Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
File: PrRw_U1nQhL_yCqZNvP-JUvszmY.mft (raw, json)
Hash identifier: n50MKPhL9klHY0wsP1xFwXOiVmywpBt9Qfnf1MpPW10=
Subject key identifier: 87:66:39:F6:99:BA:61:14:49:AE:DE:33:C4:5A:BB:8F:D7:BE:37:49
Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Certificate issuer: /CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Certificate serial: 019CACB4B45C4794D26421A97CB715725B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 04:00:49 +0000
Manifest this update: Mon 02 Mar 2026 04:00:49 +0000
Manifest next update: Tue 03 Mar 2026 04:00:49 +0000
Files and hashes: 1: LBDdRDDjw294mcZ0nbMxr8CzfS4.roa (hash: PPYwxRl5Le8Vm1g+lp2aZkNuPa03sEDkYEJw4YbvaRI=)
2: PrRw_U1nQhL_yCqZNvP-JUvszmY.crl (hash: kykE5m1i5wtI4qxN84rMc68B2+prwE8XXa7xUQ/gorQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:b4:5c:47:94:d2:64:21:a9:7c:b7:15:72:5b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Validity
Not Before: Mar 2 04:00:49 2026 GMT
Not After : Mar 3 04:00:49 2026 GMT
Subject: CN=876639f699ba611449aede33c45abb8fd7be3749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:0d:1c:c4:bd:ad:98:13:f6:87:3c:f3:85:
a2:23:bd:27:c3:f3:42:73:11:9d:2c:5e:ab:1d:c1:
4e:23:71:c1:95:47:07:0d:7a:be:1a:57:4d:dc:d6:
47:6b:3e:df:9b:b4:e7:ed:d4:a9:d2:2e:6a:51:d9:
76:f3:7f:b3:f1:7e:d5:0a:d4:4d:c2:2e:82:43:fb:
f4:64:90:d6:ee:c0:d2:64:ac:e6:53:bd:c6:1f:86:
21:11:ce:12:7e:93:ff:60:45:b0:35:23:c9:3f:f6:
c9:8d:a5:60:cb:84:18:ce:00:cf:b1:43:35:2f:2f:
1a:ae:4f:a7:cb:8d:5f:d7:cc:cb:fe:0b:2c:77:cb:
92:da:72:fa:69:5c:f5:ee:b1:4a:2b:e2:ce:14:2d:
9f:ab:7c:54:7e:7c:4c:9d:13:f5:bb:b1:c2:36:a7:
23:22:d3:86:83:a6:98:b9:7e:80:d7:50:83:0d:6a:
e0:bf:66:b3:ed:8a:65:2f:03:63:49:6a:95:67:91:
72:d6:77:69:d0:11:91:b7:72:2b:18:60:da:d3:ab:
c1:f3:ba:c9:ff:39:94:cb:46:cd:05:f9:3d:6f:f6:
06:88:82:39:23:2a:11:5c:59:46:2b:e7:f4:02:f3:
ff:7e:21:d6:f9:9c:c0:e9:bd:18:17:7a:80:43:1f:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:66:39:F6:99:BA:61:14:49:AE:DE:33:C4:5A:BB:8F:D7:BE:37:49
X509v3 Authority Key Identifier:
keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:78:4a:32:41:8a:eb:ee:a3:ee:75:da:d3:3f:62:c9:98:91:
8f:3d:bd:08:e8:6c:50:9e:45:06:0f:6d:0f:c2:61:0e:21:9d:
34:27:6c:4b:6f:c5:7b:c8:54:43:98:45:fe:ff:be:da:a2:b1:
84:79:1a:49:5e:d2:72:5b:d8:f6:7f:80:9b:4e:6b:74:b9:51:
3e:11:3b:fd:91:e6:d0:f0:9a:45:aa:d8:ae:3c:6e:85:4e:95:
73:66:4c:32:dd:c7:0a:9f:6c:9d:a4:da:25:83:90:3a:c7:58:
fd:97:95:63:37:61:2b:de:8d:f4:b1:a1:fd:0d:e8:82:05:e3:
17:76:ea:c4:5a:41:61:73:34:59:43:c4:77:4c:58:50:82:35:
6a:5f:f4:f9:86:4e:fa:2e:07:a4:60:7c:d5:42:5c:5f:20:9f:
5c:36:92:3c:e7:53:89:a9:5f:22:18:3d:15:fb:b6:0f:92:d2:
22:2a:6e:18:3a:84:d2:6b:70:eb:e3:2e:15:0c:9f:04:36:61:
21:9a:18:29:06:ee:94:22:4b:fb:3d:d4:dc:ea:d9:3b:e5:b8:
be:37:1f:d5:45:a6:2c:c0:40:04:ba:48:3b:53:8a:d7:76:6f:
39:e3:8a:83:e1:50:48:77:c3:e3:b3:c5:e5:7e:42:61:82:1e:
82:8b:a3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:10 2026 by rpki-client