
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier: GdIH6r5UkqWT563empdQ2xVEDVw2YFlHug9+m8N5fEc=
Subject key identifier: B3:98:8F:71:D6:1B:F7:99:87:E0:2C:E5:15:0A:1F:6D:56:DD:3A:F6
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 019EC2CA2AE027091F33CBABFF4264740DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number: 1222
Signing time: Sat 13 Jun 2026 21:01:29 +0000
Manifest this update: Sat 13 Jun 2026 21:01:29 +0000
Manifest next update: Sun 14 Jun 2026 21:01:29 +0000
Files and hashes: 1: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: 2NvCKpEU1Uc1PV9PfgNia4SP0MZoudsyHxKgo43tfgc=)
2: wumUMMWvHiUrTabZLhTSravhO6c.roa (hash: p2VcOKl2dOd/4+FLAlcMShjCSyG2pmnKtd0Km8VqtxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:ca:2a:e0:27:09:1f:33:cb:ab:ff:42:64:74:0d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Jun 13 21:01:29 2026 GMT
Not After : Jun 14 21:01:29 2026 GMT
Subject: CN=b3988f71d61bf79987e02ce5150a1f6d56dd3af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:91:39:91:f9:5f:76:bb:e7:48:1c:f0:fc:
7b:96:e5:30:91:71:79:de:8f:26:70:48:7d:0f:58:
51:2c:c0:9f:09:46:79:c9:79:b3:d5:77:e6:91:b1:
85:de:35:80:4e:9f:19:6d:49:a2:88:5f:28:50:e6:
04:13:45:a8:de:e1:2d:68:4f:be:a5:68:1c:ec:c0:
d4:ee:9b:32:bd:c7:4f:e7:43:37:a6:37:22:03:e8:
db:c8:b3:76:de:40:a5:ef:45:bc:db:3e:cb:a8:6c:
05:fb:9e:56:65:a3:d7:d1:d6:c5:f0:17:80:3a:83:
e0:0c:0c:e7:eb:e0:18:ba:9a:1f:f8:6d:0d:f2:42:
99:40:8a:b4:4d:65:8f:06:12:cd:9f:b1:9d:82:b9:
b6:72:28:e7:ac:74:02:f8:ea:9b:ad:b2:6b:b2:0a:
50:f8:d3:f3:1e:3d:01:96:58:13:c7:53:25:39:64:
e1:1a:a8:29:dc:29:da:d2:63:2b:9e:59:ad:83:ad:
f1:e3:71:26:f6:81:54:df:dc:d2:97:63:bf:de:39:
6b:6a:13:ee:28:c7:9d:1b:23:0f:73:45:72:8b:2a:
0c:e2:da:79:0f:1e:44:0a:38:37:80:3f:91:77:35:
30:9f:7f:98:b3:7f:64:af:64:be:4d:3d:4e:77:db:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:98:8F:71:D6:1B:F7:99:87:E0:2C:E5:15:0A:1F:6D:56:DD:3A:F6
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:56:a6:14:24:04:5f:66:a3:9f:9f:c6:b1:8e:0b:fb:93:5d:
56:44:16:ca:53:de:06:ac:ee:a1:6c:3d:4a:e4:65:e6:9c:db:
40:1f:d3:1b:2c:2a:5d:8d:12:6c:44:f2:70:ac:b0:fd:8e:33:
7f:12:7c:fe:c8:71:09:13:c6:02:cf:c7:2b:17:24:14:3b:8f:
5c:d3:57:56:ba:c1:99:27:38:d7:6d:f8:f3:23:0e:00:02:18:
33:9b:c1:7c:bd:93:e5:66:0b:76:c5:fa:b7:78:a4:4c:cf:14:
36:b9:14:a3:f1:f0:7b:b4:29:fc:74:5c:b8:aa:9f:17:32:bb:
23:f1:0c:de:cc:8d:29:27:84:59:93:07:a9:c6:c0:bb:5d:bb:
ce:d3:4b:8f:dc:7c:be:dc:5a:93:96:3f:7b:2e:2c:01:22:46:
82:be:2a:32:d1:18:d2:51:f8:e9:bb:95:6a:46:2d:a3:18:c2:
35:38:c2:bf:75:90:ab:16:1a:f4:a4:b9:8a:fa:19:4d:d8:ad:
ec:bd:36:58:90:77:40:2f:14:50:b3:c8:7a:2e:52:73:df:8c:
24:83:07:85:2d:21:0b:2a:4a:05:03:39:49:63:aa:bb:5b:b2:
3b:85:f6:1d:31:e2:63:ab:c1:ef:25:1d:07:59:d1:30:5f:43:
81:47:e0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:51 2026 by rpki-client