Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft
File: PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft (raw, json)
Hash identifier: UiQj3ZxO6E9Xb0EySEqL7DJlfPqZS4oUyfb1rw5B8iM=
Subject key identifier: 00:0A:45:CC:2E:B8:1B:C0:D4:E2:49:E3:33:F6:25:DA:AB:4F:82:FA
Authority key identifier: 3E:B6:27:24:13:28:24:E5:49:06:E2:40:A8:80:36:41:9A:36:5B:84
Certificate issuer: /CN=3eb62724132824e54906e240a88036419a365b84
Certificate serial: 019D322BB2712D2DC5CA08534975EE7CAFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft
Manifest number: 01BF
Signing time: Sat 28 Mar 2026 02:00:17 +0000
Manifest this update: Sat 28 Mar 2026 02:00:17 +0000
Manifest next update: Sun 29 Mar 2026 02:00:17 +0000
Files and hashes: 1: CRPAp0Tq_99HKdMfqQ8CRHMv5K4.roa (hash: exjPgQMNN/0gQ9Q5SdY4wB3IAjY7eWsRbcbbFzdql7w=)
2: PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl (hash: 9U7GJC0gsQH0e9HwqHpYertC7+tLcO2zbyOaEgsS4jc=)
3: lP-bwsrPs8NhaEDiQ8lPOcNBDMU.roa (hash: MzwaDFcRJSXiHREPlsRhYeZ5uZA5XDQZnaEp7gHmjYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:b2:71:2d:2d:c5:ca:08:53:49:75:ee:7c:af:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb62724132824e54906e240a88036419a365b84
Validity
Not Before: Mar 28 02:00:17 2026 GMT
Not After : Mar 29 02:00:17 2026 GMT
Subject: CN=000a45cc2eb81bc0d4e249e333f625daab4f82fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:18:55:1b:e5:10:3b:33:52:b5:09:8f:00:
22:f4:31:b2:d3:7d:d6:39:7e:aa:5e:9e:e8:84:3c:
a6:01:a1:a2:7b:97:84:87:9f:fd:30:3e:01:76:0c:
37:41:3e:dd:e9:ac:f8:2d:f9:3f:47:4a:8c:fa:a3:
96:c3:e8:7c:58:ec:82:9f:8f:cd:ba:4a:b7:d9:00:
6b:f0:7e:44:3e:b4:5d:66:f5:a9:f0:64:95:8e:41:
83:9f:ec:99:29:9b:f7:06:11:c7:50:21:dd:48:43:
b5:4c:28:46:b7:8b:97:f4:2f:88:e5:96:53:93:4f:
2c:4c:53:79:78:35:c1:16:d6:86:3f:9d:02:e3:80:
88:a1:06:ef:e8:8f:99:2d:b1:47:61:08:6b:ad:1f:
46:77:db:39:97:ce:9b:db:9a:c6:b9:4a:22:12:d2:
b7:5a:01:f9:a0:e2:73:3e:2c:a7:90:1e:fb:20:40:
af:82:a3:23:f4:aa:ce:50:c3:51:63:e4:4c:36:42:
66:ca:fb:f0:a7:57:4d:6e:33:07:19:53:8a:29:11:
fc:47:be:5e:fd:f7:21:d4:74:6b:82:28:22:cf:c8:
0b:e9:1a:7e:19:8f:6e:4f:8e:ee:f7:33:88:e2:e6:
bc:67:b1:1e:84:b9:ed:fe:b7:28:91:05:10:fa:68:
3b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0A:45:CC:2E:B8:1B:C0:D4:E2:49:E3:33:F6:25:DA:AB:4F:82:FA
X509v3 Authority Key Identifier:
keyid:3E:B6:27:24:13:28:24:E5:49:06:E2:40:A8:80:36:41:9A:36:5B:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:94:f9:77:62:eb:7c:c6:4c:3b:d9:6b:d1:c1:e1:4c:de:cc:
f6:b8:23:e2:ed:e4:73:11:17:d3:8e:8a:a3:2d:dc:87:fd:f9:
94:fb:00:ab:3f:55:64:1f:8b:e0:f8:c5:9d:69:7e:53:e5:50:
9a:4f:99:13:cb:fa:cd:60:9f:1d:35:ad:4a:e3:c2:c3:8e:8b:
86:87:67:13:8b:e4:c5:10:4c:e8:8e:2b:34:ec:6e:76:90:a8:
73:b8:20:0f:a7:74:b6:9a:df:3b:2f:fe:17:16:69:db:ab:33:
85:03:d1:46:a7:b5:ff:56:d7:29:47:c9:cf:3f:0c:0b:ac:d3:
36:35:aa:f9:58:e6:93:e3:a0:e9:ab:fb:b5:6e:96:80:50:8d:
31:4f:85:3b:2d:ec:fd:e9:ab:27:3d:97:ed:39:45:82:b5:8d:
17:66:a5:95:91:7c:55:08:be:c7:18:ad:d0:99:d4:49:55:ff:
ac:ed:c6:05:49:ae:43:0c:69:8d:bd:4b:8f:56:01:d5:1f:1a:
c1:07:59:82:86:4c:1e:46:ea:23:67:06:3c:6b:61:72:f4:ea:
c7:e0:41:da:c1:c3:af:51:38:1e:39:b5:3a:37:0e:1c:9e:d6:
33:b9:0f:1a:24:d7:c8:2c:fa:72:b1:6b:ed:4d:64:f6:c9:e7:
7a:a1:b6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:51 2026 by rpki-client