Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
File: PRRSju_C35P_tOdPobZQO3btls4.mft (raw, json)
Hash identifier: XwvSo8qaf0PMxnL/v5yhr+1Y5zJwipDnI0WxsUB9u1o=
Subject key identifier: 37:3D:92:B0:27:BE:5A:4C:1F:65:6D:3B:1F:95:C7:31:17:36:92:4A
Authority key identifier: 3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
Certificate issuer: /CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Certificate serial: 019D9B19BE49848608C4AD92863F3165E564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 11:00:48 +0000
Manifest this update: Fri 17 Apr 2026 11:00:48 +0000
Manifest next update: Sat 18 Apr 2026 11:00:48 +0000
Files and hashes: 1: PRRSju_C35P_tOdPobZQO3btls4.crl (hash: icKlCRSVVkyBip0pvtTCDYuQP/n+vTPM5UePaJhX5oE=)
2: qXL9HCnEZZ0eLCvEYVXXykmvKrI.roa (hash: lHRVSCUWXdm2fQuE7zCvC4y6PM1rko+SEbGui1sO7jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:be:49:84:86:08:c4:ad:92:86:3f:31:65:e5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Validity
Not Before: Apr 17 11:00:48 2026 GMT
Not After : Apr 18 11:00:48 2026 GMT
Subject: CN=373d92b027be5a4c1f656d3b1f95c7311736924a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:f0:94:bb:99:34:17:4f:d4:34:3f:8c:e0:
09:c8:cd:71:5d:2a:f8:bc:ba:72:8b:d3:26:a2:b6:
39:45:23:b6:f6:c3:53:78:86:e9:46:b4:da:00:0b:
de:e0:ba:8d:d5:b6:1b:a0:c1:b3:af:7a:c8:a1:ba:
2e:19:8f:ce:74:de:de:89:12:22:8d:32:56:8b:70:
9a:78:8e:60:d0:33:e0:2b:8f:eb:49:52:d7:1b:d9:
ee:da:95:24:f9:ec:03:0c:c3:12:a6:91:d9:aa:84:
68:6f:ba:32:81:3a:a7:f5:0c:3b:61:2a:0d:d7:0d:
32:86:00:5a:59:0e:f6:97:ab:2b:3f:e7:4c:a2:e5:
ae:b5:be:5e:fd:d4:b0:0b:6d:dd:b0:75:cd:f9:06:
b1:a7:97:73:13:28:a0:cc:b7:2e:b3:51:7e:2f:a9:
4d:bf:f9:54:b2:bc:d5:6a:6f:7a:b4:48:21:4e:eb:
7e:6f:d6:e6:32:d9:42:7c:36:34:ed:55:c9:87:2c:
1d:97:6a:f3:46:44:5d:f8:26:57:b0:db:57:34:c3:
ac:c7:d4:a0:b6:86:f5:3b:28:3f:bd:c4:1e:9d:06:
dd:88:fd:1c:c3:8b:00:1c:0d:51:16:d2:5c:3d:0b:
ac:a9:b2:f2:2d:a1:5f:d6:b4:e5:41:f4:40:99:6e:
72:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3D:92:B0:27:BE:5A:4C:1F:65:6D:3B:1F:95:C7:31:17:36:92:4A
X509v3 Authority Key Identifier:
keyid:3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4b:a0:47:f0:63:be:7d:45:1d:2c:39:a4:2c:00:4e:b5:79:
0f:8f:4f:98:e1:32:a5:cc:3c:41:c8:49:97:9e:1b:d1:69:68:
86:2e:b8:ad:c8:c8:6c:04:83:20:ff:eb:8c:44:76:ba:69:94:
a1:ef:3b:d7:b3:5f:0d:03:58:42:47:8b:55:47:20:c4:d1:95:
a1:09:fb:5b:c6:6f:16:32:26:7a:55:3b:18:fd:c8:0b:5a:29:
81:39:b8:ac:b1:8c:c6:ed:eb:6d:98:e7:1f:0c:cb:b7:16:4e:
dd:6a:68:35:31:a2:5a:cd:e9:4e:7b:e9:6f:fb:18:1e:c4:5c:
d1:9f:cd:0c:39:34:28:aa:64:27:a0:8b:23:07:da:ca:9e:2a:
77:aa:60:97:ed:ac:eb:77:f5:2e:b2:b7:dd:7f:95:1b:6d:e5:
c6:46:1f:d2:e3:66:53:bc:cd:6b:92:63:3b:34:33:be:53:ea:
54:1b:e6:22:ed:1f:c5:4b:ce:cb:5d:4c:ff:3d:a1:79:ac:0b:
50:80:e2:06:99:20:5a:a9:5c:cb:28:17:69:13:58:b9:6b:88:
a9:58:69:82:cc:91:ea:c4:8e:16:f5:19:ff:7e:90:27:e8:f5:
3c:44:59:85:57:c2:bf:9b:98:6c:07:05:d3:25:4b:44:16:b2:
58:7b:44:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:00:06 2026 by rpki-client