Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
File: PRLRHJogPV58gmPt9URH47c1i38.mft (raw, json)
Hash identifier: tF9sq+FLjIpSlBkmdCTUiV6lBSTw4PdGYaCCtqKCLCg=
Subject key identifier: 71:93:9E:36:8D:29:B3:C5:05:A3:3E:84:4A:2C:A1:1E:13:4F:17:98
Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
Certificate issuer: /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Certificate serial: 019D3940E64E8A87A943D60C262A6DEA9A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
Manifest number: 13B7
Signing time: Sun 29 Mar 2026 11:00:47 +0000
Manifest this update: Sun 29 Mar 2026 11:00:47 +0000
Manifest next update: Mon 30 Mar 2026 11:00:47 +0000
Files and hashes: 1: PRLRHJogPV58gmPt9URH47c1i38.crl (hash: MPjgUfP79Me2CwMWNqtX4tajgUgC2r29/318rjGyKhw=)
2: fL10Ig4d3crLZGY9ylUsNdJrhx4.roa (hash: 59cphjVnvRGhN51MwGpM2RBhtTLQE+TadVntWntgkw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e6:4e:8a:87:a9:43:d6:0c:26:2a:6d:ea:9a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Validity
Not Before: Mar 29 11:00:47 2026 GMT
Not After : Mar 30 11:00:47 2026 GMT
Subject: CN=71939e368d29b3c505a33e844a2ca11e134f1798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:c7:00:ef:8e:6d:2b:1d:4f:98:c1:7f:b1:
6a:7c:98:df:f1:3d:b2:05:c5:0d:68:12:da:2b:9e:
8d:86:22:c3:f5:9b:ea:df:0f:60:bc:c6:96:b1:37:
e2:50:69:ff:5c:1b:11:f7:d6:b3:08:76:8c:ef:16:
07:31:73:08:50:45:e7:3f:52:38:f4:a1:ad:6b:da:
87:c4:a2:2e:63:86:ec:ba:92:9e:cd:c4:f9:43:5d:
d9:0e:75:cd:90:26:73:88:0c:b0:ac:45:dd:05:0b:
72:2f:44:4e:3c:cd:97:56:02:3b:35:13:37:cd:3c:
7a:3c:e6:54:28:3d:a6:9c:11:f0:51:27:73:7d:23:
33:e5:e1:7a:83:82:66:45:98:45:21:45:3e:bc:21:
e2:59:08:0c:38:10:e0:12:f5:ca:21:a2:fc:d1:78:
26:67:5b:80:dc:ec:1d:d3:89:63:50:bb:bd:0e:5b:
1d:fb:87:6f:38:80:aa:98:9f:61:4d:19:b1:bf:74:
4b:45:c1:16:9c:b6:85:4d:50:cc:65:a1:41:f8:a8:
87:95:e9:83:5e:09:83:4f:04:2d:0c:96:30:1c:09:
be:dc:44:60:de:59:ce:70:93:83:34:da:2e:03:df:
f6:9f:16:a3:f9:d9:96:d5:3e:32:7a:61:1d:c5:22:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:93:9E:36:8D:29:B3:C5:05:A3:3E:84:4A:2C:A1:1E:13:4F:17:98
X509v3 Authority Key Identifier:
keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c9:99:2c:94:c4:d4:23:84:74:bf:21:dc:c9:bb:3e:1f:b8:
99:fc:e4:e2:15:22:63:fd:c7:13:43:6f:b8:53:e9:e4:f9:d6:
fa:ab:28:d8:f9:3e:61:bf:1f:5c:ca:dd:d4:06:1b:44:2b:eb:
63:12:9a:1c:d6:d2:99:f1:70:b5:ca:0b:91:34:46:a0:49:67:
8a:00:2c:e1:32:22:1a:c4:f0:e9:7b:9e:26:da:c9:15:f9:a7:
ea:5c:77:7b:b9:26:37:e9:81:14:f9:56:af:72:17:af:8f:1a:
7c:ee:bf:38:06:73:81:f3:44:f7:f7:f2:38:2a:73:c1:25:75:
10:7d:d3:c0:01:67:0f:3f:f9:73:0e:1d:eb:ed:8f:de:2f:16:
67:a2:5b:05:02:0a:98:d8:5b:b6:ec:e0:15:2b:e9:3e:f9:d9:
40:d7:89:54:df:e8:71:1a:56:10:36:ad:95:66:da:da:ff:61:
f7:71:08:20:ab:ac:fb:92:56:c3:37:4c:ef:d4:40:31:6b:e9:
63:35:03:f1:85:52:6f:d3:9e:1f:8f:d4:b5:e1:a8:b3:e5:a3:
f1:79:14:26:cc:9e:aa:d5:91:7d:d0:fd:61:f8:b5:cc:ad:00:
1f:05:c9:c9:77:14:e3:0d:72:a7:45:4d:90:be:01:f3:17:4e:
d3:f8:63:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QOZOioepQ9YMJipt6pqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTJkMTFjOWEyMDNkNWU3YzgyNjNlZGY1NDQ0N2UzYjcz
NThiN2YwHhcNMjYwMzI5MTEwMDQ3WhcNMjYwMzMwMTEwMDQ3WjAzMTEwLwYDVQQD
Eyg3MTkzOWUzNjhkMjliM2M1MDVhMzNlODQ0YTJjYTExZTEzNGYxNzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmbHAO+ObSsdT5jBf7FqfJjf8T2y
BcUNaBLaK56NhiLD9Zvq3w9gvMaWsTfiUGn/XBsR99azCHaM7xYHMXMIUEXnP1I4
9KGta9qHxKIuY4bsupKezcT5Q13ZDnXNkCZziAywrEXdBQtyL0ROPM2XVgI7NRM3
zTx6POZUKD2mnBHwUSdzfSMz5eF6g4JmRZhFIUU+vCHiWQgMOBDgEvXKIaL80Xgm
Z1uA3Owd04ljULu9Dlsd+4dvOICqmJ9hTRmxv3RLRcEWnLaFTVDMZaFB+KiHlemD
XgmDTwQtDJYwHAm+3ERg3lnOcJODNNouA9/2nxaj+dmW1T4yemEdxSJ+fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGTnjaNKbPFBaM+hEosoR4TTxeYMB8GA1UdIwQY
MBaAFD0S0RyaID1efIJj7fVER+O3NYt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJMUkhKb2dQVjU4Z21QdDlVUkg0N2MxaTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xNjkzYmYtNmQ0MC00NjljLWIwNTYt
NWE4NDU3MTIxYTBiLzEvUFJMUkhKb2dQVjU4Z21QdDlVUkg0N2MxaTM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8xNjkzYmYtNmQ0MC00NjljLWIwNTYtNWE4NDU3MTIxYTBi
LzEvUFJMUkhKb2dQVjU4Z21QdDlVUkg0N2MxaTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8mZLJTE
1COEdL8h3Mm7Ph+4mfzk4hUiY/3HE0NvuFPp5PnW+qso2Pk+Yb8fXMrd1AYbRCvr
YxKaHNbSmfFwtcoLkTRGoElnigAs4TIiGsTw6XueJtrJFfmn6lx3e7kmN+mBFPlW
r3IXr48afO6/OAZzgfNE9/fyOCpzwSV1EH3TwAFnDz/5cw4d6+2P3i8WZ6JbBQIK
mNhbtuzgFSvpPvnZQNeJVN/ocRpWEDatlWba2v9h93EIIKus+5JWwzdM79RAMWvp
YzUD8YVSb9OeH4/UteGos+Wj8XkUJsyeqtWRfdD9Yfi1zK0AHwXJyXcU4w1yp0VN
kL4B8xdO0/hjLw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:48 2026 by rpki-client