
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
File: PrRw_U1nQhL_yCqZNvP-JUvszmY.mft (raw, json)
Hash identifier: MCsPDO499B0iU6I5Vvt0hHSNoaeJ2zJYhNnBIWr68ZE=
Subject key identifier: 3C:90:00:FE:53:21:7B:ED:06:3E:B8:DD:BD:DA:B5:CA:8F:92:D4:BF
Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Certificate issuer: /CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Certificate serial: 019D37C120F969DE71A0F26ABEAE76C61705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:01:36 +0000
Manifest this update: Sun 29 Mar 2026 04:01:36 +0000
Manifest next update: Mon 30 Mar 2026 04:01:36 +0000
Files and hashes: 1: LBDdRDDjw294mcZ0nbMxr8CzfS4.roa (hash: PPYwxRl5Le8Vm1g+lp2aZkNuPa03sEDkYEJw4YbvaRI=)
2: PrRw_U1nQhL_yCqZNvP-JUvszmY.crl (hash: nSVXOO5O0XdUzO8wFBfNRt+zPua/5T5EpyEOk37yUWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:20:f9:69:de:71:a0:f2:6a:be:ae:76:c6:17:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Validity
Not Before: Mar 29 04:01:36 2026 GMT
Not After : Mar 30 04:01:36 2026 GMT
Subject: CN=3c9000fe53217bed063eb8ddbddab5ca8f92d4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:67:5b:f5:4c:e0:b3:2d:7c:41:a0:42:06:f8:
4e:94:f8:c8:7c:93:93:08:f2:c4:fd:bf:14:d5:f5:
17:25:32:48:a0:4f:85:59:30:5a:fc:b2:be:03:70:
46:b9:41:3f:a5:ff:c2:87:af:50:f6:3d:70:0e:c9:
8e:6a:bf:41:52:14:85:8e:8f:35:62:27:5d:4c:ed:
00:78:ef:62:ba:9d:f9:11:82:ba:0d:ea:fa:b6:a4:
ff:41:68:10:e0:04:1b:b0:1f:4b:49:0c:bb:29:e2:
1b:16:43:9c:5a:82:80:16:74:a6:e9:d7:3c:6f:44:
e1:95:4e:20:33:42:f7:39:9a:19:62:2e:ab:9c:c0:
ea:ba:bb:69:5d:34:12:84:2a:ce:71:f3:94:53:b5:
89:4d:9f:68:5c:a8:9e:22:b5:35:fc:5a:9d:72:4e:
dc:62:44:60:66:06:8e:1e:85:16:6c:0d:a7:59:cb:
b0:35:80:57:ab:aa:45:1b:63:e2:a7:8d:92:84:a7:
e1:a0:9a:9b:fb:2b:11:51:9e:62:8b:13:46:f8:4f:
ca:77:3f:94:c5:c9:16:9a:b6:72:8f:7e:0d:6d:e5:
60:c9:fc:b7:fb:f2:15:53:0a:a0:28:ea:e7:1e:9c:
7b:c4:f8:7e:e0:f7:1f:49:ba:39:8f:b4:4c:3d:d7:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:90:00:FE:53:21:7B:ED:06:3E:B8:DD:BD:DA:B5:CA:8F:92:D4:BF
X509v3 Authority Key Identifier:
keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e7:02:96:2f:ee:8f:68:5b:14:28:0d:3a:74:05:46:af:a9:
ad:0e:c8:47:27:c0:66:c9:17:5e:11:34:ae:28:a7:d5:af:92:
46:b8:39:a7:f8:5e:00:57:7d:72:b8:30:20:86:d6:61:63:85:
c9:06:60:6d:0b:77:fc:46:c2:d2:59:5b:ad:dc:04:de:a8:d3:
c1:40:84:a4:d8:da:70:8b:c6:e2:8f:88:40:3c:c9:15:19:8d:
41:7e:0c:da:07:a1:0c:bf:6f:a3:59:27:c4:0f:0a:d9:1d:7e:
5d:90:26:46:94:46:5d:72:48:af:c1:79:0d:ba:3d:a5:4f:39:
1f:36:ea:a2:37:2a:f7:c1:d4:bb:b8:15:96:b9:78:97:b5:ae:
b3:57:84:bd:d9:1b:51:f6:38:5a:a2:9f:d5:8f:d7:76:39:33:
2f:5b:b9:c3:33:d4:41:82:77:e0:13:fd:47:da:9e:37:d7:74:
1f:cf:7e:5d:76:ed:fb:2e:f1:9a:06:29:71:4a:27:38:05:37:
03:3e:1b:9d:90:ad:c1:d1:83:99:f7:98:29:41:6e:8f:22:5f:
00:d9:ed:5c:d3:93:92:e9:bb:f7:de:04:ff:dc:3e:52:51:23:
27:da:36:90:85:32:dc:2f:41:18:ce:87:c1:5a:42:42:bc:ef:
2a:5f:3a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:51 2026 by rpki-client