Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
File: PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft (raw, json)
Hash identifier: Xmwu3C5f8DMvn620Q4WBrswa7rL+DiWt6HVRCEOZVCI=
Subject key identifier: A6:6C:23:50:D6:71:05:74:78:F7:67:CE:21:36:D1:52:D4:A4:A0:25
Authority key identifier: 3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
Certificate issuer: /CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Certificate serial: 019D37C0AFE210F3A2CC77D126D6E99D3E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:01:07 +0000
Manifest this update: Sun 29 Mar 2026 04:01:07 +0000
Manifest next update: Mon 30 Mar 2026 04:01:07 +0000
Files and hashes: 1: PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl (hash: 7DhvZsE2alRm/FogJa1u0At5QkZN3CYU6Cyg7MFma0Y=)
2: hl6VgB4kLfF0gYQB_c8vvP9sw9M.roa (hash: /Dm24RIVCygX2v7yBsB0ok3cyUYLJnR87PFrPkROav4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:af:e2:10:f3:a2:cc:77:d1:26:d6:e9:9d:3e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Validity
Not Before: Mar 29 04:01:07 2026 GMT
Not After : Mar 30 04:01:07 2026 GMT
Subject: CN=a66c2350d671057478f767ce2136d152d4a4a025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8e:0f:3b:16:18:74:7e:8f:30:3d:26:50:53:
71:c3:13:3e:2f:a0:08:36:b4:b5:f6:ed:85:be:ef:
b8:e8:7f:ff:8e:2f:ed:c3:25:96:e0:92:d4:46:01:
ad:9e:2c:48:2c:ef:2f:7c:16:72:7c:b6:92:c5:56:
2d:7b:0b:98:64:7c:7b:21:5d:b6:71:8a:ca:fd:4a:
51:4c:8f:3b:62:8a:f3:7f:5f:e5:6a:88:4f:8d:12:
0e:38:c7:da:7a:87:5d:1b:c5:28:11:55:12:8f:92:
92:8f:a6:39:8b:f3:bc:d7:39:9c:6f:90:aa:7c:ee:
4b:a9:ce:5a:9c:0f:bc:f0:61:75:dd:b5:8d:af:00:
8b:c2:88:44:84:67:44:a4:8d:b3:f9:22:08:ff:3f:
5c:2d:7a:3c:5a:b9:b2:8a:8b:dc:e6:a2:20:4e:d8:
38:ff:25:f1:66:be:f2:68:2d:01:ea:93:e0:36:b1:
bb:63:d6:63:b2:82:d4:1c:ec:8e:15:8d:4b:dd:ff:
49:53:d3:08:42:1c:85:59:64:22:c3:46:40:f8:e0:
59:89:b1:79:50:1e:88:95:ef:0f:2c:4a:32:fa:09:
35:4a:50:eb:bd:7c:18:a0:5c:d8:d6:68:27:b0:cb:
f6:75:84:fd:f2:bc:df:ea:38:17:bc:61:51:49:98:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6C:23:50:D6:71:05:74:78:F7:67:CE:21:36:D1:52:D4:A4:A0:25
X509v3 Authority Key Identifier:
keyid:3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:27:1f:31:75:33:e1:36:46:7e:1b:59:db:ef:cf:5f:93:9c:
b6:f5:ce:c3:ef:6e:ad:24:8f:98:54:63:4e:b4:92:88:6c:76:
c5:d2:fd:0f:cc:19:f2:a4:1a:5f:03:90:15:ec:30:2a:d9:48:
61:dd:c6:58:dd:f0:6b:70:8b:20:17:ce:d0:64:56:db:8d:f5:
4a:20:63:5e:f2:50:f9:a9:4e:44:60:0e:bb:c0:98:c6:7f:c6:
5f:fc:b7:a8:1b:ab:47:b1:b1:34:01:c0:6f:66:be:ba:0f:fa:
50:62:c4:05:b1:36:f0:e5:07:90:0a:5a:a4:35:67:69:97:f0:
39:3c:91:76:2f:b0:ad:19:d6:05:fd:5a:15:a2:27:d7:5f:9c:
60:27:f5:5b:63:29:f5:87:de:c8:74:06:44:1a:0e:2c:7f:04:
eb:21:7f:9a:fb:1a:b9:41:e3:81:cf:2c:ba:d7:d2:91:74:df:
da:be:9c:b8:ba:9d:1a:73:3a:cc:4e:f3:93:6e:9d:ae:97:1b:
76:0f:41:db:27:92:da:30:ca:eb:17:b9:dd:10:6d:96:45:93:
58:42:1a:b8:58:04:50:30:34:02:7d:57:f8:ee:54:e7:99:16:
0b:bd:2b:54:61:74:8b:ad:e3:77:61:90:f6:6d:6a:f5:4c:e2:
63:32:5c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:44 2026 by rpki-client