Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier: ExIXvMBNY4No1RB5i8ciyvmKa3wdqYf07LBSWV6gvJI=
Subject key identifier: E7:C4:C1:3C:CE:EB:4D:9C:B9:3E:27:F4:F1:20:61:AD:F8:EB:3F:ED
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 019D38D2D31331D7654936B54D8A318B6688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number: 1156
Signing time: Sun 29 Mar 2026 09:00:33 +0000
Manifest this update: Sun 29 Mar 2026 09:00:33 +0000
Manifest next update: Mon 30 Mar 2026 09:00:33 +0000
Files and hashes: 1: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: S1HMtrYQH6+yhYeVNEJ6/MCN1ZGMIYLBl6yTGCxDUIE=)
2: wumUMMWvHiUrTabZLhTSravhO6c.roa (hash: p2VcOKl2dOd/4+FLAlcMShjCSyG2pmnKtd0Km8VqtxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d3:13:31:d7:65:49:36:b5:4d:8a:31:8b:66:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Mar 29 09:00:33 2026 GMT
Not After : Mar 30 09:00:33 2026 GMT
Subject: CN=e7c4c13cceeb4d9cb93e27f4f12061adf8eb3fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:62:b7:e1:89:d2:3a:1e:83:3b:31:7b:c4:75:
0e:4b:59:c0:bb:df:d7:87:0c:24:95:d1:45:12:9c:
e5:a7:2d:53:89:e5:60:9b:31:e6:dc:61:de:44:f9:
88:ad:99:4b:67:1a:0d:90:d4:73:0f:19:c6:e8:42:
e8:6a:24:5e:3e:05:57:58:58:fc:e9:1c:32:84:1e:
4a:70:96:98:17:d1:27:a8:f0:75:7a:bb:4c:42:e3:
13:15:2f:d5:d1:1d:ba:6a:da:c0:5d:a0:91:9a:07:
f3:ec:43:19:77:71:11:8c:0f:66:14:3a:b2:a3:40:
0a:a3:bc:5e:e6:4b:52:3d:88:0d:3a:d2:51:27:3f:
81:d0:c6:2d:8a:d7:f7:56:35:79:3f:55:82:1a:bd:
32:4b:f9:99:e9:fa:5d:ab:69:50:ca:12:4c:bb:35:
2f:a1:b5:77:9e:7b:71:0f:12:08:bf:dd:d0:d1:87:
09:fd:c6:a8:83:03:24:b6:c5:5b:b8:fc:3c:d3:76:
7c:bf:37:51:50:67:ab:87:65:35:15:58:80:25:37:
a0:da:07:e1:d2:6a:76:7b:7b:31:a0:10:66:de:bf:
0b:86:2d:e4:33:b5:c3:61:e2:33:6e:7e:3f:4b:a2:
db:4f:42:8a:ad:92:90:1a:4b:1f:21:e0:3b:b3:19:
5b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C4:C1:3C:CE:EB:4D:9C:B9:3E:27:F4:F1:20:61:AD:F8:EB:3F:ED
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:bd:4a:c0:a7:8f:25:08:40:38:bb:1e:4b:e8:86:26:8a:0d:
c8:9f:6b:b7:c2:73:27:72:af:5f:0d:3a:aa:df:38:69:de:52:
4d:13:a3:82:4d:df:07:62:08:69:1b:fc:a7:10:fe:44:06:7e:
a7:c9:6a:5f:f4:da:aa:35:1e:80:a8:21:b6:54:92:d0:7b:38:
47:4b:2e:24:6c:e7:75:9b:82:bc:3b:05:24:3f:33:67:a2:7e:
89:64:15:a6:70:71:fe:64:e3:a1:69:c8:e1:39:cc:06:67:9b:
2b:03:67:cf:0e:b1:9d:df:db:f7:66:35:0e:ae:45:78:d5:3e:
46:33:1e:f0:c6:bc:07:04:27:54:da:73:3b:e5:c3:ba:d2:df:
df:7a:c5:b9:f2:b7:0e:10:ac:ae:50:e8:bc:67:5b:32:f4:31:
ab:96:f2:3f:82:b5:78:4e:6e:1e:12:51:3f:3c:a5:5a:6a:42:
7a:9e:d6:bb:b2:92:37:cd:2a:bd:47:2a:c4:60:bb:47:3d:c2:
5d:20:77:d2:53:af:65:db:4b:ff:6c:01:de:78:f5:9a:9f:2b:
16:5b:12:d7:7b:4b:3b:e3:00:61:c3:05:40:f1:b1:06:8e:50:
cf:bc:f2:23:ff:9b:c6:5e:7d:a8:4f:3c:e0:3b:fd:1e:36:54:
3b:67:e0:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040tMTMddlSTa1TYoxi2aIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTYwNzJjYTAyNTJmYWI1MDY1OGQ3MzZmZjJjNjBjMTYy
OWRjNzYwHhcNMjYwMzI5MDkwMDMzWhcNMjYwMzMwMDkwMDMzWjAzMTEwLwYDVQQD
EyhlN2M0YzEzY2NlZWI0ZDljYjkzZTI3ZjRmMTIwNjFhZGY4ZWIzZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GK34YnSOh6DOzF7xHUOS1nAu9/X
hwwkldFFEpzlpy1TieVgmzHm3GHeRPmIrZlLZxoNkNRzDxnG6ELoaiRePgVXWFj8
6RwyhB5KcJaYF9EnqPB1ertMQuMTFS/V0R26atrAXaCRmgfz7EMZd3ERjA9mFDqy
o0AKo7xe5ktSPYgNOtJRJz+B0MYtitf3VjV5P1WCGr0yS/mZ6fpdq2lQyhJMuzUv
obV3nntxDxIIv93Q0YcJ/caogwMktsVbuPw803Z8vzdRUGerh2U1FViAJTeg2gfh
0mp2e3sxoBBm3r8Lhi3kM7XDYeIzbn4/S6LbT0KKrZKQGksfIeA7sxlboQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfEwTzO602cuT4n9PEgYa346z/tMB8GA1UdIwQY
MBaAFD0WByygJS+rUGWNc2/yxgwWKdx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yZmJmMmMtNTQyZi00Yzk4LTk5ZGIt
YTRlNWRlOGVlNzE2LzEvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8yZmJmMmMtNTQyZi00Yzk4LTk5ZGItYTRlNWRlOGVlNzE2
LzEvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw71KwKeP
JQhAOLseS+iGJooNyJ9rt8JzJ3KvXw06qt84ad5STROjgk3fB2IIaRv8pxD+RAZ+
p8lqX/TaqjUegKghtlSS0Hs4R0suJGzndZuCvDsFJD8zZ6J+iWQVpnBx/mTjoWnI
4TnMBmebKwNnzw6xnd/b92Y1Dq5FeNU+RjMe8Ma8BwQnVNpzO+XDutLf33rFufK3
DhCsrlDovGdbMvQxq5byP4K1eE5uHhJRPzylWmpCep7Wu7KSN80qvUcqxGC7Rz3C
XSB30lOvZdtL/2wB3nj1mp8rFlsS13tLO+MAYcMFQPGxBo5Qz7zyI/+bxl59qE88
4Dv9HjZUO2fg8A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:44 2026 by rpki-client