Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier: azbSRdLDr5UVRZ7u95WsdcYZHEDn/j4I8m9rgqqgwvM=
Subject key identifier: DB:AA:3D:47:2A:A8:A6:75:D6:41:82:73:D1:DE:9B:19:D5:85:38:9B
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 01A18D53DFAC534A5508ECF0F59C70D1D561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number: 1394
Signing time: Fri 30 Oct 2026 15:00:46 +0000
Manifest this update: Fri 30 Oct 2026 15:00:46 +0000
Manifest next update: Sat 31 Oct 2026 15:00:46 +0000
Files and hashes: 1: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: HUSgow1qmeUlmT0CBkfdfJ8cPSLn28aPwk/t/NczEr4=)
2: wumUMMWvHiUrTabZLhTSravhO6c.roa (hash: p2VcOKl2dOd/4+FLAlcMShjCSyG2pmnKtd0Km8VqtxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:53:df:ac:53:4a:55:08:ec:f0:f5:9c:70:d1:d5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Oct 30 15:00:46 2026 GMT
Not After : Oct 31 15:00:46 2026 GMT
Subject: CN=dbaa3d472aa8a675d6418273d1de9b19d585389b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:ec:c3:6f:bf:4c:79:f7:22:16:93:f1:dc:
8f:4a:8e:fa:c0:47:b4:8f:89:c8:f0:76:8d:90:e5:
a9:2c:fc:78:8c:06:ed:ae:7b:d9:bb:d0:e4:fa:38:
f2:a4:98:33:aa:a2:3b:58:da:80:f5:46:94:a7:6d:
bf:f6:c4:54:7c:2e:68:cb:ae:23:a6:0d:8c:a3:bc:
25:f3:10:73:a0:bc:5a:d6:95:56:87:6e:76:c2:7b:
a7:40:43:b8:72:ad:05:ea:42:b4:5b:8d:e5:72:e9:
b3:4a:83:b0:02:fe:14:e0:86:33:7c:97:9c:6b:f4:
c0:03:d0:c4:f8:aa:5e:f6:94:ef:59:b3:4d:2c:45:
9c:7f:56:8c:2c:70:67:0f:f5:bf:62:c1:70:08:1b:
06:c7:0f:0f:cf:b5:fa:f3:80:f0:3d:f0:5b:c4:c0:
41:5e:9f:97:36:bd:20:9f:21:01:f9:20:1b:ef:97:
17:0f:72:42:9b:cf:a7:0f:ce:03:3c:14:42:19:bf:
62:34:7c:bf:54:68:59:b7:36:70:e6:63:f9:ff:9c:
cb:42:5c:9f:3d:76:63:a2:95:dc:63:e9:bb:62:50:
d5:e8:23:bc:72:f9:8f:1e:07:03:8a:cb:aa:49:2f:
f8:26:c2:64:80:63:94:79:e8:e9:35:28:33:62:83:
94:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AA:3D:47:2A:A8:A6:75:D6:41:82:73:D1:DE:9B:19:D5:85:38:9B
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5a:8e:6d:32:56:a4:1d:d2:b7:59:f4:01:5d:e7:db:fb:67:
2d:1b:d7:2e:f1:f4:e0:f7:56:13:cc:66:b7:90:ee:a0:5a:66:
93:45:e6:6c:96:ec:34:00:37:49:51:59:a6:c9:86:76:99:9a:
5a:af:7c:6c:a8:a5:e2:f7:c7:81:83:92:63:f4:ad:fe:fa:af:
94:b2:77:e7:e4:1d:81:3f:1c:b3:02:c0:0d:47:a2:33:82:bb:
ba:38:1b:f2:bc:ba:75:1d:b7:cd:51:01:d5:09:9e:43:a8:92:
e9:b0:3f:4d:99:e0:4f:29:4f:fb:99:32:9f:97:b4:05:e5:61:
e5:fd:4c:e2:d2:6b:fa:0e:f4:83:0c:f1:83:e7:e7:32:e0:00:
49:3d:d4:1c:34:30:77:74:14:21:9f:8a:60:c0:c7:6f:ae:a0:
4c:0c:01:d5:5b:69:3d:46:4c:e3:32:5b:d2:23:24:52:30:bb:
cc:82:94:0d:73:90:2c:1e:07:7a:27:c0:fe:d1:62:64:f9:6e:
0a:5b:ce:9d:17:4f:02:36:6b:40:ce:a7:5e:d0:6a:bb:b0:71:
9c:d2:05:d0:f4:61:83:06:af:a3:48:ba:e5:a2:bc:18:2e:60:
29:75:31:1c:67:4a:89:f3:f8:23:9a:85:8d:42:93:e4:48:2b:
af:55:08:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:03:33 2026 by rpki-client