Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: LSrUVwBgzATqT1Th76Wg8VhcV5sDgl1U5U4jJN0IORM=
Subject key identifier: 7B:30:D7:9D:78:C7:19:A0:B2:45:88:15:BC:D8:60:EE:1F:17:25:B4
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 019CABA1CB79015F0CF7CF22069EBF2FBEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 04D0
Signing time: Sun 01 Mar 2026 23:00:33 +0000
Manifest this update: Sun 01 Mar 2026 23:00:33 +0000
Manifest next update: Mon 02 Mar 2026 23:00:33 +0000
Files and hashes: 1: 9IdHCEJQuzKyxwFpT8ujYaesS9w.roa (hash: C3vAatIUJjp84Pk7IwDii/846WZ3p/AWV1sBtD8WSCA=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: ihN+3ofZICqoFvZIs23GmtWRzB6PuGKk7BWf5RDavlo=)
3: dAsT8XG2mpyNIJ5hpWhJSc5415Y.roa (hash: 8hFFOmMnHAAA9ytOGH8EO+wUtjGfAGKJiyYhcntZJUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:cb:79:01:5f:0c:f7:cf:22:06:9e:bf:2f:be:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Mar 1 23:00:33 2026 GMT
Not After : Mar 2 23:00:33 2026 GMT
Subject: CN=7b30d79d78c719a0b2458815bcd860ee1f1725b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:be:74:f0:1e:ce:f8:2b:08:31:83:ef:2c:7d:
eb:38:79:05:50:d2:72:42:6a:e3:e6:6d:cd:cb:6a:
8e:9b:3e:de:55:74:c8:b9:d6:70:af:2f:53:cc:8d:
b2:e2:6d:22:2e:37:a7:71:2a:01:4c:97:a5:ec:48:
a5:d3:98:c6:5e:1f:8e:38:93:48:fc:ba:17:11:11:
18:82:b8:f5:42:e0:ad:27:1b:6e:e3:58:b0:43:dd:
5e:7d:5a:97:3e:57:20:7c:97:ec:c0:cc:38:17:1a:
03:1b:aa:d5:54:b5:3b:81:e6:db:d4:56:6e:c4:1e:
81:10:eb:60:1d:d3:fe:e7:88:b9:1a:c8:d9:c3:82:
c1:19:bf:cb:26:8f:de:6d:25:87:83:06:38:9c:40:
05:66:cc:47:44:6f:60:15:7d:fe:1c:3a:48:ac:13:
14:79:ee:92:91:31:41:cb:c4:76:f9:5c:d5:fc:e4:
d5:68:89:5a:0c:be:3b:9f:3b:a1:fe:eb:0d:96:ed:
22:a2:13:a8:a1:eb:0a:6a:fd:44:eb:3b:c0:cd:14:
6d:27:01:00:66:10:9e:5c:91:02:02:eb:ab:a4:dd:
be:c1:cd:e8:3e:04:81:b9:03:52:c1:ab:9b:d2:e1:
38:6b:95:55:ff:da:24:6d:ec:be:7a:3b:5e:d0:80:
98:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:30:D7:9D:78:C7:19:A0:B2:45:88:15:BC:D8:60:EE:1F:17:25:B4
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b2:0f:da:2c:52:21:82:1f:82:14:d9:69:2d:15:ab:3c:12:
f6:33:21:9b:d2:49:ba:f2:9d:f8:85:b6:30:3b:bc:d6:1e:79:
82:b9:45:83:07:a5:98:33:b6:4e:b7:74:2c:88:89:1a:2e:07:
82:b3:57:0d:d0:7e:8f:b4:5b:e2:a3:a2:78:d0:6c:d3:22:d8:
72:cc:c3:02:60:f8:29:61:f7:b1:bd:f7:d0:59:ad:b1:83:35:
35:aa:a1:84:15:be:71:a2:d5:f8:41:97:0a:da:23:61:c1:d9:
38:0e:a1:5b:f3:24:62:ad:bf:95:59:77:a0:f7:23:7e:9e:92:
11:2a:6e:7d:c7:9a:47:74:c5:97:16:fe:58:12:08:0c:aa:cb:
7d:bb:a5:c2:a3:f7:1b:da:00:33:05:01:79:ac:a7:7e:53:66:
0f:2c:b4:3b:0e:2f:60:a7:54:73:60:58:df:56:8b:18:89:33:
f2:56:49:36:9e:57:c6:97:60:ff:35:fa:e6:35:b3:db:6c:d5:
2f:14:20:68:d7:19:89:42:af:bf:2a:5c:1e:7c:3c:81:a0:e1:
7b:01:3c:6d:be:7a:f8:68:31:d0:27:61:b7:03:42:05:c1:50:
ed:44:22:cf:bd:33:01:0e:bc:fb:35:dd:71:45:c3:2b:11:e5:
67:b2:b2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:41 2026 by rpki-client