Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File: prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier: AbuQ9MzffnRjp8rINFybiUYZ2l+LlvtjUw6Z863cfFo=
Subject key identifier: 9C:85:2D:3B:79:E9:3E:DA:DC:40:8E:AF:7A:39:2C:E0:AE:E1:36:7A
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer: /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial: 019DA3412A2E3E5C9FCBE0571309606ED04F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number: 0C22
Signing time: Sun 19 Apr 2026 01:00:49 +0000
Manifest this update: Sun 19 Apr 2026 01:00:49 +0000
Manifest next update: Mon 20 Apr 2026 01:00:49 +0000
Files and hashes: 1: G42-Fdl3gJAxSTqoOxR_BXG1oH8.roa (hash: pai33aN90kyIzUMmy6nzZwQfDVVekgEOsKj6Cwhhy24=)
2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: nOJMq2+45fIPvY2QW43w6UY5dlDCQ17szf8WP9u9tcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:2a:2e:3e:5c:9f:cb:e0:57:13:09:60:6e:d0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Validity
Not Before: Apr 19 01:00:49 2026 GMT
Not After : Apr 20 01:00:49 2026 GMT
Subject: CN=9c852d3b79e93edadc408eaf7a392ce0aee1367a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:94:0a:17:2e:3e:7c:96:5f:02:e7:ee:4a:
e4:dd:21:5d:fa:c3:4d:11:5b:e4:ed:b2:10:9c:1d:
9e:32:fc:c5:1b:4c:e6:28:15:2d:51:33:d2:f3:2a:
41:c4:a2:6d:8c:96:51:75:c1:83:4b:01:35:83:24:
9b:68:4a:a3:19:cd:9a:56:cd:be:6f:bb:fc:85:6c:
cd:bf:b6:f7:aa:9e:21:a3:af:d1:68:9b:c9:51:d0:
1b:ef:b1:bf:71:89:86:0c:32:b5:3d:f8:a7:d0:10:
a7:4e:ea:7c:55:aa:25:db:c9:9c:61:2e:2d:98:c4:
26:9c:22:25:57:57:1b:8a:14:bd:f9:e3:c7:fd:c1:
95:ed:d2:2e:f4:8a:a1:eb:95:db:cd:5e:5e:d9:b7:
26:99:41:90:87:3e:08:d0:c0:ad:76:8f:51:a0:5c:
b6:85:a5:14:ab:41:ae:78:36:1c:a0:3b:dd:31:ab:
c6:aa:a0:14:8f:39:b6:78:f2:72:4c:e6:41:9e:45:
02:92:da:7c:7c:1c:a7:d4:d3:0f:69:df:66:7c:2b:
4a:8e:51:85:32:39:69:90:a2:98:bf:fd:4f:1a:0b:
ef:83:53:1f:24:85:5f:1c:3b:20:27:e1:ac:cc:2a:
57:00:15:bc:6a:5c:ae:1c:ab:66:19:49:8d:12:1b:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:85:2D:3B:79:E9:3E:DA:DC:40:8E:AF:7A:39:2C:E0:AE:E1:36:7A
X509v3 Authority Key Identifier:
keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bf:16:fc:ec:98:6a:29:e7:ee:66:9c:15:09:7b:20:42:bd:
f8:76:fc:02:4d:e4:74:37:5f:60:7e:a5:19:70:b8:1e:3a:66:
4b:6d:c8:01:48:ed:7c:1c:ce:44:a9:d4:78:ee:48:0b:49:14:
ce:4e:b7:a7:ac:69:a7:1b:cd:1a:5d:88:3b:a6:71:dc:d1:b7:
36:28:56:64:cf:f6:08:15:ca:e6:17:a8:89:a7:f7:20:bf:57:
43:34:a7:62:4f:c3:0b:a9:ff:c7:0f:c3:5a:46:28:34:6c:02:
ca:c2:a8:24:80:45:84:5f:56:04:16:44:dd:ac:96:60:ef:06:
6f:44:4c:58:c1:6a:d6:65:98:32:5b:30:ef:60:01:36:88:c4:
d9:97:8a:49:d4:b7:0b:4f:4b:49:84:0e:d4:5c:2b:56:ec:3f:
31:76:50:e4:7b:a7:f8:6b:5d:d1:bb:0e:20:98:70:48:fd:68:
e1:55:ea:d8:a8:ad:23:70:ea:94:7c:4d:19:4f:9e:f8:0a:73:
54:fd:58:14:c3:fb:bc:e4:6a:b7:b9:c0:ff:10:e5:5f:9c:d9:
21:1e:a5:1a:37:0b:f8:82:f4:ac:5c:e1:e4:d3:03:c5:06:66:
36:04:19:4c:3f:be:11:84:13:9e:78:c1:50:4e:e7:0f:49:e4:
54:b7:dd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:16 2026 by rpki-client