Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File: prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier: pgYzZH8j8BfJIqyKBEuCYsSVWLksREMHpDlsPI3KRFc=
Subject key identifier: 7B:43:B4:13:78:E4:7D:82:87:65:9E:DF:13:93:72:91:8A:D2:77:11
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer: /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial: 019FA8D00F0064800F5D74AB81B1041A87DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number: 0D2E
Signing time: Tue 28 Jul 2026 13:00:35 +0000
Manifest this update: Tue 28 Jul 2026 13:00:35 +0000
Manifest next update: Wed 29 Jul 2026 13:00:35 +0000
Files and hashes: 1: G42-Fdl3gJAxSTqoOxR_BXG1oH8.roa (hash: pai33aN90kyIzUMmy6nzZwQfDVVekgEOsKj6Cwhhy24=)
2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: VAovrczaH1CbhsDWqNKqwX+HnkBoXuhbUi5uiPEuK0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:0f:00:64:80:0f:5d:74:ab:81:b1:04:1a:87:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Validity
Not Before: Jul 28 13:00:35 2026 GMT
Not After : Jul 29 13:00:35 2026 GMT
Subject: CN=7b43b41378e47d8287659edf139372918ad27711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:e5:e2:e3:63:ea:c1:70:13:6d:f4:62:de:
6c:08:21:4f:b3:fc:a2:7d:c0:0e:ac:4a:17:fc:0c:
22:db:19:d2:0b:7d:91:5b:97:e3:7a:0a:df:c8:e1:
76:48:2a:fc:0a:19:e7:33:0b:08:16:c6:7d:4c:1c:
76:bb:06:fb:35:29:39:02:26:59:bd:3b:df:7a:49:
04:1b:0b:f0:02:48:f0:4b:5e:ee:2e:a3:a0:6b:ea:
0f:6f:83:b4:e5:2d:80:1a:ea:1b:05:56:6b:8e:b4:
a4:27:e0:e7:5b:ab:5c:04:56:d5:27:14:44:0c:77:
c4:a0:82:8e:85:e4:16:2f:ea:37:5c:95:e6:e4:e6:
5a:86:7a:fa:9b:f2:b9:ad:b8:3a:d1:61:8c:12:7d:
85:dc:76:2d:4f:19:4a:b5:a6:76:38:a5:f2:a6:db:
4e:8e:fa:ec:93:0b:2e:4f:ca:58:c3:e6:b6:22:41:
4f:c7:80:8e:29:c4:c9:13:67:33:27:b1:e4:c9:01:
52:14:42:b7:d8:ad:be:16:2f:cb:2c:71:46:b7:f2:
5b:fc:31:ab:5c:d5:a4:18:24:75:93:55:00:07:62:
47:95:a2:e6:06:ce:38:33:25:3f:3d:89:4d:d3:4a:
0a:79:4a:2a:dc:3d:f8:fc:56:5d:d1:ec:c4:61:69:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:43:B4:13:78:E4:7D:82:87:65:9E:DF:13:93:72:91:8A:D2:77:11
X509v3 Authority Key Identifier:
keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7b:e8:18:5c:5f:53:32:f2:dc:34:0f:02:97:bd:6d:4f:5f:
93:39:ae:58:8c:00:fe:c0:cb:d9:22:f1:1a:86:25:6c:ea:3a:
6b:65:0f:ad:84:75:29:1a:1a:38:03:dc:23:17:2a:d4:69:3d:
2b:45:b3:c1:21:5d:22:50:53:a3:4c:16:d8:4f:c1:4c:13:3c:
0a:82:10:00:bb:03:9b:11:4b:d3:58:bb:63:c2:98:79:6c:42:
a0:f9:40:e1:ef:93:bd:ce:16:46:32:8e:ce:e4:26:b5:c9:3d:
72:22:ee:f8:33:51:cc:7c:28:33:04:28:f2:06:e1:15:42:16:
60:22:3d:2f:39:a8:e2:db:3e:db:0c:c5:13:61:d1:81:16:85:
76:36:a1:20:f0:54:e2:05:04:7c:0e:69:af:e0:b8:28:fb:fd:
32:72:95:57:72:6e:63:b2:c2:d3:ac:22:0f:a7:72:e5:07:c2:
69:bb:d7:88:93:af:24:ae:f7:98:86:91:e3:d9:67:cb:3a:f9:
68:9f:ea:81:3c:52:fd:07:36:0b:dc:ee:50:92:24:c3:2b:d5:
7d:ce:29:56:5b:ad:99:5c:c4:9b:0e:e5:c7:8b:d7:bf:ee:86:
55:30:0c:02:87:fb:a8:c0:48:a0:b2:6d:a5:b5:fb:39:59:2d:
7d:7f:5a:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0A8AZIAPXXSrgbEEGofaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YmIzMDQ1YWVhNzhlOGZhNzY0ODEyOTcxNGZiNzM2MDY4
ZGMzN2IwHhcNMjYwNzI4MTMwMDM1WhcNMjYwNzI5MTMwMDM1WjAzMTEwLwYDVQQD
Eyg3YjQzYjQxMzc4ZTQ3ZDgyODc2NTllZGYxMzkzNzI5MThhZDI3NzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNvl4uNj6sFwE230Yt5sCCFPs/yi
fcAOrEoX/Awi2xnSC32RW5fjegrfyOF2SCr8ChnnMwsIFsZ9TBx2uwb7NSk5AiZZ
vTvfekkEGwvwAkjwS17uLqOga+oPb4O05S2AGuobBVZrjrSkJ+DnW6tcBFbVJxRE
DHfEoIKOheQWL+o3XJXm5OZahnr6m/K5rbg60WGMEn2F3HYtTxlKtaZ2OKXypttO
jvrskwsuT8pYw+a2IkFPx4COKcTJE2czJ7HkyQFSFEK32K2+Fi/LLHFGt/Jb/DGr
XNWkGCR1k1UAB2JHlaLmBs44MyU/PYlN00oKeUoq3D34/FZd0ezEYWkyiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtDtBN45H2Ch2We3xOTcpGK0ncRMB8GA1UdIwQY
MBaAFKa7MEWup46Pp2SBKXFPtzYGjcN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80MWVhZjktNjU2ZC00MGQ5LTlmN2Et
MzM0ZGUzZDc2ZmU1LzEvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80MWVhZjktNjU2ZC00MGQ5LTlmN2EtMzM0ZGUzZDc2ZmU1
LzEvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXvoGFxf
UzLy3DQPApe9bU9fkzmuWIwA/sDL2SLxGoYlbOo6a2UPrYR1KRoaOAPcIxcq1Gk9
K0WzwSFdIlBTo0wW2E/BTBM8CoIQALsDmxFL01i7Y8KYeWxCoPlA4e+Tvc4WRjKO
zuQmtck9ciLu+DNRzHwoMwQo8gbhFUIWYCI9Lzmo4ts+2wzFE2HRgRaFdjahIPBU
4gUEfA5pr+C4KPv9MnKVV3JuY7LC06wiD6dy5QfCabvXiJOvJK73mIaR49lnyzr5
aJ/qgTxS/Qc2C9zuUJIkwyvVfc4pVlutmVzEmw7lx4vXv+6GVTAMAof7qMBIoLJt
pbX7OVktfX9amA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:45:53 2026 by rpki-client