Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
File: PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft (raw, json)
Hash identifier: 1g65IFpKM0qLqiw64oGoPGGVrK3C/q+X8uqAvAySuAE=
Subject key identifier: F3:48:EF:80:40:33:D4:87:3F:6D:A8:D5:A2:5E:EB:C6:0E:A9:7E:2F
Authority key identifier: 3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
Certificate issuer: /CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Certificate serial: 019CAAC6B9948DA41C6A301FEAC6E79177F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:01:16 +0000
Manifest this update: Sun 01 Mar 2026 19:01:16 +0000
Manifest next update: Mon 02 Mar 2026 19:01:16 +0000
Files and hashes: 1: PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl (hash: Vz3wlSAxvHVlFG7AxQcTin9VYcjSddeyu3WfXRLS7iM=)
2: hl6VgB4kLfF0gYQB_c8vvP9sw9M.roa (hash: /Dm24RIVCygX2v7yBsB0ok3cyUYLJnR87PFrPkROav4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b9:94:8d:a4:1c:6a:30:1f:ea:c6:e7:91:77:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Validity
Not Before: Mar 1 19:01:16 2026 GMT
Not After : Mar 2 19:01:16 2026 GMT
Subject: CN=f348ef804033d4873f6da8d5a25eebc60ea97e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:2b:63:39:34:3c:78:61:28:5b:ee:4f:c8:
14:35:21:94:be:68:14:50:e3:8a:21:c9:f3:be:8c:
46:8d:c6:75:ef:86:7f:b9:4c:90:19:0e:38:16:aa:
17:96:ac:8c:09:93:0b:85:d8:42:e5:bf:b0:d2:7c:
33:41:12:b6:ca:6a:9e:81:dc:01:99:ed:2c:73:f0:
bf:0f:85:41:23:7c:5d:2e:8c:d7:0c:1f:8c:53:07:
17:54:f6:ee:71:5d:85:9b:72:8e:f2:d7:3e:1c:e8:
8c:bb:ba:0b:68:17:33:ec:a1:78:73:b6:ba:d1:b5:
36:6d:e2:1b:b2:05:22:2c:9e:93:70:a7:67:cf:84:
00:88:05:a7:86:69:27:e6:ea:48:ee:88:0a:62:12:
8e:63:89:4c:f1:6e:9e:e3:b9:c3:59:7f:8c:5e:7f:
53:c0:9a:6a:5e:6c:cd:5e:84:f4:60:5b:9c:8b:e9:
f8:3c:d9:d6:ed:65:cf:de:83:47:56:ab:15:d0:ef:
cb:98:7f:1b:12:94:de:63:8d:9a:9b:a7:8f:f9:49:
38:80:02:04:b4:e2:38:a1:24:57:af:a0:74:18:41:
2b:9f:58:58:ef:98:f6:67:45:7b:23:06:bb:99:62:
ef:db:ea:2f:84:84:e7:4c:83:36:53:11:13:c9:2c:
c6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:48:EF:80:40:33:D4:87:3F:6D:A8:D5:A2:5E:EB:C6:0E:A9:7E:2F
X509v3 Authority Key Identifier:
keyid:3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:17:9e:56:99:9e:4a:80:79:fb:16:c4:bf:b7:69:1c:7f:06:
a7:2b:21:bb:de:e3:d2:e1:dd:b5:c6:9b:0e:45:19:31:02:73:
25:f5:16:e9:0b:99:0a:2d:37:cf:e2:b5:d0:d6:82:a6:9f:56:
ed:8c:98:7b:92:57:3b:2c:22:c7:be:2b:58:15:d2:2b:d1:7b:
e3:d7:47:86:5d:8d:a8:f6:ff:33:b1:d7:1c:a5:4c:ce:af:35:
92:cb:84:78:90:63:47:ee:0d:50:6b:09:07:3d:b5:1e:c1:49:
e8:1f:db:8d:a5:d0:0f:4f:71:eb:18:da:37:20:79:ed:09:ae:
e1:79:3e:75:a8:6c:b2:43:54:60:bd:e1:3b:06:e9:0d:31:c9:
92:86:d0:4e:78:e9:84:73:4e:56:62:b7:30:74:8d:14:be:7f:
d8:72:af:b8:52:9f:ac:c3:02:b4:53:f7:b6:81:bd:ed:be:ff:
f5:7d:95:4d:61:58:6f:bc:7f:6a:b3:32:05:92:a6:bf:b1:f2:
3e:a2:23:31:1a:ca:48:83:6f:cf:31:ff:90:3a:e0:9f:7d:8d:
72:97:92:5f:4e:f5:a7:e9:b2:12:a4:07:90:81:1e:0f:80:4a:
04:f0:3d:88:da:78:8f:06:99:23:bb:3c:cc:f5:77:1f:95:10:
2d:39:cf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:18 2026 by rpki-client