Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier: HmkZBHhjZocFNPBxkxEIafx+ERtj1Z6vXFVGnCdpMHU=
Subject key identifier: 83:6A:A0:AF:AC:E0:32:A0:3B:02:39:F4:EE:1D:9F:A1:0B:92:52:04
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 019E9281FFF80B3BD40E0DB30EEC4B7D4CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number: 1209
Signing time: Thu 04 Jun 2026 12:00:53 +0000
Manifest this update: Thu 04 Jun 2026 12:00:53 +0000
Manifest next update: Fri 05 Jun 2026 12:00:53 +0000
Files and hashes: 1: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: uRC7edCqlB/wm41kaUqGavFGcbfBmhJ6YA7lpnPcG2Y=)
2: wumUMMWvHiUrTabZLhTSravhO6c.roa (hash: p2VcOKl2dOd/4+FLAlcMShjCSyG2pmnKtd0Km8VqtxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:81:ff:f8:0b:3b:d4:0e:0d:b3:0e:ec:4b:7d:4c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Jun 4 12:00:53 2026 GMT
Not After : Jun 5 12:00:53 2026 GMT
Subject: CN=836aa0aface032a03b0239f4ee1d9fa10b925204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:af:b5:5c:15:f0:a7:94:0b:61:57:3b:c6:
43:e6:57:ad:37:4f:cc:55:94:fa:e0:71:76:f6:68:
75:96:fa:2f:62:bd:56:3b:31:42:a1:51:b3:35:a4:
e9:6a:58:b0:24:b5:aa:30:d8:bd:17:26:21:f5:df:
ef:0c:de:7a:c2:c5:80:d1:f7:e6:78:f4:40:b4:3a:
77:3a:09:96:05:a3:7d:ab:64:0d:c0:42:80:26:fc:
1d:17:47:37:81:eb:ac:c8:ed:a3:af:36:7e:11:58:
dd:85:48:c5:0b:33:47:7c:6e:64:63:dc:5d:3d:92:
9a:c2:71:93:bf:47:05:65:1b:23:f9:2a:b6:dc:6b:
8e:62:44:fc:31:e2:2b:64:9c:4e:21:c5:12:de:6c:
62:bb:3f:54:98:92:97:3e:ec:b1:87:46:ab:d9:d1:
8a:32:f4:af:e1:b9:ba:ad:94:aa:68:43:f0:e0:e0:
c8:88:3d:0c:f4:de:df:1f:7c:ab:68:0c:58:7d:4d:
45:32:30:30:b2:ad:d7:c5:8f:d8:4e:89:f4:c0:97:
71:b1:85:94:59:fc:92:ef:22:f3:bb:01:3f:f1:74:
eb:56:1f:98:db:1f:45:87:c6:c1:3c:e1:7f:0f:25:
70:b3:d8:6d:cc:7a:ad:9a:a3:23:8d:49:93:eb:0f:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6A:A0:AF:AC:E0:32:A0:3B:02:39:F4:EE:1D:9F:A1:0B:92:52:04
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d6:4c:62:49:dc:e1:39:dd:39:af:68:57:26:c7:92:b9:a6:
54:1f:c6:22:21:f8:5f:51:3d:1b:9a:35:f4:b8:19:55:ef:6d:
69:7f:e5:4d:b7:a8:5b:78:27:25:6f:28:d4:9e:0b:6c:fe:1c:
f0:52:81:fb:a2:d9:bb:94:e9:55:1f:f7:f7:8b:f1:e8:6e:12:
48:60:3c:84:5c:05:f6:16:39:80:80:0d:85:9a:88:34:83:98:
92:12:a1:bb:60:e3:ae:49:da:e3:2a:46:a0:20:20:4f:e7:6c:
27:0a:cc:74:5e:69:89:a8:02:00:24:d8:b6:81:c8:25:bb:86:
bf:14:7a:a7:ca:40:24:84:30:f9:86:51:7a:2f:30:71:5e:b7:
9d:05:93:0e:1d:38:2f:ce:c3:49:62:0f:c4:e9:c5:55:57:d3:
75:b9:99:56:6c:75:a9:3d:a8:ac:ce:2f:92:88:cf:dc:ce:ca:
0a:b6:40:c6:71:70:6b:97:03:a1:16:b1:91:f6:f3:ca:a4:d8:
e3:98:df:00:fe:a4:34:3b:52:d2:09:2b:78:61:f1:eb:de:de:
2b:aa:89:f4:b3:e4:e2:84:cf:c7:0d:59:6c:33:e3:c1:c0:8c:
df:44:cf:ea:cb:2b:eb:f0:e6:bc:75:84:0f:5c:b2:7d:8b:66:
03:8f:09:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:26 2026 by rpki-client