5d:0f:2f:09:6d:81:29:d7:d9:b8:99:
ec:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F8:F4:6C:55:45:89:38:CA:5A:CE:46:8B:D1:34:7E:06:54:C4:8C
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:72:f8:53:30:d0:ca:32:b9:7d:52:a6:44:2a:c9:d1:d3:ec:
dd:df:dc:4f:f8:ed:e4:58:81:d6:ea:3c:68:7c:49:53:cc:33:
f5:af:87:f1:8c:07:96:c9:48:8c:1d:66:5d:95:6c:07:33:e9:
d7:18:db:08:55:4b:36:07:7e:2a:a8:47:0c:c6:26:14:06:f0:
8a:e3:49:63:9a:90:cc:3d:19:b9:df:95:89:69:25:30:52:51:
31:59:eb:6d:34:9f:38:d1:6e:b4:8a:50:86:59:d0:58:ea:10:
fc:2c:e9:c8:d8:1a:95:93:59:5c:33:b6:7b:2a:f2:56:1e:62:
ac:99:33:aa:5f:3a:0a:38:9b:39:cc:26:5b:7e:c8:8f:04:56:
91:e6:99:26:4b:c2:6d:8f:2f:d9:25:36:41:b0:be:a2:5c:81:
2f:66:60:db:58:46:87:34:74:c2:c6:b3:5d:d9:0a:6e:ff:8b:
ef:e2:e4:ce:ce:44:4d:8c:ad:25:5c:38:67:e0:b3:99:b7:24:
b0:77:53:d3:e5:10:b7:34:19:96:78:a6:65:c0:fd:26:5a:4c:
e0:67:20:d0:6c:8d:1a:d1:9c:fe:75:83:67:d0:2c:bf:d5:35:
e5:5f:e7:f2:4b:d8:b8:d6:98:16:e0:bb:ef:29:5c:95:c9:7f:
18:9b:8a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:11:05 2026 by rpki-client