Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier: Z5KZfZqQBxpszTyjs2EKwwaQskXIVKQyGfcYxQz/kzw=
Subject key identifier: 02:5F:D8:4B:81:74:C6:B8:0A:21:19:EB:C5:68:07:56:57:9F:76:94
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 019D996234150703B2DE3413CD5D3233DC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number: 1188
Signing time: Fri 17 Apr 2026 03:00:42 +0000
Manifest this update: Fri 17 Apr 2026 03:00:42 +0000
Manifest next update: Sat 18 Apr 2026 03:00:42 +0000
Files and hashes: 1: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: X41uOXrnAysUGTObIi92seU7pNLTg7LqCkqQXfMmMXE=)
2: wumUMMWvHiUrTabZLhTSravhO6c.roa (hash: p2VcOKl2dOd/4+FLAlcMShjCSyG2pmnKtd0Km8VqtxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:34:15:07:03:b2:de:34:13:cd:5d:32:33:dc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Apr 17 03:00:42 2026 GMT
Not After : Apr 18 03:00:42 2026 GMT
Subject: CN=025fd84b8174c6b80a2119ebc5680756579f7694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:78:cf:89:7a:01:c8:21:ac:02:4d:3a:81:
fb:2a:e7:34:6e:79:55:df:c3:0b:b7:09:7f:92:bc:
c7:a2:77:19:63:8e:1f:3b:61:99:26:22:c7:42:5e:
9b:1d:30:d2:28:c6:23:36:d0:91:a2:df:9d:35:15:
6f:0f:7d:f2:5e:4f:4b:65:a8:48:0b:94:7b:8b:ac:
ae:4a:e3:8d:64:f1:25:e5:0a:a3:3f:52:37:30:c5:
e0:0f:26:41:83:dc:05:e1:9d:65:ed:fe:54:59:78:
6d:9e:91:0f:53:14:58:c7:94:47:65:80:ce:17:ec:
85:12:5d:6d:25:a8:f5:20:5d:59:73:6e:4e:db:c8:
a9:4e:1f:2c:2b:b1:dd:84:1b:0c:bb:38:39:62:aa:
98:ae:05:fb:31:f2:f2:83:39:cc:34:c3:54:08:05:
ef:76:ed:13:99:9a:d7:db:e2:e5:c5:c5:f1:fc:be:
5e:71:4e:52:a6:ba:cd:ba:ae:d5:4b:ae:97:8a:bd:
ef:09:7b:fc:5f:e4:a2:73:6f:9f:2d:48:18:35:28:
6c:b0:90:5c:78:87:b5:ea:90:15:62:48:a7:b5:8b:
9f:66:54:25:31:ad:7d:8c:e4:84:eb:39:de:f5:44:
6f:a9:4d:54:ae:2f:d0:4b:7e:45:ca:18:c6:36:17:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5F:D8:4B:81:74:C6:B8:0A:21:19:EB:C5:68:07:56:57:9F:76:94
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c0:19:c7:ff:c4:8b:f9:d6:de:57:25:5d:f2:f7:22:00:69:
f0:42:ba:85:43:d9:33:cb:c5:60:d8:12:32:ac:de:de:25:b2:
20:38:1e:a5:08:3f:af:86:52:71:75:eb:67:44:96:08:16:19:
77:4d:6b:7b:cb:1a:15:c7:c8:23:51:8a:a2:21:cb:f8:4c:44:
fc:dd:3d:eb:3f:e6:92:37:de:2c:fa:92:67:36:22:d9:c7:1c:
b2:a2:9e:25:fd:73:62:75:1d:c0:7c:8d:a6:94:48:f7:d7:a3:
0f:4f:e7:11:e2:52:bc:49:25:a9:15:d7:27:ba:b4:c9:77:43:
3f:94:06:41:bd:aa:82:ed:1b:02:7a:13:ff:94:87:88:a2:79:
c6:9b:27:ba:8c:ce:82:96:5f:cd:01:36:91:d9:4a:12:17:03:
71:e8:2a:81:18:44:1d:0d:fb:ad:a3:a0:d1:4d:30:ed:af:b1:
30:64:b3:3b:f6:82:17:92:5e:ec:3c:eb:98:a6:56:29:2a:f5:
62:65:a0:0b:43:ed:6b:94:c5:25:fe:6f:ec:04:df:df:cc:43:
89:1c:84:b9:ef:8e:16:da:b0:11:ac:88:97:9b:27:02:22:14:
21:bc:cf:b2:b4:f4:9c:0f:a3:6d:47:4c:6f:a0:01:66:38:d5:
4a:a7:6b:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYjQVBwOy3jQTzV0yM9yDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTYwNzJjYTAyNTJmYWI1MDY1OGQ3MzZmZjJjNjBjMTYy
OWRjNzYwHhcNMjYwNDE3MDMwMDQyWhcNMjYwNDE4MDMwMDQyWjAzMTEwLwYDVQQD
EygwMjVmZDg0YjgxNzRjNmI4MGEyMTE5ZWJjNTY4MDc1NjU3OWY3Njk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6p4z4l6AcghrAJNOoH7Kuc0bnlV
38MLtwl/krzHoncZY44fO2GZJiLHQl6bHTDSKMYjNtCRot+dNRVvD33yXk9LZahI
C5R7i6yuSuONZPEl5QqjP1I3MMXgDyZBg9wF4Z1l7f5UWXhtnpEPUxRYx5RHZYDO
F+yFEl1tJaj1IF1Zc25O28ipTh8sK7HdhBsMuzg5YqqYrgX7MfLygznMNMNUCAXv
du0TmZrX2+LlxcXx/L5ecU5SprrNuq7VS66Xir3vCXv8X+Sic2+fLUgYNShssJBc
eIe16pAVYkintYufZlQlMa19jOSE6zne9URvqU1Uri/QS35FyhjGNhdiBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJf2EuBdMa4CiEZ68VoB1ZXn3aUMB8GA1UdIwQY
MBaAFD0WByygJS+rUGWNc2/yxgwWKdx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yZmJmMmMtNTQyZi00Yzk4LTk5ZGIt
YTRlNWRlOGVlNzE2LzEvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8yZmJmMmMtNTQyZi00Yzk4LTk5ZGItYTRlNWRlOGVlNzE2
LzEvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8AZx//E
i/nW3lclXfL3IgBp8EK6hUPZM8vFYNgSMqze3iWyIDgepQg/r4ZScXXrZ0SWCBYZ
d01re8saFcfII1GKoiHL+ExE/N096z/mkjfeLPqSZzYi2cccsqKeJf1zYnUdwHyN
ppRI99ejD0/nEeJSvEklqRXXJ7q0yXdDP5QGQb2qgu0bAnoT/5SHiKJ5xpsnuozO
gpZfzQE2kdlKEhcDcegqgRhEHQ37raOg0U0w7a+xMGSzO/aCF5Je7DzrmKZWKSr1
YmWgC0Pta5TFJf5v7ATf38xDiRyEue+OFtqwEayIl5snAiIUIbzPsrT0nA+jbUdM
b6ABZjjVSqdrcA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:17:21 2026 by rpki-client