Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: 35vYAKuzX5ojxJb2vG6S5JyJ1bhb5xUKXJ2f+NaLadE=
Subject key identifier: 77:A5:55:C1:97:6A:CF:13:07:0E:C5:D5:28:AA:71:33:2B:DF:05:FD
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 019D992B66111ABDADB267BACB76C58E1FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 054B
Signing time: Fri 17 Apr 2026 02:00:51 +0000
Manifest this update: Fri 17 Apr 2026 02:00:51 +0000
Manifest next update: Sat 18 Apr 2026 02:00:51 +0000
Files and hashes: 1: 9IdHCEJQuzKyxwFpT8ujYaesS9w.roa (hash: C3vAatIUJjp84Pk7IwDii/846WZ3p/AWV1sBtD8WSCA=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: oCwDTBufhgSWfIOR5zW2/anp2gNxrMpbreJFwhjHC/c=)
3: dAsT8XG2mpyNIJ5hpWhJSc5415Y.roa (hash: 8hFFOmMnHAAA9ytOGH8EO+wUtjGfAGKJiyYhcntZJUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:66:11:1a:bd:ad:b2:67:ba:cb:76:c5:8e:1f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Apr 17 02:00:51 2026 GMT
Not After : Apr 18 02:00:51 2026 GMT
Subject: CN=77a555c1976acf13070ec5d528aa71332bdf05fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:28:86:cc:c0:0d:55:36:27:d3:72:19:8b:
4f:21:be:fb:49:39:7b:67:e7:55:b6:ef:2c:2c:df:
ea:03:cc:75:44:f6:33:ff:51:0e:c2:5f:2f:58:c0:
2d:de:9f:04:b5:f1:85:5f:33:3d:8e:ed:c9:82:e8:
59:8c:97:3c:81:ea:ef:f7:ce:17:64:c9:df:7d:62:
ba:43:43:f3:bf:4a:04:a6:ad:da:09:70:ef:77:5a:
5d:fe:72:05:03:60:f4:06:4e:5a:14:c4:4a:9a:f4:
97:1c:75:11:f6:87:7c:6e:0e:b2:07:fd:62:2a:ff:
71:6a:f5:62:5e:be:e8:10:d3:94:6e:64:00:57:39:
35:4f:b2:a1:97:12:ef:df:78:86:50:41:cb:b2:18:
e8:a8:59:6b:4c:1f:53:c7:69:97:c8:ae:19:46:02:
63:c7:30:8f:73:71:41:1e:d4:9e:b7:8d:4f:58:8d:
ce:15:aa:d6:ef:0a:ab:d2:e4:a7:05:d6:d8:38:ab:
12:9a:0d:b1:ec:d4:2e:ad:7b:3c:61:7a:92:08:c3:
a9:ea:dc:3d:88:14:42:46:8f:f4:0e:e0:67:1b:3a:
22:e4:1a:c4:6e:bc:27:05:4b:98:51:fb:62:27:ce:
49:23:c2:61:45:98:4a:dd:fa:98:28:a8:7a:80:fb:
e9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A5:55:C1:97:6A:CF:13:07:0E:C5:D5:28:AA:71:33:2B:DF:05:FD
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c6:10:25:6a:d4:7c:47:14:c2:a2:b8:b0:d6:a9:64:ad:17:
95:8a:1c:c4:e9:47:3e:ec:6c:7e:37:2a:3c:97:0e:26:18:e6:
be:65:15:d0:e8:49:6b:bf:4b:de:0e:4c:b2:6b:4d:92:d7:0f:
a3:5d:db:cb:10:93:01:6f:e3:ed:29:46:1d:c1:b1:38:24:63:
2f:b2:e2:7e:3d:a3:92:ca:ab:28:4d:90:90:5f:29:24:b9:bd:
18:52:12:2a:0e:5e:9f:5e:84:b8:f4:e7:8a:de:1c:b5:68:91:
d1:0a:85:58:10:0a:0f:f7:b8:2b:19:bc:38:89:23:e3:7c:87:
02:bf:9a:e1:a8:dd:ba:f0:55:22:03:b8:77:84:14:22:34:29:
01:db:ba:04:e3:f2:f0:08:8a:52:0b:d1:e6:ea:31:3a:27:cc:
21:ac:c3:82:9c:cf:8e:67:78:91:8a:4f:1e:4b:53:46:3a:3e:
9e:55:9d:c8:b7:c5:38:23:04:d7:2b:bc:68:96:31:98:e5:6c:
73:bb:e3:c5:9c:6f:7d:c0:48:43:f2:bf:73:d5:c4:20:10:8b:
65:62:48:f6:e7:b6:f1:65:c0:b9:7a:88:da:c7:85:22:bd:b6:
5d:6c:b6:f6:11:e5:73:20:bd:7e:99:bf:35:4f:73:46:9e:29:
07:1f:d9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:16 2026 by rpki-client