Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: lws3KoTbWJ2NubM+UIEgAxDVLFVi7ik70jDuSIvwUWY=
Subject key identifier: 59:AA:B6:47:C9:F1:AD:88:B8:38:AD:40:91:49:46:72:CC:BC:16:DC
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 019F11C09223A96E46570D8AC7FEAAD9E1EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 060E
Signing time: Mon 29 Jun 2026 05:01:00 +0000
Manifest this update: Mon 29 Jun 2026 05:01:00 +0000
Manifest next update: Tue 30 Jun 2026 05:01:00 +0000
Files and hashes: 1: 9IdHCEJQuzKyxwFpT8ujYaesS9w.roa (hash: C3vAatIUJjp84Pk7IwDii/846WZ3p/AWV1sBtD8WSCA=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: 3Z2IOkuRppvKWlx+JFWcG9m+3XSZoCMVWhvj2AiStBY=)
3: dAsT8XG2mpyNIJ5hpWhJSc5415Y.roa (hash: 8hFFOmMnHAAA9ytOGH8EO+wUtjGfAGKJiyYhcntZJUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:c0:92:23:a9:6e:46:57:0d:8a:c7:fe:aa:d9:e1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Jun 29 05:01:00 2026 GMT
Not After : Jun 30 05:01:00 2026 GMT
Subject: CN=59aab647c9f1ad88b838ad4091494672ccbc16dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:94:54:22:f6:4b:2c:aa:6b:86:55:64:7a:14:
46:6b:d6:66:90:ab:f7:57:df:cd:47:a9:57:c0:53:
36:1c:99:31:e9:8a:95:b9:c4:ce:e7:ed:a1:51:52:
96:65:77:e3:35:78:bc:21:eb:45:3e:8e:0d:1d:df:
1a:f1:43:d0:d4:ab:f8:b7:d4:06:12:a5:66:35:0c:
2d:54:85:44:9c:dd:94:12:2f:85:ca:1c:92:4b:3f:
f1:96:ee:78:99:a8:90:ee:f4:59:ee:85:e8:75:8b:
f6:6b:b8:9e:c4:4d:f9:e5:32:58:0e:a5:02:3b:10:
66:1f:8b:2d:47:87:88:c0:0b:83:d0:4d:af:e3:a3:
41:13:ee:ba:a9:b5:fc:6f:aa:13:d9:42:32:11:92:
64:01:08:c6:f3:8f:05:a3:98:bf:a1:3d:50:52:69:
bf:fd:57:2e:ac:29:86:5b:77:47:d4:d2:71:18:7e:
67:e6:ae:55:5a:af:65:49:74:4b:ad:60:93:d5:c7:
d9:1d:fa:70:53:49:40:c9:b4:11:f7:8c:99:52:ec:
2e:c1:bd:89:c9:9b:d3:cc:59:e1:d3:47:f5:71:e9:
1b:c4:a6:a7:be:74:d5:9c:76:5c:a1:91:2a:59:8d:
8d:5f:f1:61:a0:61:7e:ac:ee:03:dd:06:98:0c:82:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AA:B6:47:C9:F1:AD:88:B8:38:AD:40:91:49:46:72:CC:BC:16:DC
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c2:5a:1f:65:b4:de:5a:22:80:8b:75:8e:96:7f:b6:dc:dd:
9b:a1:44:a2:4b:c7:22:b4:2b:28:09:64:99:f4:9a:55:84:3b:
b9:55:05:5e:5c:7a:18:d7:90:75:6a:59:36:4e:11:db:ef:5d:
fe:d0:c4:2e:04:d8:e6:37:9e:b2:1e:bf:b9:09:23:e5:cd:9f:
9f:36:bd:de:fd:c8:e7:fa:20:6a:f0:c9:be:a8:24:91:e4:19:
be:38:d4:a7:ac:a1:27:95:45:76:5f:ee:3d:76:aa:c0:d9:57:
4a:1e:65:78:3e:8a:2d:bc:c3:58:ae:09:2d:11:ac:9f:4b:e1:
5f:ca:9d:e5:8b:61:43:44:2f:55:90:b0:b8:d7:7b:49:f9:78:
31:17:b6:2a:f9:06:ef:65:4d:b1:b4:cf:34:5f:d0:72:3e:5e:
a4:99:6f:0e:1c:0c:53:89:38:4d:5d:ae:ac:75:61:bb:e9:27:
54:5e:2f:4c:90:28:96:5e:b8:36:9d:17:d8:8a:b0:76:19:00:
ee:33:91:2b:0c:9e:03:b7:0b:b7:fa:96:27:fd:38:1d:21:16:
1e:26:3d:04:64:2a:90:b8:a8:d7:86:81:1f:ef:75:c1:25:d7:
06:e9:49:3c:0f:1c:b6:0e:e5:14:4d:e5:cf:3d:c2:88:f5:74:
e2:e8:ac:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RwJIjqW5GVw2Kx/6q2eHsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTFmYmE0M2Y1N2FiMDQ0NWU1NDJmY2VlY2I4NzY4MTY1
N2NjZjMwHhcNMjYwNjI5MDUwMTAwWhcNMjYwNjMwMDUwMTAwWjAzMTEwLwYDVQQD
Eyg1OWFhYjY0N2M5ZjFhZDg4YjgzOGFkNDA5MTQ5NDY3MmNjYmMxNmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJRUIvZLLKprhlVkehRGa9ZmkKv3
V9/NR6lXwFM2HJkx6YqVucTO5+2hUVKWZXfjNXi8IetFPo4NHd8a8UPQ1Kv4t9QG
EqVmNQwtVIVEnN2UEi+FyhySSz/xlu54maiQ7vRZ7oXodYv2a7iexE355TJYDqUC
OxBmH4stR4eIwAuD0E2v46NBE+66qbX8b6oT2UIyEZJkAQjG848Fo5i/oT1QUmm/
/VcurCmGW3dH1NJxGH5n5q5VWq9lSXRLrWCT1cfZHfpwU0lAybQR94yZUuwuwb2J
yZvTzFnh00f1cekbxKanvnTVnHZcoZEqWY2NX/FhoGF+rO4D3QaYDILz2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmqtkfJ8a2IuDitQJFJRnLMvBbcMB8GA1UdIwQY
MBaAFD0R+6Q/V6sEReVC/O7Lh2gWV8zzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYt
YzVkZDM4NTdhNGQyLzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYtYzVkZDM4NTdhNGQy
LzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMJaH2W0
3loigIt1jpZ/ttzdm6FEokvHIrQrKAlkmfSaVYQ7uVUFXlx6GNeQdWpZNk4R2+9d
/tDELgTY5jeesh6/uQkj5c2fnza93v3I5/ogavDJvqgkkeQZvjjUp6yhJ5VFdl/u
PXaqwNlXSh5leD6KLbzDWK4JLRGsn0vhX8qd5YthQ0QvVZCwuNd7Sfl4MRe2KvkG
72VNsbTPNF/Qcj5epJlvDhwMU4k4TV2urHVhu+knVF4vTJAoll64Np0X2IqwdhkA
7jORKwyeA7cLt/qWJ/04HSEWHiY9BGQqkLio14aBH+91wSXXBulJPA8ctg7lFE3l
zz3CiPV04uisyg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:34 2026 by rpki-client