Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: OpNlhXAqSKqmTkm1jytRmOdfarkJFWKok68sQNusev8=
Subject key identifier: 25:F7:5B:07:A7:4E:77:E1:41:C4:9F:CE:A9:82:18:DA:A5:42:D3:69
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 019EBEB59C0A413F8B116299180E5ECA032B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 05E3
Signing time: Sat 13 Jun 2026 02:00:33 +0000
Manifest this update: Sat 13 Jun 2026 02:00:33 +0000
Manifest next update: Sun 14 Jun 2026 02:00:33 +0000
Files and hashes: 1: 9IdHCEJQuzKyxwFpT8ujYaesS9w.roa (hash: C3vAatIUJjp84Pk7IwDii/846WZ3p/AWV1sBtD8WSCA=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: 1cHrivwARiBBxNqU26/sb/cxo5Jy9Z0YA70YZaZXY5M=)
3: dAsT8XG2mpyNIJ5hpWhJSc5415Y.roa (hash: 8hFFOmMnHAAA9ytOGH8EO+wUtjGfAGKJiyYhcntZJUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:9c:0a:41:3f:8b:11:62:99:18:0e:5e:ca:03:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Jun 13 02:00:33 2026 GMT
Not After : Jun 14 02:00:33 2026 GMT
Subject: CN=25f75b07a74e77e141c49fcea98218daa542d369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7b:49:9e:65:e8:ea:33:b9:eb:53:b2:8c:a9:
00:ed:83:28:10:c9:f7:ae:96:f5:81:98:57:90:a5:
9d:7a:36:c8:4b:48:0a:4e:88:cf:e0:3b:89:05:74:
71:30:58:ee:35:36:73:b7:4f:db:00:9b:7b:56:87:
ce:b0:2a:e5:2f:c6:4c:9f:f9:a4:d0:a8:9a:3d:88:
cd:d6:21:d2:93:ab:27:be:e2:9f:73:48:5c:8f:b3:
3f:b6:5b:23:a2:8e:35:a4:a5:0c:15:ee:21:ab:16:
9b:18:7e:d4:3d:8c:ec:17:2e:a1:ae:5a:fb:21:76:
e9:c8:58:45:62:8a:49:bb:9e:22:ed:7f:7a:25:5b:
95:86:4f:8b:45:31:ee:86:f1:da:7e:d3:d7:70:85:
fa:6a:c7:2e:f3:f2:03:6f:36:c9:9d:be:74:cd:7c:
42:b2:27:b3:d2:38:f9:5e:c2:66:b1:c2:f4:f8:be:
c4:35:54:52:0b:a9:1b:0f:19:ca:8d:9c:28:02:11:
40:21:3f:0f:c7:75:71:de:61:d2:c7:81:7c:c6:fd:
cd:a6:49:6e:84:5a:2e:78:14:7c:7e:00:57:19:cc:
9b:44:df:ec:22:5d:75:a4:b8:61:28:cb:9c:a0:a0:
78:30:cd:e6:2e:b5:66:1b:d8:4d:e3:ab:c2:76:44:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F7:5B:07:A7:4E:77:E1:41:C4:9F:CE:A9:82:18:DA:A5:42:D3:69
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f4:ba:14:42:7f:50:18:e0:4c:e2:0e:fb:8a:7f:d7:7a:ad:
a1:55:c4:20:5d:42:78:7b:4b:94:0d:bf:e7:22:df:46:1d:8f:
58:d3:db:f0:0c:a3:12:23:fd:7f:ae:7e:17:eb:42:ad:42:5b:
9b:27:6e:ec:7c:cf:f6:0e:f1:b2:b7:8e:b8:c1:bd:67:b0:4a:
1c:8b:cf:33:cc:82:76:58:95:77:f0:5e:93:6c:5d:a0:cb:1d:
e3:c3:80:af:fe:9c:24:26:45:f1:b6:6f:99:eb:48:33:98:39:
6b:b1:43:e8:a3:18:ff:83:c9:9d:60:c3:91:88:f8:63:5d:64:
5e:ce:31:ee:b9:ba:bc:95:c7:7b:a7:a9:85:51:27:2f:ab:4e:
8c:04:fc:04:10:2a:a6:a7:c9:34:fb:13:b4:76:42:0e:62:3f:
79:50:05:a4:c4:83:47:d5:0c:5a:41:57:c0:43:d1:30:51:55:
3c:4a:71:9e:52:7c:d8:ad:85:ae:18:68:74:48:91:ee:0c:aa:
2d:e3:28:72:dd:b9:3d:85:ba:b4:5d:33:28:9f:b1:26:46:c5:
02:71:03:5a:71:18:1c:9a:56:3f:62:55:3b:99:63:2f:6b:ea:
3d:e2:e8:59:05:79:6f:d0:19:88:e3:a7:35:92:34:92:d8:b1:
e3:1a:3b:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tZwKQT+LEWKZGA5eygMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTFmYmE0M2Y1N2FiMDQ0NWU1NDJmY2VlY2I4NzY4MTY1
N2NjZjMwHhcNMjYwNjEzMDIwMDMzWhcNMjYwNjE0MDIwMDMzWjAzMTEwLwYDVQQD
EygyNWY3NWIwN2E3NGU3N2UxNDFjNDlmY2VhOTgyMThkYWE1NDJkMzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3tJnmXo6jO561OyjKkA7YMoEMn3
rpb1gZhXkKWdejbIS0gKTojP4DuJBXRxMFjuNTZzt0/bAJt7VofOsCrlL8ZMn/mk
0KiaPYjN1iHSk6snvuKfc0hcj7M/tlsjoo41pKUMFe4hqxabGH7UPYzsFy6hrlr7
IXbpyFhFYopJu54i7X96JVuVhk+LRTHuhvHaftPXcIX6ascu8/IDbzbJnb50zXxC
siez0jj5XsJmscL0+L7ENVRSC6kbDxnKjZwoAhFAIT8Px3Vx3mHSx4F8xv3Npklu
hFoueBR8fgBXGcybRN/sIl11pLhhKMucoKB4MM3mLrVmG9hN46vCdkR/ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCX3WwenTnfhQcSfzqmCGNqlQtNpMB8GA1UdIwQY
MBaAFD0R+6Q/V6sEReVC/O7Lh2gWV8zzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYt
YzVkZDM4NTdhNGQyLzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYtYzVkZDM4NTdhNGQy
LzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvS6FEJ/
UBjgTOIO+4p/13qtoVXEIF1CeHtLlA2/5yLfRh2PWNPb8AyjEiP9f65+F+tCrUJb
mydu7HzP9g7xsreOuMG9Z7BKHIvPM8yCdliVd/Bek2xdoMsd48OAr/6cJCZF8bZv
metIM5g5a7FD6KMY/4PJnWDDkYj4Y11kXs4x7rm6vJXHe6ephVEnL6tOjAT8BBAq
pqfJNPsTtHZCDmI/eVAFpMSDR9UMWkFXwEPRMFFVPEpxnlJ82K2FrhhodEiR7gyq
LeMoct25PYW6tF0zKJ+xJkbFAnEDWnEYHJpWP2JVO5ljL2vqPeLoWQV5b9AZiOOn
NZI0ktix4xo7zQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:17:45 2026 by rpki-client