
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
File: PrkDKEodFdwVitcYLqC854bOsq0.mft (raw, json)
Hash identifier: FLXp5X2h6Im0rR6l2SEwu0CiQeIfNs1IXf+mG8I0Cpo=
Subject key identifier: 97:8C:02:A6:D9:B9:BE:B4:63:C0:54:81:E4:58:32:10:70:22:9E:03
Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
Certificate issuer: /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Certificate serial: 019CA9B4059F43FF1968E546CCBC526CE318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
Manifest number: 04A0
Signing time: Sun 01 Mar 2026 14:01:13 +0000
Manifest this update: Sun 01 Mar 2026 14:01:13 +0000
Manifest next update: Mon 02 Mar 2026 14:01:13 +0000
Files and hashes: 1: 0YvRiJaJZjqiY4U-xsumT6SoggI.roa (hash: YTiMe+1zJLvdrTTLNgEUB7xot3ds3X6F9h1I4Xe21t4=)
2: B3iq0ONo7KLOXNajJEU9_fT8nMA.roa (hash: siU5btEhE4XbyXfdsJsLAjTiTcogO6P0/rPXIN7WNVQ=)
3: IwL0FMLGOg5VqlW52QhR55d_wK8.roa (hash: Aq8zdRXcEkkg8WYuPHmD2/Gn6hy/jyUt5aM4M2GLRVo=)
4: PrkDKEodFdwVitcYLqC854bOsq0.crl (hash: OjsLCtGsyKTlIt/bjK9QRwPvlkoM5LlfHIUtB30wrO4=)
5: WOoCoLlmgXWyjK9qc9u-G0Pct24.roa (hash: lAKUdMYHZA1+80qntfhhpebRSlcoxO0/6Bne+KUexMI=)
6: gAidUOyTKtWsqogbz8Z7j-XZYdU.roa (hash: lrMZ/6KYodQFNtZQsABnSoAbHRdnZBb25oeXCjN3StI=)
7: uYBeqEVIhrx2gm5XzZWN3p3D4AU.roa (hash: K8Zss15V+Clx8kaH4kgNih0FONp94O63mbG65PyxQS0=)
8: wQa-_QrhebKsuNtc3pbAHGeGKYE.roa (hash: mXyLCczbJEb1sWHa1tj9M1BYnDbJgfQv+z61kz4D2so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b4:05:9f:43:ff:19:68:e5:46:cc:bc:52:6c:e3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Validity
Not Before: Mar 1 14:01:13 2026 GMT
Not After : Mar 2 14:01:13 2026 GMT
Subject: CN=978c02a6d9b9beb463c05481e458321070229e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:12:3f:cf:a8:2f:e6:66:19:a2:6c:8f:06:
dc:1c:44:84:39:66:7e:17:91:7c:13:b7:12:96:8a:
8d:5d:4c:ca:f0:96:27:bf:1e:6e:13:22:f7:73:fe:
a2:ec:74:7d:42:05:73:bd:75:a2:d3:a0:34:77:48:
81:cb:ff:fc:e5:b7:7a:5e:73:87:88:9b:df:f4:b9:
b8:9c:ac:5e:8f:39:7a:a8:d5:66:f9:a1:c4:cc:cd:
50:c4:c8:eb:5c:44:d6:d2:95:a5:ad:ef:5b:9a:a6:
8e:7a:5a:ef:ce:07:c7:e3:db:e1:7d:a7:a2:e8:85:
aa:9a:34:32:cf:e4:7a:a0:58:d5:c0:cb:9b:29:cb:
4c:36:dc:0f:1c:d1:0a:88:f2:8e:a3:a8:70:56:8c:
0a:a0:6e:db:3f:8a:51:1b:8a:b8:ae:fa:cd:cf:3f:
bd:bd:83:3a:d4:a1:e3:be:3d:f0:c6:94:9a:32:9e:
36:62:a7:70:53:f2:f3:2d:cb:82:d0:d4:f6:56:52:
37:ec:e5:d2:d9:81:63:17:48:39:0a:53:3e:22:e9:
bf:d9:28:a4:38:78:60:1f:6d:67:16:e5:98:b8:ea:
35:c0:8a:b5:98:32:d0:5f:d1:7c:12:70:fc:75:c1:
c9:61:6f:78:70:1c:44:c0:0e:d1:55:00:83:bf:b6:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8C:02:A6:D9:B9:BE:B4:63:C0:54:81:E4:58:32:10:70:22:9E:03
X509v3 Authority Key Identifier:
keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:54:53:6f:de:24:a3:94:ff:9b:62:fc:ae:98:6c:f7:ff:26:
dc:4c:ba:bb:90:f9:6a:e6:23:ea:37:17:5c:6a:96:56:18:0b:
c2:53:8c:0a:61:86:8d:73:f9:b2:a2:f4:a6:92:80:1f:7b:7e:
10:8d:d1:3f:d7:60:02:28:ed:df:71:c8:ec:8a:c5:0b:0f:ff:
bb:58:5f:51:e9:4c:fc:53:1b:b5:36:5c:f3:a4:e6:b8:aa:ca:
4a:50:44:2e:b0:90:37:23:10:56:1a:00:75:cb:6e:6e:a4:ac:
67:33:2b:4d:99:b2:04:d2:1f:7f:f9:2e:71:3c:09:73:a5:b3:
ee:1c:dd:8e:09:87:0b:62:81:de:7e:b5:b1:05:1b:ba:34:db:
ae:bc:7a:7a:61:d9:26:19:2f:e7:c0:34:d4:1b:cd:2c:bb:37:
ce:67:aa:9a:e2:69:6e:ee:7a:b5:13:c3:1e:56:d2:82:ce:c4:
59:c0:d6:3d:49:5d:55:6e:d0:12:94:ad:5c:07:96:61:7b:bd:
3a:66:ab:19:58:5d:79:0a:a5:03:05:31:ee:c4:e1:17:52:0a:
16:af:29:16:10:28:bf:b3:6d:d2:13:95:26:a7:9a:2b:72:1c:
30:e7:52:82:1a:2d:a7:60:2b:a2:b3:67:24:b6:05:f0:db:49:
92:63:8e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:01 2026 by rpki-client