Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File: prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier: sPlWUJq4TlOIB0dsUM3a/1sD7Zhpum3Y2IWe3fhPFo4=
Subject key identifier: 25:87:21:0A:BC:46:AA:C2:21:CD:EC:3A:73:BC:F2:DA:62:A7:43:77
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer: /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial: 019DDD3172964BA834A7987447F9E88DADA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number: 0C40
Signing time: Thu 30 Apr 2026 07:01:38 +0000
Manifest this update: Thu 30 Apr 2026 07:01:38 +0000
Manifest next update: Fri 01 May 2026 07:01:38 +0000
Files and hashes: 1: G42-Fdl3gJAxSTqoOxR_BXG1oH8.roa (hash: pai33aN90kyIzUMmy6nzZwQfDVVekgEOsKj6Cwhhy24=)
2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: t6i2UZkfiJ7XXuHtxpyFAJC9X0GOpxf6ui3SuL0Ek1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:31:72:96:4b:a8:34:a7:98:74:47:f9:e8:8d:ad:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Validity
Not Before: Apr 30 07:01:38 2026 GMT
Not After : May 1 07:01:38 2026 GMT
Subject: CN=2587210abc46aac221cdec3a73bcf2da62a74377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dd:00:27:05:18:ba:1e:51:fb:be:34:9a:6e:
d3:43:78:d7:96:de:5c:e6:a4:b2:be:dc:41:97:ce:
d7:ab:26:c8:9d:ef:fb:8d:f7:23:80:bb:2e:2f:be:
a8:67:cb:af:1d:97:76:59:e1:5b:a1:56:61:27:0e:
79:e3:3b:a6:c6:a1:04:d6:26:e7:1b:b0:4b:0d:00:
fd:fc:2c:d9:ef:5a:e1:27:11:24:ba:41:06:28:c9:
59:74:09:b8:8d:72:64:9f:00:d9:22:9c:66:b6:58:
cc:32:d0:96:37:49:84:bd:44:ba:0b:67:89:71:34:
3b:43:b7:77:e7:64:df:1c:4f:4e:7e:d4:f2:06:05:
c8:07:fa:29:e0:57:15:b4:ce:6c:5b:c2:72:3d:f1:
31:8c:cc:2c:07:0d:bb:df:60:43:5a:cd:b7:77:88:
f5:55:3c:a8:90:29:9c:15:ca:9e:40:e3:c1:9b:c8:
05:38:5e:75:a2:a5:fe:54:a7:ea:30:05:f2:b2:0c:
66:35:f3:0d:ce:ea:99:1f:22:4d:b9:2f:55:3f:09:
85:33:f7:58:55:9d:65:93:e0:55:45:19:df:41:fd:
e9:c5:9f:fb:e7:f6:15:02:13:d8:a3:3b:9d:ad:9c:
7d:57:7e:e2:41:a3:3b:a1:be:34:a5:e9:c3:07:24:
3a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:87:21:0A:BC:46:AA:C2:21:CD:EC:3A:73:BC:F2:DA:62:A7:43:77
X509v3 Authority Key Identifier:
keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:76:bb:c5:a3:d3:c3:ff:90:74:98:bf:fa:0d:57:c4:11:77:
bb:87:61:e4:57:d3:b3:8d:75:b3:89:cb:f4:1a:2d:bf:cb:74:
23:a1:27:3c:2f:a1:db:7f:13:48:dc:bb:50:8d:fe:e6:43:f4:
b2:d0:5a:55:61:bd:d7:ea:cd:67:12:f6:04:6d:21:32:2c:19:
88:60:6d:52:78:78:aa:c9:b4:92:83:ae:81:f3:6d:72:d3:e8:
f9:3f:8f:aa:16:ba:6f:c5:dc:5e:70:3f:e6:d2:a2:c0:24:dd:
58:56:f7:c4:b1:f6:e3:da:42:db:73:63:1b:5c:54:2d:9b:55:
a3:b7:01:38:24:85:0d:5c:5e:63:75:5a:ad:c3:20:ba:a2:88:
5d:12:00:18:6b:9a:21:e1:bb:6a:6b:02:2d:f7:30:f6:c7:9f:
75:1e:9c:b8:4d:3a:ed:a1:02:5a:ca:33:02:ca:54:65:15:17:
5a:38:41:aa:46:17:2c:20:b7:f6:a2:97:86:8a:41:41:08:41:
a3:83:50:dd:6f:56:2a:74:51:92:a5:37:58:82:59:c5:1c:7a:
30:fc:21:b5:d2:79:c1:99:fe:d0:f1:ef:20:c1:be:c3:7a:4c:
3b:61:48:fe:b4:cc:7f:c7:ee:12:a8:7a:f2:e3:b9:6a:25:2b:
7f:cd:bb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:45:57 2026 by rpki-client