Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: kY1S3qqIujudrtqBJ1TUYEMr7VxU0HNo2zhkrROEDnA=
Subject key identifier: 7F:7D:B5:95:B8:31:2E:8A:4A:64:33:66:82:D9:2C:87:0F:4A:57:B3
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 019E2A02B469F50B5438DE948C09E9F447F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 0596
Signing time: Fri 15 May 2026 05:01:20 +0000
Manifest this update: Fri 15 May 2026 05:01:20 +0000
Manifest next update: Sat 16 May 2026 05:01:20 +0000
Files and hashes: 1: 9IdHCEJQuzKyxwFpT8ujYaesS9w.roa (hash: C3vAatIUJjp84Pk7IwDii/846WZ3p/AWV1sBtD8WSCA=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: qdHVUFMmP7AE2JNXL3A5QtJePA+ojBSejTX5Ul2ATwc=)
3: dAsT8XG2mpyNIJ5hpWhJSc5415Y.roa (hash: 8hFFOmMnHAAA9ytOGH8EO+wUtjGfAGKJiyYhcntZJUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:02:b4:69:f5:0b:54:38:de:94:8c:09:e9:f4:47:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: May 15 05:01:20 2026 GMT
Not After : May 16 05:01:20 2026 GMT
Subject: CN=7f7db595b8312e8a4a64336682d92c870f4a57b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:bc:2a:cd:b9:35:05:c6:9c:ea:83:cb:8b:
e9:91:79:2d:ac:8f:d3:04:a5:a8:4d:fd:22:da:7b:
c2:3f:87:90:d7:4a:77:88:f6:fa:77:d2:34:ef:2a:
ce:6f:76:85:f5:6b:59:fd:4c:85:5e:e6:b8:01:fa:
e4:5c:9e:a2:92:18:a3:7f:e0:13:a8:71:ee:33:1f:
ff:71:b8:ba:47:e8:55:92:b6:9a:0a:9d:56:36:ad:
82:26:c6:8f:1c:35:50:92:1b:bb:d0:3f:16:57:45:
ff:cd:2f:7d:54:e9:0a:36:36:99:c7:66:a7:19:42:
a2:2f:84:06:c1:28:da:b9:fd:0c:c1:20:4d:9a:f5:
94:60:a9:f2:83:8f:95:c2:c9:b3:ff:46:94:f0:6c:
c7:c5:46:53:13:35:14:a3:1e:1d:6d:90:b0:97:d3:
a5:5c:64:0e:78:ab:54:ef:d9:c3:a4:91:bd:6e:07:
94:26:4f:42:9f:ed:dd:37:a5:94:19:ef:bf:8f:d2:
b0:16:6c:d0:1b:be:a0:74:3a:97:f6:2f:53:20:fc:
6f:91:11:db:8f:7a:b8:40:88:fc:9a:25:95:a4:03:
6b:76:1b:6a:4d:b1:e4:e8:07:4c:79:ea:ba:18:42:
88:59:33:fc:cd:50:82:5b:df:f7:27:c4:b2:d5:15:
55:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7D:B5:95:B8:31:2E:8A:4A:64:33:66:82:D9:2C:87:0F:4A:57:B3
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ed:10:3c:57:7b:4e:1d:01:c1:19:bf:f6:30:40:67:97:e2:
d5:ee:20:9a:a7:af:51:3e:ef:e9:64:3e:51:51:2d:53:f2:04:
b9:1a:64:69:37:bc:18:59:19:dc:43:6c:62:66:b0:d9:9b:79:
e6:d8:0f:df:18:97:91:f8:a3:7b:5a:a0:73:95:f9:3d:2d:5a:
da:dc:80:86:ee:6c:86:42:25:5e:e7:5d:40:4a:1a:61:2a:cd:
fe:5c:0a:39:5b:f4:3a:ff:0b:31:f5:05:61:dd:6f:32:fd:74:
69:d1:64:d1:8c:c9:70:b5:f8:e3:df:10:b5:11:0f:21:c5:1c:
26:fd:3e:ef:08:2a:c7:1c:55:51:67:d3:ae:b6:45:3f:fe:88:
b5:28:93:bc:2e:2d:dc:a5:2d:50:50:ab:07:7f:ca:85:a6:68:
50:b0:8d:44:f3:c4:a6:21:b2:e0:a7:e4:93:20:fd:2b:54:a2:
5c:fe:93:50:f8:85:22:ac:2c:55:fd:e6:2d:1e:e1:f3:b5:f1:
de:38:de:b7:ba:a6:fe:26:ff:d7:4f:fb:c7:a0:a3:15:98:f8:
35:a1:4e:53:f9:5d:4a:49:0b:db:9f:fa:b7:f1:de:ca:f2:61:
1d:39:cc:0d:5d:c2:a3:28:1e:81:02:a1:18:d6:bb:dd:3c:10:
08:f1:b5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:01:42 2026 by rpki-client