Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: hXHRH9G/NsyAHBET2HMSUnfLLSaCsFDUZqHbUI6eA6E=
Subject key identifier: 4F:53:5E:AC:81:C7:C1:D5:37:B3:37:02:66:AD:7B:28:60:13:EB:75
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 01A0BEE7C8D7D519F818BF5C6CF577F91D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 06ED
Signing time: Sun 20 Sep 2026 13:00:56 +0000
Manifest this update: Sun 20 Sep 2026 13:00:56 +0000
Manifest next update: Mon 21 Sep 2026 13:00:56 +0000
Files and hashes: 1: 9IdHCEJQuzKyxwFpT8ujYaesS9w.roa (hash: C3vAatIUJjp84Pk7IwDii/846WZ3p/AWV1sBtD8WSCA=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: FEOxtRZXyQ4sJ3TY2QTrd2zvcqOYQb/PdRBEP8o54E0=)
3: PxvDtGkLrRUdBdSSMkryKYSq5DQ.roa (hash: a1Y1p5Rfj50JqGUs7MR0i4IkKy2749qtvdCUmfhjfIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:c8:d7:d5:19:f8:18:bf:5c:6c:f5:77:f9:1d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Sep 20 13:00:56 2026 GMT
Not After : Sep 21 13:00:56 2026 GMT
Subject: CN=4f535eac81c7c1d537b3370266ad7b286013eb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:0e:fb:36:e0:1c:ac:31:99:1e:ff:22:38:
75:e3:7e:04:dd:78:aa:d9:64:28:41:0e:17:a0:aa:
69:2d:8b:89:27:c5:57:1f:08:6c:32:08:de:23:de:
90:89:37:10:d0:f7:1e:dd:1c:69:3e:52:e6:e4:ea:
fa:ad:a7:87:33:20:27:51:15:53:05:da:4f:8d:6b:
0c:29:98:a5:c7:ad:5e:0a:08:66:17:4d:29:27:da:
cc:6f:35:53:ba:41:23:7e:7e:93:ff:31:fb:e2:a5:
02:18:17:33:ea:72:35:f8:ec:e4:f6:bd:ed:d8:1f:
3e:0c:22:7b:94:6f:90:19:9d:b1:ad:a0:f5:7a:69:
41:93:6b:ab:5f:a3:1c:55:84:1d:f7:32:54:ee:8a:
9d:79:cd:1a:38:72:1b:fc:3f:6b:9a:d5:c9:b9:d8:
02:d7:1c:1f:50:51:92:96:05:4d:e4:05:a0:e8:f2:
c9:07:8c:b3:8b:44:b7:bf:79:9e:90:7a:ae:15:df:
65:da:0b:db:8a:01:9a:c6:8e:9d:77:25:9d:79:88:
85:e5:3d:c3:3b:f4:6b:b3:ad:cc:11:a4:26:83:99:
ec:e6:1e:1f:ff:81:8b:99:bc:84:00:d6:2e:56:e5:
32:b0:91:92:af:30:21:7c:7c:98:b7:10:a2:58:de:
34:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:53:5E:AC:81:C7:C1:D5:37:B3:37:02:66:AD:7B:28:60:13:EB:75
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6b:ab:53:07:11:d6:a4:cd:7c:1f:81:2f:90:dc:03:a9:cb:
34:94:c7:c2:c1:21:3e:41:b3:b6:e9:99:57:7a:7d:90:ca:61:
ca:de:9d:c2:71:ea:21:8b:10:0f:5f:9d:99:17:0b:18:8d:87:
3f:bb:c0:7b:18:be:85:c7:db:41:2a:ca:27:2c:37:f3:d8:e1:
2c:1f:4a:06:34:99:7e:70:d1:76:c5:49:1d:ac:1a:e5:d1:c5:
10:ca:fe:dd:d2:a1:81:fa:ac:63:52:ab:1a:bc:2d:e8:3a:a9:
fc:da:1d:64:15:50:5e:53:32:9b:d4:df:59:42:d0:af:4e:d2:
65:48:ee:10:8a:23:df:8e:bb:2e:1d:14:b1:b8:2a:57:6e:6b:
3c:13:a5:d0:54:57:b1:48:77:23:7a:10:c0:02:ef:43:b4:b0:
e0:ea:36:3b:f5:d3:63:e1:b0:9a:ed:1a:29:eb:58:23:16:f2:
ac:be:69:2e:31:02:da:fd:b5:af:00:f1:3a:e5:ca:a7:5b:cb:
2d:26:16:b9:14:c9:2d:57:c5:d1:a1:cb:13:b3:11:4f:31:a4:
ff:32:ea:65:ef:0a:8c:2f:3e:19:43:fb:84:4d:b3:e9:7e:32:
96:39:8a:c7:20:73:ae:0e:5d:4c:d5:2a:b9:03:5f:01:ba:dd:
c5:40:03:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:08:51 2026 by rpki-client