Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
File: PRRSju_C35P_tOdPobZQO3btls4.mft (raw, json)
Hash identifier: 2FKQ0p9r6vF75clj17USvks3cJyjiEdLeOJn0KSUQ28=
Subject key identifier: 45:71:C1:07:A7:A9:4F:25:17:46:CB:80:0B:7E:72:8E:1D:C3:D0:57
Authority key identifier: 3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
Certificate issuer: /CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Certificate serial: 019D389C33D8CE5D1301BECE9EBF620E1F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:53 +0000
Manifest this update: Sun 29 Mar 2026 08:00:53 +0000
Manifest next update: Mon 30 Mar 2026 08:00:53 +0000
Files and hashes: 1: PRRSju_C35P_tOdPobZQO3btls4.crl (hash: qY9bNYLBI/osEhiQM6ZaBnR7LCPlcBoRXoV0YCyiwXE=)
2: qXL9HCnEZZ0eLCvEYVXXykmvKrI.roa (hash: lHRVSCUWXdm2fQuE7zCvC4y6PM1rko+SEbGui1sO7jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:33:d8:ce:5d:13:01:be:ce:9e:bf:62:0e:1f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Validity
Not Before: Mar 29 08:00:53 2026 GMT
Not After : Mar 30 08:00:53 2026 GMT
Subject: CN=4571c107a7a94f251746cb800b7e728e1dc3d057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:3c:3a:a3:b2:eb:b6:68:5f:a1:12:a0:c4:
c1:68:ff:da:48:32:e6:6b:da:2b:13:69:f2:e1:e9:
e0:0b:35:a4:3e:07:20:88:b6:42:3d:64:8f:0c:61:
aa:cd:b9:78:68:50:94:cb:f2:27:d6:74:45:74:70:
03:01:7c:a2:ef:dc:0f:8b:b0:80:64:4b:4d:f2:8f:
b9:9d:bd:89:b7:85:e2:7d:cc:2e:07:bf:9a:3a:bc:
cf:7f:75:af:d8:56:62:76:62:3a:41:57:bd:f2:19:
94:66:43:d5:1d:2d:5c:ed:d0:72:4b:a0:7a:40:f4:
51:73:c8:f8:49:f1:8a:6d:fb:73:f4:a5:56:23:2b:
5a:74:be:c2:11:55:a3:56:f4:fe:55:1a:dc:b9:ed:
e2:25:80:de:b1:32:2e:07:90:42:14:5f:07:b4:81:
20:4c:1b:a6:43:f4:41:54:3a:8a:eb:9f:a1:85:ee:
1e:84:d6:4b:86:d2:bb:16:0a:2a:9a:f4:80:b4:06:
2a:e5:31:a4:56:56:ae:0b:77:25:ac:fc:88:47:d4:
c7:00:76:6b:45:1b:67:31:a0:f5:77:7c:cf:dd:f4:
1f:d9:6d:b2:ac:09:3e:9d:de:ec:e6:7d:a5:74:7e:
d0:98:41:ca:07:97:63:d1:d0:b6:1d:85:a1:61:d4:
1b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:71:C1:07:A7:A9:4F:25:17:46:CB:80:0B:7E:72:8E:1D:C3:D0:57
X509v3 Authority Key Identifier:
keyid:3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c9:b3:49:fc:35:db:39:91:87:1a:03:83:73:37:ab:ec:46:
6d:0b:ab:6a:1f:39:53:1e:78:19:1a:3d:b7:6f:73:a2:02:dc:
5b:6f:f8:3b:0e:d3:c9:29:b7:47:da:8f:e8:b8:bd:15:14:6b:
39:f0:bb:24:56:43:e3:cd:e7:75:13:ee:ce:10:78:7b:65:26:
40:1b:3c:73:6c:50:09:67:1a:cc:bd:66:92:ed:0b:79:2d:5e:
71:57:52:fd:22:c5:a9:c7:41:78:13:c6:df:28:16:03:94:5b:
46:73:9b:9a:14:0a:f8:d4:c4:a9:a6:30:c5:6f:be:23:57:df:
fb:bc:f5:9d:e7:0c:39:a5:f4:d5:3e:55:5d:96:62:47:fc:f4:
9f:79:44:20:14:84:64:d5:93:c0:0c:8b:4a:00:1c:6e:45:40:
04:1c:93:3e:ce:d9:49:a4:40:c3:80:13:3d:05:3e:c3:00:92:
db:d6:37:94:32:97:b0:de:7b:8e:85:1d:76:a9:30:53:60:e3:
01:85:2b:74:21:32:94:cd:ae:ab:ae:9c:04:eb:53:a4:9a:11:
e6:2b:0f:4e:f8:4a:00:17:41:70:ea:55:36:fd:4c:63:d3:e9:
9d:fd:7b:02:2d:a4:ff:a4:4f:b2:cb:a1:cc:1b:c2:6a:d7:ef:
b0:2a:f2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:40 2026 by rpki-client