Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
File: PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft (raw, json)
Hash identifier: nWu+Ru3nO5qKw9WIYjege7ru8Hw6+DjBd7cgY6BiieE=
Subject key identifier: DC:7D:DD:2D:70:3F:6A:15:D5:78:F7:25:F5:A4:A5:B3:24:FC:E2:13
Authority key identifier: 3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
Certificate issuer: /CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Certificate serial: 019D9A3EA723E397F05FDAFBD4F1759306A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 07:01:30 +0000
Manifest this update: Fri 17 Apr 2026 07:01:30 +0000
Manifest next update: Sat 18 Apr 2026 07:01:30 +0000
Files and hashes: 1: PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl (hash: T9ZTo/4a17DE6ldH/CqaZXKriE+CxjcQdesX79gGah4=)
2: hl6VgB4kLfF0gYQB_c8vvP9sw9M.roa (hash: /Dm24RIVCygX2v7yBsB0ok3cyUYLJnR87PFrPkROav4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:a7:23:e3:97:f0:5f:da:fb:d4:f1:75:93:06:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Validity
Not Before: Apr 17 07:01:30 2026 GMT
Not After : Apr 18 07:01:30 2026 GMT
Subject: CN=dc7ddd2d703f6a15d578f725f5a4a5b324fce213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:86:36:7f:a5:26:8f:17:11:45:16:f2:e6:
22:9d:e8:8d:b3:cf:d1:22:0a:09:0a:62:e3:9e:80:
93:fc:72:ca:f4:31:0f:6a:d3:7f:02:f3:71:97:28:
ef:e0:15:f0:1f:3a:a6:d4:0c:d4:8f:8f:2d:c3:4d:
17:f8:fd:a6:b2:0d:15:e9:88:62:71:b4:51:34:c1:
4e:4f:95:a0:62:33:16:82:42:9b:ad:63:ca:79:cc:
60:9d:38:4c:73:f9:74:11:e3:16:35:93:78:e9:b4:
2d:d5:73:ae:6b:95:0b:32:b7:18:d9:d2:51:9f:dc:
a2:76:fc:18:61:d1:b2:73:44:1b:90:c5:65:77:12:
1f:45:ed:15:c5:e4:82:64:50:38:34:e1:8f:79:2a:
fc:5a:ed:4c:71:b6:5f:3d:a3:87:20:13:8a:10:7a:
6d:72:8f:e0:a8:be:e0:92:3d:30:7e:0a:e5:77:50:
72:c8:7d:8c:3f:92:51:0f:d6:c2:41:17:91:b0:cb:
5e:a7:13:0d:e5:dc:24:f7:85:18:40:d5:ad:f4:f8:
2b:bf:5a:55:f7:86:21:2c:2d:72:f4:74:b0:00:f3:
7e:9f:9a:70:5c:80:a1:f8:73:60:2b:b3:e1:d2:88:
21:e7:74:7b:ae:c5:98:5b:fe:a8:9e:93:27:ba:58:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7D:DD:2D:70:3F:6A:15:D5:78:F7:25:F5:A4:A5:B3:24:FC:E2:13
X509v3 Authority Key Identifier:
keyid:3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c1:d8:d8:e8:34:15:ed:80:fb:22:95:f0:d6:c0:ab:24:87:
49:83:2a:7f:1e:cd:87:6a:b7:ee:ec:8d:5e:98:b8:21:02:a9:
7c:f2:8d:6c:0f:83:cf:98:b9:f4:e2:fb:ad:c7:8b:b7:a3:6b:
e6:fc:02:12:98:3a:14:a2:6f:54:66:98:9e:68:26:55:a2:a8:
d3:40:ef:cd:fb:2b:24:15:e9:8d:2b:1c:19:bb:e3:b1:7c:2f:
2e:5a:b4:da:d0:ba:81:1f:8f:ce:f1:8f:24:3f:ce:c7:1f:36:
b0:df:db:79:a9:f4:6d:33:a5:a6:49:f6:d8:f9:a3:a8:c5:84:
8b:27:63:bc:d2:66:0f:d5:a0:f6:50:e0:83:55:5d:d2:fd:12:
54:ec:bd:c0:18:73:e9:be:fa:fb:96:eb:b8:20:a6:d5:c2:a6:
e1:ac:2a:37:60:42:63:08:23:dc:76:a9:11:73:eb:44:6c:7c:
75:80:fe:31:69:64:f7:bf:9f:f7:d2:2a:15:bd:5e:7d:09:ee:
22:03:bb:ff:4b:96:e8:5b:74:a3:a9:34:a6:da:be:45:c4:37:
e5:39:cd:0d:93:42:01:4b:64:d7:d9:7c:dc:1f:e7:8e:fc:ea:
4f:b7:dc:1d:33:03:83:89:62:28:4f:34:80:8f:f5:54:1f:69:
d8:ec:99:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:34 2026 by rpki-client