Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
File: PRzEAjSeGROS0ex0acG8gkNjRDk.mft (raw, json)
Hash identifier: q+ZR50XB6bRIm4DlX9gxnWhHtnsgi3XiE0i1RXF3oA8=
Subject key identifier: 1C:79:6A:0E:CB:D4:ED:F3:50:13:7B:0D:B1:2A:D9:91:F8:88:D7:F6
Authority key identifier: 3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
Certificate issuer: /CN=3d1cc402349e191392d1ec7469c1bc8243634439
Certificate serial: 019D390A5D2EFF602645C01774213125AA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
Manifest number: 0CD2
Signing time: Sun 29 Mar 2026 10:01:13 +0000
Manifest this update: Sun 29 Mar 2026 10:01:13 +0000
Manifest next update: Mon 30 Mar 2026 10:01:13 +0000
Files and hashes: 1: BkKBPihquQKqSH7m5QGPwWadRUc.roa (hash: qo3k4ZbWsxiyID0p5/iO1VNo9C8XPua8Kf4TKnBGlWc=)
2: PRzEAjSeGROS0ex0acG8gkNjRDk.crl (hash: ylb9xK1E4FQ/HMSnqXFEgOARUvMh4n66rM7L4b5Qi/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:5d:2e:ff:60:26:45:c0:17:74:21:31:25:aa:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d1cc402349e191392d1ec7469c1bc8243634439
Validity
Not Before: Mar 29 10:01:13 2026 GMT
Not After : Mar 30 10:01:13 2026 GMT
Subject: CN=1c796a0ecbd4edf350137b0db12ad991f888d7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:cd:47:ab:cf:b3:fa:58:3f:24:73:a3:d6:
34:1d:1d:c9:1d:83:94:19:7a:a1:04:2d:91:00:89:
dc:0b:a9:99:01:5f:e6:fa:72:fe:46:3f:b3:d3:e8:
70:74:82:bd:7f:8c:b8:27:13:d0:d2:0c:85:6e:7f:
da:d5:22:83:41:b8:9a:f6:47:9f:bc:ce:cb:0b:02:
48:70:c3:53:3a:72:b1:17:eb:e1:c7:2d:ba:de:37:
88:82:b5:97:02:87:bb:e9:51:86:2e:08:f4:b7:39:
9c:4d:48:5b:bc:8b:38:3d:99:7a:d2:dd:f4:8b:5c:
c5:a8:b8:ac:2a:c9:a5:d2:2e:45:20:1d:39:e3:19:
36:f9:f2:27:77:b6:78:e1:40:70:1c:49:54:61:93:
b4:5f:fd:dd:7b:78:53:52:a2:7e:b8:10:2e:71:83:
18:c3:fa:3f:9e:a7:93:c1:37:bd:b1:20:e1:89:89:
75:32:ff:1c:e8:2b:21:46:cb:eb:e1:a3:1f:37:27:
93:40:47:d5:96:92:40:0f:99:38:80:71:1b:46:a8:
14:9b:f2:6a:75:7c:d2:f1:77:3e:60:70:2d:ef:aa:
d6:9d:8e:b1:8d:9a:0a:12:c1:02:19:26:fd:01:de:
c8:67:e7:04:34:96:78:4a:32:2e:bd:f6:41:6a:23:
1a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:79:6A:0E:CB:D4:ED:F3:50:13:7B:0D:B1:2A:D9:91:F8:88:D7:F6
X509v3 Authority Key Identifier:
keyid:3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c3:27:51:0c:24:d4:2b:49:76:76:da:30:79:67:6c:3b:95:
01:fb:53:7a:19:60:b8:9b:b8:d1:f3:9c:76:d0:3c:3b:fc:b9:
e0:8a:fd:05:ea:8d:6e:11:a8:e2:ac:ac:ad:89:c9:a2:7c:cc:
37:b8:70:66:8b:3f:54:92:2a:85:0f:83:7e:07:71:d9:13:50:
04:9f:de:af:96:8e:65:0a:6d:7b:12:55:a8:8d:69:39:95:89:
5c:5b:2c:bf:71:e9:a5:9d:55:af:80:1d:53:c6:fe:07:b7:e7:
30:9d:50:75:fd:d5:17:2a:77:2d:d9:4b:bf:9d:75:e7:a5:b9:
b1:0e:8e:20:8a:bc:18:61:b9:06:f8:b1:de:f0:8c:95:86:1e:
72:b6:e0:c6:78:6d:3d:42:21:f6:26:31:2e:36:d9:01:3a:f2:
6d:11:e7:12:3d:a2:2b:7e:fc:5b:19:6c:2c:da:e8:ec:03:60:
78:2d:69:bf:ca:b8:43:d8:76:2f:16:ff:8c:8f:ea:06:21:ae:
d7:e4:c2:4b:80:80:b1:d6:0e:0d:2e:ce:b9:de:b4:5b:27:9f:
9e:72:bf:5d:e6:a6:cd:fe:61:32:c9:ad:74:a7:4e:ba:f9:c5:
4d:80:72:c7:6d:60:11:3d:91:1f:5e:46:40:20:e7:b0:42:9c:
5b:ea:57:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:09 2026 by rpki-client