Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier: ReD22O5/L16KFv0RMWtuFfQvPo7UHvVPWgB5c/P8uEE=
Subject key identifier: 10:7D:A5:A3:9B:E9:4C:E3:80:9A:D2:8C:BB:A2:8C:3C:F0:63:DA:CE
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 01A0CE2403291A622AD6D80CA27A824F4CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number: 1331
Signing time: Wed 23 Sep 2026 12:01:01 +0000
Manifest this update: Wed 23 Sep 2026 12:01:01 +0000
Manifest next update: Thu 24 Sep 2026 12:01:01 +0000
Files and hashes: 1: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: kI4FbVTc9CblepL0221Gipb5kN/vgV314QZGW73w8zs=)
2: wumUMMWvHiUrTabZLhTSravhO6c.roa (hash: p2VcOKl2dOd/4+FLAlcMShjCSyG2pmnKtd0Km8VqtxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:03:29:1a:62:2a:d6:d8:0c:a2:7a:82:4f:4c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Sep 23 12:01:01 2026 GMT
Not After : Sep 24 12:01:01 2026 GMT
Subject: CN=107da5a39be94ce3809ad28cbba28c3cf063dace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6b:85:ba:a0:4c:9d:e3:98:60:43:fc:4d:e6:
a7:52:d3:67:20:62:20:07:30:d8:a8:35:7f:52:05:
08:38:f9:10:85:52:cb:1f:d4:71:51:5e:6a:41:90:
f9:e8:82:95:89:a0:c0:e7:8b:c0:31:72:8d:e0:e4:
1b:5e:a3:0f:13:86:97:77:54:0a:38:ea:e0:37:52:
45:28:a7:94:92:b2:94:11:1b:21:75:a9:dd:30:b7:
7e:e0:80:e6:d3:4c:6a:8c:a5:73:0d:a6:29:32:ee:
50:a6:aa:de:d1:52:5c:8a:61:0e:4d:b9:41:3a:9d:
fe:0c:49:fb:10:34:87:6c:14:df:e9:48:63:15:e9:
97:32:5f:cf:25:d1:c2:ee:09:5f:ab:61:cd:36:64:
99:e8:61:58:1b:2d:ea:c1:9d:64:5f:0e:be:6a:f1:
59:f5:d8:83:8b:6a:c4:30:ae:46:f6:c2:8b:50:7a:
a6:9b:72:66:a7:fa:9c:4b:60:0a:fa:01:b2:2e:ea:
67:7e:88:b7:43:70:54:f6:5f:23:88:9a:5c:6d:a0:
f4:64:65:92:37:09:15:6d:a7:93:f7:43:91:7f:98:
cd:62:bd:42:42:2b:2e:24:2f:5b:7d:e0:e0:70:9c:
ad:fc:6b:02:6f:48:10:5a:6a:51:3b:f6:74:4c:ea:
bf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7D:A5:A3:9B:E9:4C:E3:80:9A:D2:8C:BB:A2:8C:3C:F0:63:DA:CE
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:5a:0a:32:38:bd:da:f7:c2:a7:13:f2:64:57:13:0d:69:61:
54:b8:33:4b:17:20:1c:02:38:09:43:7d:46:7d:b2:62:83:e5:
51:a9:d0:7c:a0:b0:eb:d6:09:bd:31:1c:cc:87:88:a4:98:f1:
82:a0:05:b6:aa:9e:a9:06:d8:9f:33:f5:53:78:9f:50:2a:b8:
b9:c2:01:2e:d3:5a:50:eb:46:ec:87:b4:9c:e5:23:1d:12:53:
5a:30:ec:85:47:81:2e:3e:03:08:56:f4:ef:3b:78:e2:a9:c0:
bf:32:5b:38:e3:a8:35:3c:cd:fa:de:2e:10:e6:70:cc:ea:7a:
26:3e:0d:46:5f:94:33:e2:a7:2a:dd:27:70:57:06:dd:aa:4a:
ff:0f:ce:12:8f:2f:a5:1c:80:65:81:ea:c3:ee:9d:d3:9a:f6:
38:c3:5d:4e:cc:76:93:2d:d5:a9:cb:51:31:cb:6a:f2:7b:ee:
69:f5:19:43:c5:13:40:fb:31:4f:2f:11:c9:b4:49:76:b5:a7:
32:49:6f:f0:7b:4a:d4:fe:77:bc:1f:b0:e6:69:c6:d3:e1:ad:
d0:d8:e5:4a:c1:bf:a8:3a:86:93:f1:be:59:14:f7:73:ec:3d:
25:a2:99:4d:81:3d:79:1d:e4:2e:87:73:b4:5a:8d:f9:6c:b7:
27:82:c6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:26:57 2026 by rpki-client