Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier: 2BkSk98+BBWZFbryd7H3/Vb8JgdxCS4pAdcdr3gmcy4=
Subject key identifier: C7:5A:89:05:66:CD:5A:4F:47:F5:17:22:73:DB:BA:C4:F3:21:92:9A
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 019CA9EAE9C66148B1E32157BE051207B41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number: 110C
Signing time: Sun 01 Mar 2026 15:01:10 +0000
Manifest this update: Sun 01 Mar 2026 15:01:10 +0000
Manifest next update: Mon 02 Mar 2026 15:01:10 +0000
Files and hashes: 1: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: 0bW79D7oeaYZtQ6AB/lUWnOI1fDrRpMTOpAa0588zoI=)
2: wumUMMWvHiUrTabZLhTSravhO6c.roa (hash: p2VcOKl2dOd/4+FLAlcMShjCSyG2pmnKtd0Km8VqtxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:e9:c6:61:48:b1:e3:21:57:be:05:12:07:b4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Mar 1 15:01:10 2026 GMT
Not After : Mar 2 15:01:10 2026 GMT
Subject: CN=c75a890566cd5a4f47f5172273dbbac4f321929a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:f7:68:c0:f8:d3:cf:a9:eb:af:c5:35:5e:
2d:54:e0:74:54:a6:1d:70:1c:f1:a6:87:5d:23:fe:
49:56:71:f7:c9:4d:42:41:a2:85:56:b0:0e:0f:03:
00:89:7b:94:d8:18:ec:c1:ef:22:93:65:d9:cb:1d:
1e:36:7a:c7:f3:a2:fb:f6:3f:68:e8:79:a0:75:43:
bb:fc:35:ae:f7:15:7d:47:c5:bb:e5:1d:52:c6:40:
3b:67:e3:25:8d:f8:0f:af:bf:f0:f1:d6:f3:fa:7d:
d2:16:37:92:a9:1a:72:3f:be:89:4d:ee:55:19:46:
2d:1a:58:ed:b2:15:ce:41:42:dd:4e:32:80:65:7d:
b2:aa:74:5a:2a:9a:62:07:ab:bd:a0:72:4c:aa:1a:
24:c6:f7:e7:86:8d:33:5f:21:6d:a5:73:97:12:b9:
54:35:9c:ec:37:f6:09:a8:2d:6f:84:0f:45:fe:5f:
96:3d:8c:01:d1:09:f1:32:d9:85:d4:07:9c:8e:4d:
cc:75:e8:f1:9a:3a:13:77:66:2e:4d:94:10:b1:28:
64:fc:d6:2f:97:e1:26:a6:14:89:be:3a:d7:9d:54:
18:b1:8e:08:d5:6c:58:ce:fc:94:63:95:14:05:74:
d0:5c:bf:27:69:29:7e:3e:eb:05:2f:82:f4:32:3b:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5A:89:05:66:CD:5A:4F:47:F5:17:22:73:DB:BA:C4:F3:21:92:9A
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0d:38:0f:e5:ed:6f:70:a2:f9:d8:70:68:55:81:0e:7e:ce:
5f:bc:4a:6e:24:6b:12:0e:2a:6c:ca:86:62:6b:07:f3:a9:94:
ef:b9:34:40:62:4b:d8:04:c2:86:dd:df:36:0b:11:0d:75:97:
59:72:29:44:e4:1e:d5:78:5b:0b:8e:80:8e:35:d3:ad:e6:9e:
27:77:04:87:b8:36:66:31:13:5c:42:f9:e7:38:05:90:05:0b:
cd:55:39:7d:7e:f1:7c:b4:ae:e3:2e:6f:fc:fd:6c:8f:26:ac:
5e:fc:49:99:71:49:d2:22:bb:f5:41:de:f2:88:48:2c:8c:c8:
3f:c3:a3:c2:82:de:ac:41:4d:0d:c3:84:a7:a7:59:a6:46:38:
72:7a:d6:7a:ad:16:2e:7c:7a:af:c4:73:3a:c9:21:c3:a8:9d:
b0:67:dc:c3:97:cf:01:e1:31:81:68:e4:6d:d1:70:e1:01:a2:
b2:4d:2c:df:14:51:93:76:13:a9:e7:ae:da:b4:50:a7:69:bb:
b2:7c:ce:15:d4:dd:45:9f:5e:41:50:53:32:43:ce:b4:ee:b5:
f5:8a:97:97:ce:20:e3:ed:6c:d8:20:47:fb:a3:2f:83:6c:92:
a7:7c:bd:04:5f:57:a1:15:4e:a8:aa:bf:24:cc:22:3d:96:b7:
e6:9a:82:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:39 2026 by rpki-client