Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier: ReY+XYM74W+YxYtIy+Ygj5cOgj83waPrgAzbo6VUiCY=
Subject key identifier: 03:3E:D1:29:DE:05:42:DD:4F:2A:FF:5B:82:15:3F:73:10:45:9D:D1
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 019F85D5F36F95C768A56B9097377DBDB927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number: 1287
Signing time: Tue 21 Jul 2026 18:00:18 +0000
Manifest this update: Tue 21 Jul 2026 18:00:18 +0000
Manifest next update: Wed 22 Jul 2026 18:00:18 +0000
Files and hashes: 1: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: KtmBHXFL4LMmNEHPUqHKVGj86sJusmnDctWyz9m6Kyg=)
2: wumUMMWvHiUrTabZLhTSravhO6c.roa (hash: p2VcOKl2dOd/4+FLAlcMShjCSyG2pmnKtd0Km8VqtxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d5:f3:6f:95:c7:68:a5:6b:90:97:37:7d:bd:b9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Jul 21 18:00:18 2026 GMT
Not After : Jul 22 18:00:18 2026 GMT
Subject: CN=033ed129de0542dd4f2aff5b82153f7310459dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e8:c7:8b:4d:e4:88:6a:c8:71:ff:d1:1e:75:
36:6e:3f:0a:35:53:81:98:9a:bc:44:d6:f7:88:c1:
51:e8:cb:2b:2b:3d:f5:18:13:dc:ac:20:80:ec:55:
7e:03:a7:dd:e7:ba:46:fd:bd:7a:02:0e:21:68:9f:
f1:7f:35:e8:fb:25:77:87:5d:e3:4b:43:76:42:a2:
89:a1:00:89:b9:f0:61:47:03:9f:fe:e6:8e:43:a8:
c0:72:20:ee:12:80:32:98:af:a7:60:c5:6b:74:1f:
96:ce:0b:10:38:31:89:5a:41:3a:5a:a5:b3:89:f5:
59:16:1d:06:53:45:f7:81:23:3a:8f:89:86:e6:ec:
e1:c3:a8:59:b6:56:65:c1:a2:00:b8:3f:85:de:4f:
eb:4f:48:04:62:12:3b:59:be:c7:77:f0:1b:68:96:
21:4d:99:e4:58:07:8f:5d:7d:d9:ce:55:91:68:e2:
5c:e0:b5:d2:6c:5c:eb:78:66:d3:15:ac:1d:52:05:
74:17:c0:66:3c:a1:47:15:fc:72:4d:20:11:4b:42:
9c:a8:21:48:96:c1:1c:76:23:5b:95:7d:0d:16:1f:
71:d1:82:dc:03:43:79:d4:dc:c7:74:e5:b3:f4:42:
cc:39:7b:8c:04:cd:41:83:6c:3f:da:4d:3c:91:02:
b7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3E:D1:29:DE:05:42:DD:4F:2A:FF:5B:82:15:3F:73:10:45:9D:D1
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:7f:64:84:5a:34:21:dd:f0:ac:d0:38:61:26:51:5d:b3:05:
c3:07:a8:72:62:28:d1:63:79:10:9a:b4:de:d5:25:3a:87:c1:
ed:7f:1c:3f:26:fe:97:bb:8c:9c:bb:ee:6f:64:75:16:21:4a:
e4:b9:22:3e:f6:b5:dd:ba:dc:f4:67:bf:ec:17:68:a1:94:ab:
f5:0c:8e:27:20:a2:8d:d3:db:cb:3f:14:c8:ea:23:99:b0:e9:
b8:88:f0:fd:6d:fd:fd:df:5c:bd:15:81:9c:5a:7b:08:e0:c7:
21:1c:33:b5:32:9b:86:52:b6:eb:fb:6a:13:2b:f7:c5:4a:02:
5c:69:07:d3:28:b0:bb:00:9a:3e:95:c7:5c:2d:9c:10:4a:ce:
f1:9a:0c:92:69:c3:c2:0c:42:6a:54:24:2c:9f:5c:c0:84:22:
c6:43:05:80:7f:bb:2a:0b:4f:ba:ab:b7:97:79:35:b5:c0:e9:
32:58:ac:c6:6f:62:3b:34:14:a9:5f:c8:39:79:78:11:59:18:
63:ac:f1:9d:88:c0:3b:f3:6e:fd:64:e6:90:c0:4f:67:2d:07:
5c:da:80:46:6b:9f:a9:d3:6c:d7:95:17:4b:62:98:8a:1f:94:
2c:12:a0:31:b5:07:cd:e4:86:a3:19:48:62:58:a5:98:0d:1b:
7b:2a:c6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:10:32 2026 by rpki-client