Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: 5SC7+ZPF9KUQPnmNNXiidhJRItii2ISvCgWhxbFQLQM=
Subject key identifier: D0:54:4D:F2:77:07:E8:34:4D:14:62:4C:9F:FD:7A:4E:FB:20:5A:DD
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 019D389BB13D289BFFC9E676DAF38DB91812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 0519
Signing time: Sun 29 Mar 2026 08:00:20 +0000
Manifest this update: Sun 29 Mar 2026 08:00:20 +0000
Manifest next update: Mon 30 Mar 2026 08:00:20 +0000
Files and hashes: 1: 9IdHCEJQuzKyxwFpT8ujYaesS9w.roa (hash: C3vAatIUJjp84Pk7IwDii/846WZ3p/AWV1sBtD8WSCA=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: up8+yXZKEqmSFJ2BafaNZTzYuxSUr21Us+9KubhCoos=)
3: dAsT8XG2mpyNIJ5hpWhJSc5415Y.roa (hash: 8hFFOmMnHAAA9ytOGH8EO+wUtjGfAGKJiyYhcntZJUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b1:3d:28:9b:ff:c9:e6:76:da:f3:8d:b9:18:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Mar 29 08:00:20 2026 GMT
Not After : Mar 30 08:00:20 2026 GMT
Subject: CN=d0544df27707e8344d14624c9ffd7a4efb205add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a9:67:e7:22:fc:78:bb:89:9c:dc:7f:ed:a8:
93:0f:79:e7:64:3e:d4:84:3b:94:3e:d2:c8:55:7f:
a6:8c:25:14:af:41:64:89:a7:92:09:18:9c:41:74:
e6:17:f6:9c:12:14:43:27:6b:01:49:6b:03:52:e6:
b3:ad:09:33:a7:8f:7b:82:03:87:e4:08:0a:40:b9:
6e:00:c8:88:ea:74:f9:15:5f:3f:50:b8:b0:f2:ea:
92:38:e2:21:bf:9c:7a:93:c3:0e:2d:ea:43:77:e0:
c9:7d:fb:a4:f8:a2:e9:f8:54:66:b3:87:2c:e1:bf:
51:7d:82:77:3a:ee:3d:64:e9:2c:61:1e:83:83:9d:
af:c8:27:55:20:21:99:6a:d5:9c:4c:88:eb:cf:a7:
93:c0:7b:09:9e:c1:ec:85:f3:4f:f7:ec:1a:c6:70:
89:df:2c:52:cc:73:07:4e:ac:62:31:f1:90:e9:04:
25:fc:bf:78:cb:f8:6c:1f:ee:00:bb:75:e8:c9:35:
70:af:75:b6:85:bc:a1:72:3f:47:cd:3f:62:9c:fe:
24:4b:a2:4a:a2:70:7f:dd:a5:1b:9e:15:d8:06:ce:
83:8c:50:66:fd:3a:dc:2f:dd:35:ba:af:bc:84:b9:
dd:f3:15:ac:b0:1f:30:e1:9a:cb:d5:f0:cb:5b:14:
f0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:54:4D:F2:77:07:E8:34:4D:14:62:4C:9F:FD:7A:4E:FB:20:5A:DD
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:21:0e:65:45:79:05:ad:ba:7e:3e:31:72:3d:cb:0f:d4:c3:
bb:8f:8a:5a:e5:95:2e:9a:fc:d1:d8:df:e6:b0:36:a6:28:6e:
8b:4b:59:89:30:0c:98:bb:e0:51:24:cd:dd:05:b1:47:23:64:
99:de:6c:f6:d7:e3:4f:18:3e:e8:8a:77:5d:ed:d6:0a:5a:a5:
9d:48:eb:1b:fc:8d:af:40:07:d9:e1:3a:90:4f:b4:da:3a:ba:
3e:cf:fc:f2:77:ab:6a:cc:ff:03:ef:89:37:e5:bd:4f:41:54:
b8:8c:b9:c5:69:2f:c1:3e:5b:d6:d8:46:4c:24:c0:ec:40:75:
29:da:21:7d:a0:f4:95:09:ea:d1:6e:f8:73:1c:6a:77:04:6b:
ed:94:6c:c7:4d:d2:b8:fe:e7:e6:fb:cc:9f:64:d7:86:6e:f4:
29:94:3e:7d:c2:45:0d:53:88:14:0f:11:cb:b0:22:b0:a5:94:
8e:a2:8d:18:c6:40:ca:ff:37:5a:6e:45:1c:42:54:dd:0b:d9:
b9:0a:d4:09:86:99:bf:c8:ab:da:60:ec:5a:48:93:f5:9a:0d:
8b:65:49:de:6b:97:ce:ea:76:95:8e:20:93:99:c7:15:ac:4e:
a6:43:c0:78:4f:74:57:46:35:ec:84:b1:8a:75:13:37:6e:dd:
19:f5:67:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m7E9KJv/yeZ22vONuRgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTFmYmE0M2Y1N2FiMDQ0NWU1NDJmY2VlY2I4NzY4MTY1
N2NjZjMwHhcNMjYwMzI5MDgwMDIwWhcNMjYwMzMwMDgwMDIwWjAzMTEwLwYDVQQD
EyhkMDU0NGRmMjc3MDdlODM0NGQxNDYyNGM5ZmZkN2E0ZWZiMjA1YWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKln5yL8eLuJnNx/7aiTD3nnZD7U
hDuUPtLIVX+mjCUUr0FkiaeSCRicQXTmF/acEhRDJ2sBSWsDUuazrQkzp497ggOH
5AgKQLluAMiI6nT5FV8/ULiw8uqSOOIhv5x6k8MOLepDd+DJffuk+KLp+FRms4cs
4b9RfYJ3Ou49ZOksYR6Dg52vyCdVICGZatWcTIjrz6eTwHsJnsHshfNP9+waxnCJ
3yxSzHMHTqxiMfGQ6QQl/L94y/hsH+4Au3XoyTVwr3W2hbyhcj9HzT9inP4kS6JK
onB/3aUbnhXYBs6DjFBm/TrcL901uq+8hLnd8xWssB8w4ZrL1fDLWxTwBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBUTfJ3B+g0TRRiTJ/9ek77IFrdMB8GA1UdIwQY
MBaAFD0R+6Q/V6sEReVC/O7Lh2gWV8zzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYt
YzVkZDM4NTdhNGQyLzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYtYzVkZDM4NTdhNGQy
LzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSEOZUV5
Ba26fj4xcj3LD9TDu4+KWuWVLpr80djf5rA2pihui0tZiTAMmLvgUSTN3QWxRyNk
md5s9tfjTxg+6Ip3Xe3WClqlnUjrG/yNr0AH2eE6kE+02jq6Ps/88nerasz/A++J
N+W9T0FUuIy5xWkvwT5b1thGTCTA7EB1KdohfaD0lQnq0W74cxxqdwRr7ZRsx03S
uP7n5vvMn2TXhm70KZQ+fcJFDVOIFA8Ry7AisKWUjqKNGMZAyv83Wm5FHEJU3QvZ
uQrUCYaZv8ir2mDsWkiT9ZoNi2VJ3muXzup2lY4gk5nHFaxOpkPAeE90V0Y17ISx
inUTN27dGfVnWQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:05 2026 by rpki-client