Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: yFG1qLeQCWsihKUL2LeWW2P+lhCp7hUwBDhOQdvxd74=
Subject key identifier: D9:6F:C2:8D:16:49:D8:E4:5A:E0:0B:77:6C:C7:14:DE:D7:42:FF:C1
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 01A00326A22A380CCEBD3FC09BBCDCFD6CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 068B
Signing time: Sat 15 Aug 2026 02:00:58 +0000
Manifest this update: Sat 15 Aug 2026 02:00:58 +0000
Manifest next update: Sun 16 Aug 2026 02:00:58 +0000
Files and hashes: 1: 9IdHCEJQuzKyxwFpT8ujYaesS9w.roa (hash: C3vAatIUJjp84Pk7IwDii/846WZ3p/AWV1sBtD8WSCA=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: 4fADT9ojf3rmdD4eZu+u2t7p547m12jgxn7935s8xxc=)
3: dAsT8XG2mpyNIJ5hpWhJSc5415Y.roa (hash: 8hFFOmMnHAAA9ytOGH8EO+wUtjGfAGKJiyYhcntZJUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:a2:2a:38:0c:ce:bd:3f:c0:9b:bc:dc:fd:6c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Aug 15 02:00:58 2026 GMT
Not After : Aug 16 02:00:58 2026 GMT
Subject: CN=d96fc28d1649d8e45ae00b776cc714ded742ffc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:27:ff:a4:6e:13:e2:0f:69:48:7a:96:07:
43:d8:bb:89:a3:c7:7c:ce:7e:d8:23:6b:8e:9d:39:
9e:d1:22:ed:77:28:a7:73:c4:1b:f5:92:92:6d:dc:
18:98:26:92:33:14:61:07:c7:d7:5c:75:2a:a8:fb:
5b:77:8a:5f:01:c7:1d:6e:e6:09:9a:b3:4e:20:87:
e8:64:98:e1:50:11:9b:35:80:a2:34:50:a1:a4:4c:
b8:9a:3c:9c:7a:7d:b1:b3:c3:58:a4:8e:4e:71:e8:
40:3a:18:36:88:26:f3:56:14:a5:7e:67:a8:c2:17:
b9:3a:ea:6d:35:7e:27:d2:21:fe:51:4a:f2:13:e3:
5b:e6:4a:8c:7a:dd:9d:5b:1d:9e:f2:df:86:44:87:
c1:39:2e:7a:62:95:43:4a:7d:2b:b0:91:34:01:1b:
82:64:6b:74:83:c7:e4:79:da:81:65:fa:41:6c:cd:
de:29:d5:db:e8:b7:26:04:93:2d:93:84:e4:27:41:
0c:a5:9d:9a:0f:e5:ea:5d:30:9c:aa:0b:a9:11:97:
30:44:d8:1e:1a:f3:26:04:d3:92:4c:e7:f7:d5:5b:
f8:bd:b7:9f:f2:48:d3:4e:1d:f9:2d:c0:42:0c:b7:
07:3b:a7:70:93:1c:7c:d7:56:60:cb:e5:9c:a2:b3:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6F:C2:8D:16:49:D8:E4:5A:E0:0B:77:6C:C7:14:DE:D7:42:FF:C1
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d1:43:c1:8a:cb:ad:9b:56:90:65:73:3a:59:56:f7:61:fe:
3c:4a:de:83:8c:24:e8:a0:8b:5e:31:4d:29:f3:25:f4:92:42:
71:e0:79:c6:11:13:66:dd:b1:00:f7:99:cf:a5:81:ed:73:98:
f6:00:a8:0a:e4:24:17:83:0b:69:fe:0a:db:a5:9b:90:41:e2:
95:2e:da:d9:1e:f7:a6:49:ca:37:2e:da:0b:0d:86:22:a2:fc:
93:d4:e6:a2:18:3b:db:d0:51:2a:09:3d:ac:58:4a:53:b8:92:
e5:57:38:da:44:b7:92:05:bc:24:4d:18:f2:c1:cd:e1:9e:73:
1d:d1:9f:32:48:9a:51:ce:c9:40:59:4b:d4:9f:bf:d9:7e:42:
95:c9:9b:79:1f:c7:62:6b:fe:df:16:e2:ad:d4:7d:41:b3:71:
84:ad:86:e2:d2:9f:ec:17:6a:5d:66:b4:ee:43:a2:62:13:ce:
77:b7:41:59:2e:67:4f:13:b6:de:83:8b:9a:74:29:fb:79:45:
81:31:03:24:cc:1b:cc:7a:22:21:0a:e3:16:ce:b3:eb:0c:14:
8d:a6:53:78:7a:03:3d:10:18:0c:2c:22:ad:97:38:be:c0:33:
90:73:8e:82:4d:af:04:ed:11:19:c7:96:32:cc:f6:ef:6c:f3:
24:10:1b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:37:48 2026 by rpki-client