Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
File: PrkDKEodFdwVitcYLqC854bOsq0.mft (raw, json)
Hash identifier: /2eaGDvrz/nQyZsphKL0JoeUeRogWLuLMmFVP05xH6Y=
Subject key identifier: D0:5D:93:43:45:A1:1A:25:F7:1F:EA:E9:BC:20:8A:B3:1F:4E:31:2A
Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
Certificate issuer: /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Certificate serial: 019D389BFBD1F57DD64F5D54DC4574281C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
Manifest number: 04EA
Signing time: Sun 29 Mar 2026 08:00:39 +0000
Manifest this update: Sun 29 Mar 2026 08:00:39 +0000
Manifest next update: Mon 30 Mar 2026 08:00:39 +0000
Files and hashes: 1: 0YvRiJaJZjqiY4U-xsumT6SoggI.roa (hash: YTiMe+1zJLvdrTTLNgEUB7xot3ds3X6F9h1I4Xe21t4=)
2: B3iq0ONo7KLOXNajJEU9_fT8nMA.roa (hash: siU5btEhE4XbyXfdsJsLAjTiTcogO6P0/rPXIN7WNVQ=)
3: IwL0FMLGOg5VqlW52QhR55d_wK8.roa (hash: Aq8zdRXcEkkg8WYuPHmD2/Gn6hy/jyUt5aM4M2GLRVo=)
4: PrkDKEodFdwVitcYLqC854bOsq0.crl (hash: yMV+gys4FanTwwlmxm8y9/vsmFbCzem44ig6EG6txSc=)
5: WOoCoLlmgXWyjK9qc9u-G0Pct24.roa (hash: lAKUdMYHZA1+80qntfhhpebRSlcoxO0/6Bne+KUexMI=)
6: gAidUOyTKtWsqogbz8Z7j-XZYdU.roa (hash: lrMZ/6KYodQFNtZQsABnSoAbHRdnZBb25oeXCjN3StI=)
7: uYBeqEVIhrx2gm5XzZWN3p3D4AU.roa (hash: K8Zss15V+Clx8kaH4kgNih0FONp94O63mbG65PyxQS0=)
8: wQa-_QrhebKsuNtc3pbAHGeGKYE.roa (hash: mXyLCczbJEb1sWHa1tj9M1BYnDbJgfQv+z61kz4D2so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fb:d1:f5:7d:d6:4f:5d:54:dc:45:74:28:1c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Validity
Not Before: Mar 29 08:00:39 2026 GMT
Not After : Mar 30 08:00:39 2026 GMT
Subject: CN=d05d934345a11a25f71feae9bc208ab31f4e312a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:d6:9d:a5:40:04:86:b3:60:0e:e9:a2:d3:
4d:60:aa:c4:ee:65:f4:95:16:38:15:07:67:22:0e:
14:39:e1:8a:7c:4e:ab:71:68:fa:eb:0c:17:61:b1:
ea:55:df:21:f0:b2:7a:32:9b:59:2b:a5:84:8f:b6:
38:80:5d:82:40:7f:c0:09:37:59:83:ee:01:99:4d:
30:66:fa:39:e8:58:f7:5f:7a:c2:87:74:fd:43:ca:
e1:d3:9a:31:d6:a6:73:aa:f3:a2:b9:8c:7c:40:16:
99:3d:91:5e:41:4d:a4:50:f6:c4:57:31:1a:a8:ec:
e6:14:cb:14:2f:57:1e:af:cb:18:96:fc:7a:b5:97:
39:5a:6a:5b:6f:a5:b0:2d:1c:6a:e9:38:2a:0c:54:
99:d8:c8:22:f5:80:bc:30:cb:c6:51:fc:0a:ec:9a:
5b:67:11:3d:cf:c2:5f:b7:1c:74:18:d9:93:ed:30:
3b:17:17:d1:87:84:90:c6:91:a6:df:75:fa:cb:70:
56:d4:03:b1:d9:a8:b2:5f:70:9b:cf:32:ce:d4:48:
12:40:fd:a2:26:2e:94:c0:84:33:84:f7:7c:02:a9:
a3:ae:57:51:32:e1:8e:de:b6:21:34:e7:eb:97:2f:
ed:94:a5:44:d0:0d:0b:ad:91:0e:42:0e:06:48:e1:
7e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5D:93:43:45:A1:1A:25:F7:1F:EA:E9:BC:20:8A:B3:1F:4E:31:2A
X509v3 Authority Key Identifier:
keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:13:04:48:0b:f3:3e:4f:1a:5f:7e:44:1f:d4:70:cd:37:5d:
0e:00:c5:6c:9a:a8:aa:8d:a6:33:4b:54:4d:d1:39:0c:3e:06:
bb:a0:a3:a4:cc:fe:86:b4:0a:a2:49:41:54:d5:8f:12:62:be:
71:a9:c6:cf:70:9f:e8:91:ac:90:2b:d0:6e:d9:2d:48:0a:3b:
94:cf:6e:62:fe:5a:67:98:d8:dd:ef:69:9a:b3:30:88:5d:e2:
ff:f7:10:8b:d2:4d:7c:25:b7:3e:6e:ff:6b:57:15:20:ae:16:
71:04:f6:83:25:7e:2c:15:32:3a:a1:35:ad:55:6f:f6:c0:c2:
2e:1f:49:6e:af:e5:8f:d7:59:4d:ae:45:66:74:0a:ff:81:9b:
57:a4:54:61:3d:c4:39:4e:5b:60:eb:b7:1e:52:00:14:e3:6d:
fe:c6:41:7b:7d:f5:ab:c4:08:28:55:68:9d:01:a5:06:66:e6:
4c:34:87:fa:ff:f3:1b:d2:76:4b:be:6f:2d:53:df:f5:76:87:
d5:0a:3a:c0:1a:fa:31:81:d4:69:68:a8:1b:83:c7:ef:00:fd:
5c:c6:17:f2:bf:f0:64:4d:d4:9e:26:79:60:75:9a:10:26:69:
f5:f4:fd:e1:65:d8:b6:29:ab:bb:76:b7:d7:77:5d:a2:ee:e8:
5f:31:1f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:24:31 2026 by rpki-client