Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
File: puiiWpN5KlizotgPsarZWeZa7d8.mft (raw, json)
Hash identifier: GpDaM+uQ2h/LscU4/6FdVTqVKdJPI6+S7/6BZNTGfpU=
Subject key identifier: 79:C4:ED:6B:CD:44:2D:CB:F7:76:64:EE:12:54:66:8F:C5:AD:8C:FD
Authority key identifier: A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
Certificate issuer: /CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Certificate serial: 019CAA8FB1F74C8D3F03531EC2D03A55C641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
Manifest number: 17A0
Signing time: Sun 01 Mar 2026 18:01:09 +0000
Manifest this update: Sun 01 Mar 2026 18:01:09 +0000
Manifest next update: Mon 02 Mar 2026 18:01:09 +0000
Files and hashes: 1: g9eUHufAbqCnyoz7MWSGoEXgVqk.roa (hash: h3ZbwcX8TFezVBJLOgnMiqp7D8R/Las6MgO0OvsuqC0=)
2: puiiWpN5KlizotgPsarZWeZa7d8.crl (hash: VWjJilBZnRZosK5/7Eh8HrNr5jzkNKfQ4xeLjwFpg9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:b1:f7:4c:8d:3f:03:53:1e:c2:d0:3a:55:c6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Validity
Not Before: Mar 1 18:01:09 2026 GMT
Not After : Mar 2 18:01:09 2026 GMT
Subject: CN=79c4ed6bcd442dcbf77664ee1254668fc5ad8cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:50:54:04:2e:8a:d0:b4:3a:9e:da:cb:3f:6e:
3b:7d:dd:fa:ce:1d:1f:9b:37:ca:94:b3:e0:b0:03:
bb:e4:90:22:f2:0b:0d:0e:8d:eb:d5:9b:d6:74:14:
70:55:72:70:c7:e5:6c:f6:ec:7b:0f:f3:68:ae:7f:
cd:ba:5a:f1:08:83:06:52:5b:5d:26:27:5d:1d:79:
00:78:c4:59:6e:dd:f3:fd:3e:4f:54:96:3c:d4:21:
63:86:d8:ed:01:fb:10:9b:dc:a4:18:14:e3:de:3a:
7a:00:64:6e:53:8d:0e:a2:f3:c6:ba:8d:bf:d8:67:
20:66:c5:76:c1:b1:43:93:54:7f:39:5f:91:4e:59:
56:d8:be:b1:43:14:51:2d:fc:47:30:12:56:7c:ce:
77:ba:44:a8:88:7f:b5:ab:bc:9c:4d:8a:ca:cb:2d:
d7:72:ca:c1:99:17:87:2e:61:d3:2c:73:88:27:3f:
ef:06:35:6b:3c:c5:f9:0b:b2:bb:89:9b:79:14:3c:
85:e8:f6:64:a2:65:1e:5b:14:3f:50:a8:90:06:23:
4a:c0:5d:64:27:a1:79:a2:65:39:c8:ba:03:c0:27:
4a:f5:66:47:47:41:d0:ab:17:cb:a8:c5:55:a4:c8:
4e:04:e4:e6:f6:30:50:1d:01:5b:fd:6b:60:17:f5:
7d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C4:ED:6B:CD:44:2D:CB:F7:76:64:EE:12:54:66:8F:C5:AD:8C:FD
X509v3 Authority Key Identifier:
keyid:A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:88:e5:9d:ba:c3:42:6b:4f:c3:95:53:7b:e5:52:66:1d:cb:
e2:2a:fa:30:9c:d7:5c:45:ae:a3:eb:d8:ec:43:d0:74:ca:97:
e3:f2:a9:cd:2c:3c:99:98:c8:8e:02:34:5a:28:d0:bb:93:76:
61:51:ec:86:97:dc:55:89:91:39:fb:95:76:e1:2b:fd:96:77:
c7:89:3a:8a:5c:1a:ab:28:c5:72:02:90:98:f6:7d:b5:84:82:
4f:4b:30:24:58:5d:4c:65:7d:5d:99:a0:00:a8:e6:b5:22:b2:
e9:9f:ff:81:22:00:4d:b0:83:3c:94:5c:42:7f:db:f3:03:32:
6c:aa:f6:31:57:89:a8:28:c3:2f:96:a9:39:9e:56:3e:dd:af:
6d:c0:b9:d3:5e:c0:56:a5:55:fb:3b:87:83:d8:00:a9:d7:59:
1d:30:cc:d7:eb:e3:f7:a1:d4:69:1b:ef:5f:f7:e4:1d:80:be:
72:84:d3:23:c7:0b:1d:61:a6:5c:80:cc:c2:5a:56:7e:7d:3c:
fd:89:55:e5:60:b0:d7:90:d5:43:71:42:5d:db:b9:d6:df:1e:
c3:f1:e3:b5:97:40:0c:f8:a9:a4:ee:1f:44:ec:9c:16:da:10:
f3:23:ee:c8:79:12:bd:e4:e6:f5:7a:fe:43:e1:45:06:96:58:
23:76:ca:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj7H3TI0/A1MewtA6VcZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ZThhMjVhOTM3OTJhNThiM2EyZDgwZmIxYWFkOTU5ZTY1
YWVkZGYwHhcNMjYwMzAxMTgwMTA5WhcNMjYwMzAyMTgwMTA5WjAzMTEwLwYDVQQD
Eyg3OWM0ZWQ2YmNkNDQyZGNiZjc3NjY0ZWUxMjU0NjY4ZmM1YWQ4Y2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VBUBC6K0LQ6ntrLP247fd36zh0f
mzfKlLPgsAO75JAi8gsNDo3r1ZvWdBRwVXJwx+Vs9ux7D/Norn/NulrxCIMGUltd
JiddHXkAeMRZbt3z/T5PVJY81CFjhtjtAfsQm9ykGBTj3jp6AGRuU40OovPGuo2/
2GcgZsV2wbFDk1R/OV+RTllW2L6xQxRRLfxHMBJWfM53ukSoiH+1q7ycTYrKyy3X
csrBmReHLmHTLHOIJz/vBjVrPMX5C7K7iZt5FDyF6PZkomUeWxQ/UKiQBiNKwF1k
J6F5omU5yLoDwCdK9WZHR0HQqxfLqMVVpMhOBOTm9jBQHQFb/WtgF/V9HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnE7WvNRC3L93Zk7hJUZo/FrYz9MB8GA1UdIwQY
MBaAFKboolqTeSpYs6LYD7Gq2VnmWu3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHVpaVdwTjVLbGl6b3RnUHNhclpXZVphN2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80YzZlNzUtYTgwMC00ZDRmLThhYzct
NGVhZWIyYTIzYjI3LzEvcHVpaVdwTjVLbGl6b3RnUHNhclpXZVphN2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80YzZlNzUtYTgwMC00ZDRmLThhYzctNGVhZWIyYTIzYjI3
LzEvcHVpaVdwTjVLbGl6b3RnUHNhclpXZVphN2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4jlnbrD
QmtPw5VTe+VSZh3L4ir6MJzXXEWuo+vY7EPQdMqX4/KpzSw8mZjIjgI0WijQu5N2
YVHshpfcVYmROfuVduEr/ZZ3x4k6ilwaqyjFcgKQmPZ9tYSCT0swJFhdTGV9XZmg
AKjmtSKy6Z//gSIATbCDPJRcQn/b8wMybKr2MVeJqCjDL5apOZ5WPt2vbcC5017A
VqVV+zuHg9gAqddZHTDM1+vj96HUaRvvX/fkHYC+coTTI8cLHWGmXIDMwlpWfn08
/YlV5WCw15DVQ3FCXdu51t8ew/HjtZdADPippO4fROycFtoQ8yPuyHkSveTm9Xr+
Q+FFBpZYI3bKCg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:26 2026 by rpki-client