Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier: cI9HAhdH/D/UiaOivBvyAcGdILMUHsTBw4xXH7BCSd0=
Subject key identifier: 70:57:49:39:DC:52:3B:3B:9F:73:7A:D5:25:FB:53:21:1C:4D:6D:65
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 019FAC76F0F077CDDC0B03A750BE65160B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number: 129B
Signing time: Wed 29 Jul 2026 06:01:43 +0000
Manifest this update: Wed 29 Jul 2026 06:01:43 +0000
Manifest next update: Thu 30 Jul 2026 06:01:43 +0000
Files and hashes: 1: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: vdDYxWbfxSTNzKRmqVzyveHMkibLlhcdXRRMDxer7Q4=)
2: wumUMMWvHiUrTabZLhTSravhO6c.roa (hash: p2VcOKl2dOd/4+FLAlcMShjCSyG2pmnKtd0Km8VqtxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:f0:f0:77:cd:dc:0b:03:a7:50:be:65:16:0b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Jul 29 06:01:43 2026 GMT
Not After : Jul 30 06:01:43 2026 GMT
Subject: CN=70574939dc523b3b9f737ad525fb53211c4d6d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e4:71:b1:d3:c7:b5:a4:4d:98:3d:e6:c0:db:
c1:03:c9:2e:ad:3f:31:63:cf:c8:d2:0e:dd:46:c8:
60:8b:5d:bc:d8:11:82:f5:2e:d7:ee:9e:e5:a2:fe:
cf:7b:81:d2:07:c8:87:77:cb:3a:d1:cb:8b:13:6c:
35:2a:f9:a8:f2:af:7c:d2:a0:39:f5:d3:6e:37:8a:
41:c7:cd:cc:97:47:8c:64:b9:ad:23:5e:61:de:50:
5d:d5:5f:a2:08:1b:51:92:cc:84:ba:0e:89:74:25:
a6:68:8a:12:f9:41:cc:5c:cf:13:4e:6d:bb:76:2f:
3a:89:0c:41:ab:1b:9a:bf:81:1a:fb:a5:58:8b:65:
7e:ea:cb:66:1c:25:89:60:94:e1:83:cf:59:b8:0c:
08:48:92:0b:28:dd:b2:8d:1a:2e:9d:bd:68:f4:6e:
07:35:e7:6b:46:03:94:95:57:1c:7c:0d:bc:59:5b:
6c:f3:3d:0f:a8:c9:c4:19:1f:09:d0:97:e9:8f:47:
ad:8d:3d:3e:1b:bf:3e:26:a4:c8:54:ac:23:0d:3f:
ec:d4:51:04:19:54:12:c0:7e:52:22:28:05:c7:73:
b6:7d:2c:0b:9a:61:80:b4:17:d1:7a:60:79:bb:d2:
83:17:c2:50:5e:eb:f0:21:56:3a:a3:75:27:d6:ed:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:57:49:39:DC:52:3B:3B:9F:73:7A:D5:25:FB:53:21:1C:4D:6D:65
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8c:bd:0e:4e:cd:1b:de:6d:8f:82:b7:2d:49:9e:f1:21:8c:
01:7b:4e:9b:ca:d1:f5:aa:8c:a2:5a:3f:4e:03:25:e8:a1:40:
06:9d:d5:ac:f6:cc:86:06:dc:95:26:16:d1:ab:1d:9e:23:ed:
65:ed:a8:ee:27:65:58:9f:ad:89:ec:7a:9a:1f:a8:eb:22:02:
f7:18:8a:bd:f1:e2:6c:9c:1f:68:a7:8e:35:a5:c0:a4:0a:80:
23:ad:11:d0:05:8d:94:ca:52:5a:14:db:a6:17:2c:6f:48:f9:
b0:9e:7f:fd:81:2f:39:d3:ae:68:eb:03:06:4d:7c:9d:f8:5c:
b1:97:88:1a:6c:70:d0:c5:fe:3d:9b:b7:90:cc:45:03:30:88:
13:0b:f7:7b:37:83:fa:9c:65:f8:8d:f9:f2:8c:25:15:b4:98:
9d:4c:c1:70:ab:85:bb:05:8d:30:c8:a9:6d:54:4a:78:39:66:
b1:9e:e6:dd:87:48:38:8b:ee:1a:c6:a8:f7:51:07:37:73:90:
65:9a:ab:1e:49:22:ae:37:c9:89:d5:d8:16:47:1d:00:c9:fe:
a3:60:b1:99:85:70:f5:ea:39:3b:92:23:74:b1:ea:8a:a3:e3:
4c:f1:9e:fc:05:4e:09:ed:f2:0a:0e:a0:75:28:c0:9d:34:f9:
54:4a:5e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:12:34 2026 by rpki-client