Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
File: PryeUbqrPD5qtpn8tEPwB_VGw_s.mft (raw, json)
Hash identifier: MuI+nhmIth/zyQ7Wb6Y4kou/Nnbl4ZOlzN0eT6emGcA=
Subject key identifier: 2B:05:95:8B:63:D8:05:C3:67:D4:80:CB:1F:97:3F:B3:48:A8:70:04
Authority key identifier: 3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
Certificate issuer: /CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Certificate serial: 019D37C084C649A09C58AD3FA0B22FCB672C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 04:00:56 +0000
Manifest this update: Sun 29 Mar 2026 04:00:56 +0000
Manifest next update: Mon 30 Mar 2026 04:00:56 +0000
Files and hashes: 1: PryeUbqrPD5qtpn8tEPwB_VGw_s.crl (hash: 7odUcdrKdaAxn+CegQsIwlEhT34nd9oXmNS3HQIznDI=)
2: sCE1yodUvj9BdJNK5llFZ8BEDYY.roa (hash: 3/B6MniV1srlZK4xMEp39gTJz673XIWVDanm60XM8zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:84:c6:49:a0:9c:58:ad:3f:a0:b2:2f:cb:67:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Validity
Not Before: Mar 29 04:00:56 2026 GMT
Not After : Mar 30 04:00:56 2026 GMT
Subject: CN=2b05958b63d805c367d480cb1f973fb348a87004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6f:81:0a:af:37:17:26:22:f6:1e:a4:b4:23:
42:45:84:63:41:d6:a2:de:73:14:1b:12:c1:c0:0a:
c2:1a:b6:72:e8:e2:b2:75:eb:76:2f:9d:17:d3:3c:
72:7b:71:a0:22:7d:5a:5c:ae:ab:1b:72:ed:95:77:
84:9a:c0:7d:3d:7c:0d:79:eb:0a:74:e4:53:d3:d6:
1f:c5:39:4d:5a:ba:68:52:79:d1:3e:ea:31:fb:fc:
a9:5c:0b:57:e6:9e:e6:4b:40:56:c2:97:6f:86:51:
e6:3a:cf:6e:5e:1c:87:68:e4:19:80:42:88:0e:e8:
a5:25:53:d0:44:3c:68:44:5d:7d:a2:a8:0a:85:48:
06:ea:e2:2f:df:a0:10:41:24:57:40:77:99:3e:70:
80:52:ea:6c:53:ff:ec:f3:f5:e8:fb:de:a1:00:84:
85:ff:9c:2f:a7:c4:e9:d5:bd:af:2b:d5:38:b7:71:
41:7e:28:29:6f:82:c7:14:02:a7:c3:57:93:b5:8c:
60:ee:a6:e6:41:1b:28:bc:3c:11:11:6e:19:d3:63:
b4:04:2d:5a:93:94:31:85:ed:e0:db:be:bf:51:73:
1e:53:9f:99:b1:cc:14:69:23:d4:0c:ee:d4:55:05:
e2:6c:c7:a1:71:36:11:45:d2:13:26:24:b1:93:cb:
cc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:05:95:8B:63:D8:05:C3:67:D4:80:CB:1F:97:3F:B3:48:A8:70:04
X509v3 Authority Key Identifier:
keyid:3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5c:61:a3:c5:fd:f1:a5:c2:a8:6a:bc:db:16:14:e0:a7:df:
67:a8:f3:ee:84:29:48:4b:68:4a:66:ff:1f:be:d0:3e:2b:89:
76:52:43:e4:01:49:0d:a7:73:8b:33:97:e9:62:2b:cc:e1:ad:
fe:dc:35:89:bb:d8:59:58:99:9d:b5:1e:17:2f:dc:25:a1:b0:
05:88:0b:24:9a:64:73:17:c3:c6:85:83:f0:c3:e7:af:4c:12:
03:e2:1c:dc:1c:e5:57:80:1e:c3:9b:49:69:12:79:ed:bb:fa:
a2:fd:b7:f6:92:d0:11:5a:f1:46:39:ca:6b:9d:d1:1a:a8:97:
a0:e7:40:52:76:35:1e:09:2c:a9:7f:9b:60:83:34:7d:49:4d:
b8:76:9b:25:81:c7:42:2d:1b:52:27:f4:24:f0:5e:7d:84:95:
91:a9:da:d7:c6:c0:7b:92:c8:34:7c:91:76:50:02:f3:6a:fc:
d3:a7:a0:ac:f2:90:90:a6:fe:50:e1:e8:9b:79:a4:0c:7b:95:
18:62:de:5e:07:83:9d:ef:30:5b:1c:e3:1b:43:37:13:b3:4e:
b2:04:19:95:dd:20:35:f8:86:9d:0e:74:33:d5:9a:f3:38:f2:
b8:63:4a:11:e5:37:d5:d3:4b:4b:87:05:62:d7:ba:25:af:2f:
2f:3e:69:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:35 2026 by rpki-client