
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File: prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier: UQkoBLW8GNVVtIL0RF73Brcofl1CWMULkEPq8tG84z4=
Subject key identifier: 73:23:0D:AB:01:12:4D:6E:AD:7F:F8:7E:83:21:B7:91:95:C7:2A:06
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer: /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial: 019CAC101E4806119B84B6CCC651E19205A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number: 0BA2
Signing time: Mon 02 Mar 2026 01:01:03 +0000
Manifest this update: Mon 02 Mar 2026 01:01:03 +0000
Manifest next update: Tue 03 Mar 2026 01:01:03 +0000
Files and hashes: 1: G42-Fdl3gJAxSTqoOxR_BXG1oH8.roa (hash: pai33aN90kyIzUMmy6nzZwQfDVVekgEOsKj6Cwhhy24=)
2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: GOqQ/iqxcoyLMYDCAV7tywhzc/P0ora2u6oJL0IcpHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:1e:48:06:11:9b:84:b6:cc:c6:51:e1:92:05:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Validity
Not Before: Mar 2 01:01:03 2026 GMT
Not After : Mar 3 01:01:03 2026 GMT
Subject: CN=73230dab01124d6ead7ff87e8321b79195c72a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:13:57:1d:fa:3a:ba:1a:a4:aa:56:b2:ed:
12:37:f4:14:e2:28:46:73:07:86:67:01:45:8c:d1:
6f:4b:18:48:e4:9c:9b:53:8d:81:ba:f8:54:ec:44:
dc:94:37:ae:f6:51:2a:69:5c:bb:6a:90:5c:7f:18:
0d:90:70:f1:2b:e8:de:4a:78:51:b1:08:71:a8:cc:
63:36:f5:c4:ab:8d:2c:48:09:77:d7:89:6f:38:6f:
ae:59:a1:8a:93:98:a8:f9:91:58:2d:b2:76:28:dd:
c0:df:93:8c:90:86:bd:df:f8:7b:7d:d8:12:45:b7:
d3:81:3e:3c:b7:c2:36:34:3c:0a:ce:a1:cf:c9:0f:
a9:64:2e:32:16:de:4d:2c:41:a3:ef:e8:eb:1c:a3:
28:46:55:1e:70:db:69:b8:af:d7:fe:59:31:31:75:
14:0b:a9:84:a3:c0:b5:b2:fd:59:e6:5a:5f:8d:c5:
2e:ba:f7:7c:40:3c:80:d2:3f:09:b4:3e:95:bb:74:
97:4f:49:00:f7:65:87:f6:47:8e:0d:51:3f:14:39:
4f:e5:07:1f:8d:d0:88:b9:ec:7e:38:33:f5:6f:cb:
08:ac:2a:e6:3c:8d:de:a5:32:38:c0:1d:6b:9e:2c:
44:21:98:e8:61:b7:a1:48:c4:3d:ef:0b:7f:ee:62:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:23:0D:AB:01:12:4D:6E:AD:7F:F8:7E:83:21:B7:91:95:C7:2A:06
X509v3 Authority Key Identifier:
keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:53:58:12:df:c6:2a:78:0c:eb:cd:80:00:22:95:af:ea:db:
16:3f:a4:99:36:08:dc:9d:cd:e1:3a:e3:fb:10:d7:2f:40:8c:
1b:90:05:2e:c9:99:b6:48:74:2d:ea:a9:7a:de:68:97:76:7d:
3a:34:f0:aa:dc:7a:be:6f:57:20:7b:65:3f:05:4c:21:7d:44:
b5:41:0d:5e:03:e3:f9:99:ec:7e:25:33:9f:92:ec:ab:ec:40:
a0:22:4e:0c:66:62:07:0c:b2:ee:96:fa:1b:0f:be:62:dc:eb:
68:73:85:67:a6:42:1c:16:24:80:24:14:2c:51:fd:fe:49:fe:
2e:d4:8a:6d:49:24:62:26:6f:17:19:8c:3a:8a:8e:9f:a5:08:
9f:ec:73:32:35:06:e9:40:89:5c:c1:4d:5a:bc:54:a5:f9:44:
18:09:e1:23:34:6b:3b:1a:8b:67:b4:7e:4f:5b:d2:c7:40:b4:
1e:88:0c:bc:92:c0:d6:96:66:ec:95:0c:23:dc:91:5b:aa:4d:
e5:c0:fa:98:a8:98:69:19:d5:80:16:e5:b7:1b:78:f6:01:28:
eb:f6:6c:89:b6:60:06:9b:10:eb:f3:e7:5d:42:cc:82:28:17:
30:ef:e5:c7:6a:af:e5:5d:9c:ff:30:dd:0a:32:2f:ff:bf:a3:
f7:2c:b0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:06 2026 by rpki-client