
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
File: PRKXkoZrFiE7VsW_pr66x8YYsVA.mft (raw, json)
Hash identifier: OoMJeUjxBkEwaL3LQD3lOBf1aJLlSrrV9bikqTN6Ydk=
Subject key identifier: 93:5B:ED:B7:DB:E8:A4:AE:AE:C7:6A:BA:C5:DA:85:66:BD:B1:A6:74
Authority key identifier: 3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
Certificate issuer: /CN=3d129792866b16213b56c5bfa6bebac7c618b150
Certificate serial: 019CAB6B5010E5121225BBFF6A4D058E0E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
Manifest number: 13D4
Signing time: Sun 01 Mar 2026 22:01:02 +0000
Manifest this update: Sun 01 Mar 2026 22:01:02 +0000
Manifest next update: Mon 02 Mar 2026 22:01:02 +0000
Files and hashes: 1: PRKXkoZrFiE7VsW_pr66x8YYsVA.crl (hash: cTtWJD+dUVpWfByrURTl46Jm+Fyc3NphWaS2pXaJwyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:50:10:e5:12:12:25:bb:ff:6a:4d:05:8e:0e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d129792866b16213b56c5bfa6bebac7c618b150
Validity
Not Before: Mar 1 22:01:02 2026 GMT
Not After : Mar 2 22:01:02 2026 GMT
Subject: CN=935bedb7dbe8a4aeaec76abac5da8566bdb1a674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:9c:be:e8:2d:59:9e:b1:ff:e8:49:b9:44:
74:2d:c9:d9:63:83:75:f9:5b:6a:5b:c9:8e:2f:29:
62:21:90:2d:32:4c:76:06:b3:06:11:34:bc:f4:eb:
b5:86:d3:f6:62:22:6b:a5:e8:d8:21:5e:16:ab:fe:
d8:51:a2:02:86:ca:47:7c:c8:30:a2:b0:e9:6b:29:
4a:62:e7:3a:b6:67:a1:62:04:f5:04:25:38:82:f1:
46:0e:0e:c2:d9:90:fb:dd:76:66:60:fc:b8:d4:44:
cd:fd:7c:6e:29:36:5b:55:ec:61:f6:28:a2:e1:1f:
18:9f:cb:86:04:04:a6:12:0f:e9:4a:bf:da:2a:0e:
ca:e6:72:5b:3e:30:4d:11:f0:66:f5:b2:0e:0c:5f:
ef:32:8c:a6:65:ae:f4:fb:89:5a:a0:db:71:dc:ec:
c9:15:d4:fc:aa:e9:85:55:dd:1b:7e:ab:d9:66:e8:
dc:aa:06:1d:3c:b5:7a:6f:ae:93:d6:2d:47:31:65:
9c:4b:67:44:da:12:28:28:ba:7d:65:86:e0:e6:b2:
1a:d8:bd:da:d3:e1:6a:b8:fa:72:ae:df:7e:e0:66:
e4:e1:65:be:4c:3c:3c:16:d8:c8:40:d9:97:b4:47:
8d:3c:11:48:c5:8e:ac:bc:9f:08:51:2f:fc:23:61:
94:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5B:ED:B7:DB:E8:A4:AE:AE:C7:6A:BA:C5:DA:85:66:BD:B1:A6:74
X509v3 Authority Key Identifier:
keyid:3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:13:d4:a0:7f:e2:a2:65:5e:8e:a9:b9:61:b8:39:94:61:2c:
18:e6:3a:fa:af:00:16:ec:cb:f6:68:54:9f:f1:a0:f2:d0:82:
85:05:c6:f9:18:c7:10:12:08:3a:4b:89:08:2a:62:75:0c:de:
9e:fe:3d:fa:87:2f:10:f2:f8:bf:6f:c8:21:af:2b:83:64:b2:
b3:6a:cf:bb:9c:9a:ff:1e:27:d1:df:36:62:00:6c:38:07:50:
97:73:3c:ad:be:0d:12:9f:cc:7d:f2:7c:5c:2e:50:bc:52:68:
51:73:92:27:ed:bc:d1:a4:74:d1:ee:0a:40:44:a5:ac:fd:69:
51:fe:73:60:82:17:ed:bc:58:48:fd:f7:a3:53:ee:6a:2e:6f:
c8:ea:da:32:1d:e1:85:95:f4:81:13:4f:18:12:cd:80:9b:b5:
e6:63:2a:c5:f8:a1:84:ab:77:ed:35:4a:d0:72:e7:0c:7c:d7:
f7:98:d3:96:ca:22:d0:5a:b6:3f:fc:a3:5f:1f:f3:16:d7:51:
09:7e:c1:a3:ab:f1:53:b1:2e:1d:50:9f:7b:98:78:d1:63:64:
20:bb:7f:0f:15:83:4c:be:ad:be:5c:6d:6a:4f:20:81:9b:e1:
6d:2a:1c:dd:bd:19:42:d3:d4:65:a7:a3:c8:aa:d1:40:43:36:
22:af:39:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:26 2026 by rpki-client