Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File: prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier: Z7hOuS09J0rpbhmDmyD1DY5WN3JMHMYz70NRB2cnSDU=
Subject key identifier: 32:78:57:43:A9:DD:21:11:26:E5:58:19:82:E0:C8:39:AF:0A:53:AE
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer: /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial: 01A0C88F97169AB5E9D775BE339F15FAF7AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number: 0DC3
Signing time: Tue 22 Sep 2026 10:00:48 +0000
Manifest this update: Tue 22 Sep 2026 10:00:48 +0000
Manifest next update: Wed 23 Sep 2026 10:00:48 +0000
Files and hashes: 1: G42-Fdl3gJAxSTqoOxR_BXG1oH8.roa (hash: pai33aN90kyIzUMmy6nzZwQfDVVekgEOsKj6Cwhhy24=)
2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: cCg9FD6HFaPAxUSQyix8j7q+Nt7weVBPLEE9i+TlSkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:97:16:9a:b5:e9:d7:75:be:33:9f:15:fa:f7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Validity
Not Before: Sep 22 10:00:48 2026 GMT
Not After : Sep 23 10:00:48 2026 GMT
Subject: CN=32785743a9dd211126e5581982e0c839af0a53ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:df:6d:4c:cf:2a:c7:be:24:b3:b7:ae:97:
e2:ce:ce:b2:ec:39:6f:c0:e5:68:55:cb:0c:70:59:
e7:00:5b:e2:e9:b4:e1:dc:a2:64:48:51:41:b0:24:
8c:31:dd:ce:56:c4:b4:96:56:7e:73:52:54:e9:bd:
ff:89:96:b4:04:b0:6a:36:7e:f9:d5:53:1d:96:c7:
40:c1:df:fe:56:e1:02:c9:87:8d:58:fb:2b:e2:58:
bb:cd:05:cd:c2:2a:26:6a:4b:c2:32:b7:15:b9:d3:
57:a2:09:78:6f:2d:f8:15:04:99:01:26:95:b0:1e:
02:0f:47:ec:d7:25:54:70:3e:6f:a3:55:be:29:ed:
8d:c4:b5:fd:46:3e:5a:da:f9:fb:14:69:21:d2:14:
c2:5f:01:84:cf:e6:1c:6c:2a:ec:2a:a2:4e:0a:7d:
8a:d4:fd:9f:c3:ee:b4:bb:7c:d7:66:24:3f:9f:29:
fc:cf:6e:35:61:b9:ba:df:e9:f8:9f:2a:d3:09:64:
ca:83:95:06:76:65:84:77:96:9d:99:a1:f5:95:74:
ca:7f:04:a7:d4:f9:41:44:34:c0:f2:ef:9a:15:f8:
c1:8e:be:3e:14:fc:03:a7:60:e2:7f:6c:6b:62:c9:
3a:ed:22:cd:bf:7d:8f:69:36:88:f5:35:5a:54:d2:
c8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:78:57:43:A9:DD:21:11:26:E5:58:19:82:E0:C8:39:AF:0A:53:AE
X509v3 Authority Key Identifier:
keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:38:4f:c2:38:07:1c:13:6b:18:04:e2:fd:18:52:37:9d:2c:
4d:ca:40:ff:d4:89:a3:53:ea:af:49:b1:fd:70:4c:80:1b:0a:
ec:d4:3d:7c:94:c8:80:53:9b:aa:ce:c9:c0:45:e4:b7:8c:ac:
75:eb:f3:94:e3:ac:70:ee:e9:07:71:63:2f:e8:c2:4d:57:68:
c2:2f:3e:2d:36:60:b1:af:cf:32:20:cb:78:02:7c:88:aa:42:
55:17:f0:37:26:a8:66:05:77:c0:41:53:d6:5c:33:0c:23:41:
cb:d0:db:dc:57:cc:31:c1:bd:ae:c1:7f:59:59:5e:8b:ab:3d:
83:ff:e9:a1:a6:b1:59:42:f3:09:08:58:0a:02:bd:6c:25:80:
ef:46:c2:20:32:bd:dd:bb:1b:25:32:09:76:69:49:5b:23:d1:
82:5b:8d:79:6b:da:28:28:54:4e:06:8d:dd:09:7e:2b:10:38:
3f:0e:5b:df:b7:ba:35:14:3f:e6:16:31:59:84:48:af:63:d4:
8a:7c:54:7d:7d:2a:d1:dc:25:10:4e:cb:3c:14:a1:30:d2:7c:
6f:22:42:71:7f:92:95:5f:f8:27:8d:b3:75:af:be:76:2a:9a:
b8:9b:48:62:67:44:50:51:00:5d:44:9c:bd:87:8f:86:b9:d2:
70:a0:84:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:55:05 2026 by rpki-client