Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: 7y5vmTvuZfu3PuP0jsQciTrUV6cVyBr3pVmajxX9R04=
Subject key identifier: 09:32:11:2F:CF:C9:03:6A:49:8F:CC:21:63:44:03:2A:B1:91:AE:FD
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 019FA8628C53CA1919F8641F16AB9B7A1A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 065C
Signing time: Tue 28 Jul 2026 11:00:58 +0000
Manifest this update: Tue 28 Jul 2026 11:00:58 +0000
Manifest next update: Wed 29 Jul 2026 11:00:58 +0000
Files and hashes: 1: 9IdHCEJQuzKyxwFpT8ujYaesS9w.roa (hash: C3vAatIUJjp84Pk7IwDii/846WZ3p/AWV1sBtD8WSCA=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: rZ74XF9SW20QgnIABUDnBHvvclf8BVLqPBsksDLxXKQ=)
3: dAsT8XG2mpyNIJ5hpWhJSc5415Y.roa (hash: 8hFFOmMnHAAA9ytOGH8EO+wUtjGfAGKJiyYhcntZJUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:8c:53:ca:19:19:f8:64:1f:16:ab:9b:7a:1a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Jul 28 11:00:58 2026 GMT
Not After : Jul 29 11:00:58 2026 GMT
Subject: CN=0932112fcfc9036a498fcc216344032ab191aefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:58:e9:69:9b:bd:66:fc:d0:39:87:70:2f:
c6:9e:5d:ac:fb:b9:db:b8:f4:30:4c:e6:2d:2f:52:
7b:52:4c:95:62:03:69:8e:8a:1d:5a:bf:dd:43:93:
7e:e8:83:63:e0:01:0d:0e:28:07:bb:11:1d:0c:25:
f8:92:88:80:4b:f4:81:fe:e9:39:20:51:a9:d2:9e:
d5:c3:4b:af:a4:61:d6:31:5d:4c:5c:9c:c6:ed:3f:
85:73:5a:c3:5d:7e:6e:4c:5c:a5:a9:ef:92:87:ef:
9f:9e:c3:26:f9:34:a8:e8:3e:89:53:f8:ab:31:74:
65:b3:2f:5f:61:a1:5e:ca:a9:d3:67:1a:8e:59:35:
23:a8:aa:a5:f4:ea:13:30:79:e8:fc:d3:b7:64:e0:
3b:de:bb:95:e3:a8:9e:cf:c0:e7:03:14:ed:de:70:
68:2e:8e:e5:3c:94:b9:01:c2:79:33:33:20:95:d8:
7e:4f:bc:a4:9b:36:f1:8e:1a:45:24:7c:0d:3d:c8:
ec:40:0e:92:ad:2f:18:a8:14:62:9c:8c:1f:67:64:
24:b1:78:7a:28:21:36:e0:1f:3d:be:15:3c:78:ff:
c2:14:ad:59:b9:8a:0a:3e:31:74:bc:18:30:a6:55:
9e:7e:b9:8c:bf:fc:e5:6c:0c:88:c3:04:04:cb:85:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:32:11:2F:CF:C9:03:6A:49:8F:CC:21:63:44:03:2A:B1:91:AE:FD
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:02:65:57:12:19:9d:35:e7:6a:7c:34:91:55:b0:5b:ca:9a:
50:e6:23:6f:c6:bc:7a:50:63:6f:e1:77:3a:d5:38:44:cb:a0:
9e:c8:66:d3:69:c8:c1:4c:24:62:26:e3:48:ce:14:a2:b6:62:
2c:58:eb:e3:fc:3a:e0:d1:ea:e3:7e:8f:fc:05:71:66:86:53:
49:84:ea:f3:8c:7c:f6:79:12:93:fe:5f:bd:f2:f1:e4:81:8b:
5a:d9:01:fc:d6:8d:61:f6:f6:62:99:9e:d2:93:19:68:3b:40:
fb:d2:18:d7:80:45:2e:54:f3:e7:90:69:e7:a8:ed:d9:84:2f:
8f:88:39:1f:62:4f:5c:1d:ac:85:30:88:51:d7:0b:c2:27:45:
ff:d5:ef:43:0e:e1:3d:fb:23:ce:33:e9:0a:78:8d:dd:be:92:
83:1b:fe:f8:bb:e6:36:e6:34:a5:1b:57:8d:44:b0:ae:1f:3e:
86:30:a8:f3:de:c5:71:8c:3b:bc:d5:4a:81:fd:32:ad:82:3f:
2f:f5:fe:e5:7a:6a:e9:69:23:a3:80:29:b0:1c:55:86:b6:86:
ba:cf:a0:11:ce:35:f4:87:a3:5e:68:bf:e7:00:49:01:a2:f2:
2f:7c:e8:30:28:9e:02:eb:89:d1:a2:63:47:49:9c:4d:7e:f5:
6b:7f:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:10:42 2026 by rpki-client