Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: K259+qVQfMAdP9xOSlY1oG63C52pEnUAW2XPah8HrZI=
Subject key identifier: FE:5E:5C:45:30:88:D4:25:9D:A2:04:C3:8A:DF:B0:5B:96:31:1C:32
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 01A1046DAE702C78298388909454927BADB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 0711
Signing time: Sun 04 Oct 2026 01:00:59 +0000
Manifest this update: Sun 04 Oct 2026 01:00:59 +0000
Manifest next update: Mon 05 Oct 2026 01:00:59 +0000
Files and hashes: 1: 9IdHCEJQuzKyxwFpT8ujYaesS9w.roa (hash: C3vAatIUJjp84Pk7IwDii/846WZ3p/AWV1sBtD8WSCA=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: v4FjpAIJrK7nyf59Jd1mXofw5DapA3PCrqH3c4a0ll8=)
3: PxvDtGkLrRUdBdSSMkryKYSq5DQ.roa (hash: a1Y1p5Rfj50JqGUs7MR0i4IkKy2749qtvdCUmfhjfIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6d:ae:70:2c:78:29:83:88:90:94:54:92:7b:ad:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Oct 4 01:00:59 2026 GMT
Not After : Oct 5 01:00:59 2026 GMT
Subject: CN=fe5e5c453088d4259da204c38adfb05b96311c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:0f:11:38:5b:1e:bd:7f:54:65:29:fc:f6:
a6:dc:c0:81:32:d2:9d:10:27:df:66:00:85:29:26:
87:c5:6f:1c:b5:ec:ea:cb:57:2b:22:e7:24:77:b7:
ae:f3:3c:59:4e:77:57:00:14:58:d8:0e:83:07:fd:
ff:d0:f1:4f:4e:ab:24:98:63:53:92:be:5d:aa:1b:
b6:67:54:0b:90:e6:81:c5:63:c9:9c:e9:e1:93:25:
e3:95:74:3c:13:f1:ad:6c:9a:02:d7:a3:8b:f5:a9:
35:20:27:ef:76:8e:a9:c2:ce:99:da:c9:3b:d4:a4:
a1:1d:d1:a7:68:ed:49:33:1a:56:20:73:c1:4d:a0:
8a:f0:66:39:f2:5e:f3:07:19:cf:d8:d0:a0:fe:d9:
93:3e:72:7f:fe:81:a2:24:57:2f:a5:60:fd:92:fa:
aa:38:d3:a9:8e:1f:1b:75:e5:a4:d4:4a:86:b3:28:
99:0e:4b:40:65:b1:9d:2e:2d:f3:9e:a2:05:56:c7:
44:97:9a:2d:4e:d6:10:30:d2:8a:7b:6f:b4:78:b1:
9e:18:af:e6:ae:52:8e:e2:88:6f:9f:e4:33:e7:f0:
e6:2b:07:98:5a:41:bb:a7:70:47:bc:8b:44:17:2a:
35:9d:c9:38:42:25:a4:10:89:da:7b:81:66:76:a3:
91:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5E:5C:45:30:88:D4:25:9D:A2:04:C3:8A:DF:B0:5B:96:31:1C:32
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b7:77:69:9c:4f:57:74:d0:ae:bc:45:a1:88:76:0b:d3:2e:
63:3b:ea:0f:16:37:3e:18:59:9b:f0:04:d2:88:0a:78:be:bb:
3b:ff:13:7b:f1:fa:50:ce:7f:32:67:73:ae:9a:50:87:7a:b2:
b1:ba:61:91:4e:af:5d:b5:19:34:8e:62:e7:57:ca:0a:34:53:
96:3e:99:24:96:6a:d6:3c:cf:d5:7f:c2:0d:df:41:85:00:96:
bd:64:49:e2:c9:7d:6b:5f:8a:21:2f:b1:ee:bb:ba:41:45:a1:
18:30:d8:f6:30:77:49:38:b8:e3:81:fe:50:e9:83:6a:e1:7e:
97:a0:39:a4:e9:0a:22:bd:4b:05:2c:1a:f3:25:f5:76:73:6a:
23:d1:0a:69:d9:98:f4:4e:be:05:9a:8d:ba:aa:94:fa:ab:3b:
27:ae:6a:85:b5:ec:27:f5:58:13:ad:27:70:b1:58:83:01:72:
0f:63:b0:b8:4d:e9:f0:3c:f1:5d:89:ac:7e:54:6d:0f:9b:df:
8e:15:28:fb:02:ab:b7:23:9d:23:fd:da:cc:7d:2f:10:d2:47:
c6:37:7f:03:2b:4c:00:20:e0:97:69:93:71:28:bf:44:c5:f8:
1c:84:a3:4b:ee:b0:46:e1:36:48:56:3e:e9:a0:81:b7:41:da:
bf:84:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:17:54 2026 by rpki-client