Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
File: PRKXkoZrFiE7VsW_pr66x8YYsVA.mft (raw, json)
Hash identifier: Q+nJWXVk2Wqrb0+5U/qbzYGz4ltoBdYKJcSvf4LrOc8=
Subject key identifier: 75:48:80:1D:90:B6:58:B6:D7:2F:C6:B5:49:C3:7F:F4:3E:31:F0:66
Authority key identifier: 3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
Certificate issuer: /CN=3d129792866b16213b56c5bfa6bebac7c618b150
Certificate serial: 019D38658330274EF1A44713329EF702FB6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
Manifest number: 141D
Signing time: Sun 29 Mar 2026 07:01:09 +0000
Manifest this update: Sun 29 Mar 2026 07:01:09 +0000
Manifest next update: Mon 30 Mar 2026 07:01:09 +0000
Files and hashes: 1: PRKXkoZrFiE7VsW_pr66x8YYsVA.crl (hash: sdiqwQxxjiGQp7aXGW98z4h3beV6R5UrC72M0wC6tJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:83:30:27:4e:f1:a4:47:13:32:9e:f7:02:fb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d129792866b16213b56c5bfa6bebac7c618b150
Validity
Not Before: Mar 29 07:01:09 2026 GMT
Not After : Mar 30 07:01:09 2026 GMT
Subject: CN=7548801d90b658b6d72fc6b549c37ff43e31f066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:b6:3d:29:e8:ce:fd:ec:12:11:70:f6:af:
e1:10:97:aa:d5:7e:21:2c:2c:93:2b:af:dd:1e:1d:
66:3e:fa:2c:10:76:7a:b0:68:1c:2c:4d:7a:19:b7:
56:bc:22:6f:b3:7f:24:b3:30:ff:33:23:4d:19:cd:
ac:ee:d9:89:b4:4b:8f:cd:34:38:ae:c6:d3:d9:c6:
17:c0:ab:74:10:94:6c:c2:5d:06:60:f5:e2:e5:0c:
76:06:e3:ed:f2:4f:dc:6e:90:8c:49:aa:92:e3:f9:
13:59:1a:58:21:af:fc:58:7f:ba:7b:5b:1a:26:24:
1a:87:22:96:7e:96:46:88:e4:ab:df:01:78:78:01:
8c:81:59:22:0a:2b:2b:c1:5c:b0:a6:f3:e0:2b:a7:
e4:af:d1:8d:63:85:6f:92:39:b2:c0:6a:07:8c:25:
e2:7b:4c:28:ca:a1:3a:50:c3:08:24:e8:01:31:1a:
25:b7:8e:eb:fb:9a:f5:ca:e7:ee:d5:ae:f4:fc:b1:
2c:da:fa:17:0f:e9:77:28:fe:e6:aa:0a:6b:31:24:
ea:18:99:39:11:0e:a6:60:7a:2f:89:9b:7c:51:0f:
2f:bb:c2:95:e3:9d:88:fa:87:17:db:58:a1:8e:97:
67:95:f8:f5:b3:46:65:8c:e5:a0:12:7f:5f:29:d4:
27:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:48:80:1D:90:B6:58:B6:D7:2F:C6:B5:49:C3:7F:F4:3E:31:F0:66
X509v3 Authority Key Identifier:
keyid:3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:29:1f:35:0a:35:4a:1a:b9:19:b7:2c:c1:d5:fd:f9:92:1f:
0d:89:28:ef:52:c0:74:37:ea:94:06:90:32:7c:cc:c3:ca:c2:
98:ec:9e:0b:65:cd:84:54:35:dd:65:fd:a5:17:6a:ae:0a:c9:
bf:f7:cb:68:cc:59:3c:29:1c:b3:31:22:f4:4f:85:bb:73:85:
aa:46:ea:26:d4:db:fc:a0:8d:71:fa:d8:cd:01:b8:ee:26:90:
e1:70:7f:7e:12:d1:12:82:04:43:52:49:9f:8f:d6:e4:dd:5b:
0a:cd:13:76:84:e8:9d:8e:7e:ab:fa:a4:ae:b6:26:be:27:70:
c9:f9:88:8d:b2:14:45:2e:db:c0:1b:c2:ab:09:dc:dc:5d:4d:
10:ca:b4:40:73:e1:18:65:89:6b:2b:50:36:3b:ec:ff:57:cc:
ab:26:8f:23:ec:bc:50:91:4f:80:03:f8:84:89:20:fc:9d:a8:
1b:a5:b3:c2:65:1f:48:08:3e:06:df:76:d2:44:c1:77:02:db:
b2:18:74:db:2f:fd:87:a0:f5:00:ed:ff:83:42:13:df:fd:fb:
6f:90:2c:b7:04:58:6b:52:8f:a6:14:18:38:9e:c2:29:ec:b3:
58:9f:89:da:a6:be:a0:cd:80:f2:e1:06:7a:f0:09:31:b7:5d:
40:c6:eb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:11 2026 by rpki-client