Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
File: PrEhzwYygZ7s6r64qVVpxnUpiCE.mft (raw, json)
Hash identifier: owGzO3jb5FlausIy61pz/o4H4MVwr1LRSKd1ukZHH5w=
Subject key identifier: 96:DC:1D:32:EE:F4:2D:7F:2B:69:E1:F4:45:EB:9B:B9:63:37:72:63
Authority key identifier: 3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
Certificate issuer: /CN=3eb121cf0632819eeceabeb8a95569c675298821
Certificate serial: 019D37C08F5EEA1BE950E1EC5A20D9129442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
Manifest number: 1413
Signing time: Sun 29 Mar 2026 04:00:59 +0000
Manifest this update: Sun 29 Mar 2026 04:00:59 +0000
Manifest next update: Mon 30 Mar 2026 04:00:59 +0000
Files and hashes: 1: BvqPzBWXDdD_wNLa0N08b6_pz_k.roa (hash: GYBQI1YwuHCkNkDxrkD1QYuljCiU/SztGfYzxnToFa0=)
2: PrEhzwYygZ7s6r64qVVpxnUpiCE.crl (hash: Kit92RE6rUVawA4WJ5MMaBM45fgM/1z74etg/s7gV5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:8f:5e:ea:1b:e9:50:e1:ec:5a:20:d9:12:94:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb121cf0632819eeceabeb8a95569c675298821
Validity
Not Before: Mar 29 04:00:59 2026 GMT
Not After : Mar 30 04:00:59 2026 GMT
Subject: CN=96dc1d32eef42d7f2b69e1f445eb9bb963377263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:88:82:6c:dd:d2:d8:24:44:42:81:de:dd:
92:02:95:70:9d:aa:f4:c5:bd:6a:c4:19:75:ec:43:
42:ee:d6:b6:53:89:96:e1:41:a2:61:01:60:48:d6:
8c:19:e3:82:17:e8:5d:f8:9e:cc:e7:b1:c6:f6:4c:
de:bc:9c:4b:cf:da:93:0c:6e:7e:e9:46:e5:a5:92:
86:bd:dd:b9:3c:5f:4c:b9:b8:18:2e:36:61:2e:84:
62:03:0c:c1:4d:77:0e:75:50:de:2b:79:a5:2a:49:
14:ed:2d:3d:af:8b:c0:dd:66:75:68:35:a7:a9:21:
ca:ff:da:1f:03:3c:a6:eb:4a:d9:a3:7c:41:32:cf:
af:1c:05:27:0c:2d:53:21:f8:ef:6a:90:cf:0f:6b:
11:23:14:b6:f1:89:6e:0e:03:a2:e3:fb:9b:96:a6:
bd:cf:d3:2f:72:9a:ff:26:41:f6:57:0c:74:fa:d8:
92:2a:11:2b:1a:e8:d6:5f:66:91:76:58:56:ae:4a:
5b:43:ec:ee:c1:10:93:52:0d:5e:66:8c:dd:07:3b:
10:92:dd:bc:47:99:d7:b0:2e:84:6b:ad:3f:10:e2:
1b:a0:3f:06:3f:98:ab:d2:d3:2a:8d:fb:2b:ee:6d:
ee:4a:43:76:42:ea:3a:49:79:0b:1c:2e:b1:4a:c6:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DC:1D:32:EE:F4:2D:7F:2B:69:E1:F4:45:EB:9B:B9:63:37:72:63
X509v3 Authority Key Identifier:
keyid:3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:90:cd:27:2e:61:18:fa:03:9d:75:df:01:78:d5:e0:19:4a:
ad:73:1e:f2:3e:6a:b8:3d:f7:de:8c:5c:c9:fa:27:26:2f:c5:
87:94:56:18:71:7a:ef:3c:82:00:70:2b:07:a0:c4:81:62:9a:
0f:65:0c:7c:79:67:13:14:05:cf:f3:16:5c:09:02:c5:88:4e:
09:c3:e9:0c:60:eb:20:f2:1a:04:ed:98:ec:91:00:a5:4d:e6:
39:fd:28:b1:51:26:a5:2e:42:d6:51:a7:23:90:75:af:56:5f:
68:9c:7e:c2:28:f2:38:b6:fa:7c:6d:80:f0:f5:bc:bb:77:b2:
9b:1a:71:a4:74:ee:01:46:da:5c:73:75:37:a5:b4:07:1c:12:
1b:9f:1a:49:70:8f:cd:12:a9:30:ed:a3:70:f4:6c:2a:06:c6:
90:cb:73:36:e8:ea:71:f5:17:3d:22:6e:53:55:70:0a:e7:92:
b9:0e:8a:1b:92:af:3b:f3:83:7f:3c:14:c7:ff:95:e8:56:40:
7b:d5:48:d6:28:e3:d1:b8:ab:76:b6:01:d0:7a:05:1a:03:0d:
20:34:d2:f1:01:70:05:dd:ee:fd:96:a0:78:6f:63:a6:cd:74:
24:8a:bc:87:9b:21:80:6f:9a:aa:da:b7:00:09:c9:7c:9f:af:
3c:eb:00:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:53 2026 by rpki-client