Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
File: PrRw_U1nQhL_yCqZNvP-JUvszmY.mft (raw, json)
Hash identifier: jbg8nQSxPb5WmX8I8Jiv83lMVbs1KTCfy+acQ6SNses=
Subject key identifier: A8:E0:62:4A:38:F3:60:C5:7E:82:B5:FC:87:7F:AD:0E:40:DB:87:18
Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Certificate issuer: /CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Certificate serial: 019D2A3B9A3382757E0AD4EDB015FC436B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 13:00:42 +0000
Manifest this update: Thu 26 Mar 2026 13:00:42 +0000
Manifest next update: Fri 27 Mar 2026 13:00:42 +0000
Files and hashes: 1: LBDdRDDjw294mcZ0nbMxr8CzfS4.roa (hash: PPYwxRl5Le8Vm1g+lp2aZkNuPa03sEDkYEJw4YbvaRI=)
2: PrRw_U1nQhL_yCqZNvP-JUvszmY.crl (hash: F9Z8tCMTNMtqR3L/pnXCTymhpf5xI7CcUjV2Rvx+7WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:9a:33:82:75:7e:0a:d4:ed:b0:15:fc:43:6b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Validity
Not Before: Mar 26 13:00:42 2026 GMT
Not After : Mar 27 13:00:42 2026 GMT
Subject: CN=a8e0624a38f360c57e82b5fc877fad0e40db8718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:9e:d3:7d:bf:3b:cc:c4:4a:bd:1e:cd:ad:
68:a1:24:85:da:9a:d2:36:76:86:75:db:a1:42:99:
6a:c1:96:9c:a8:15:6a:bc:a9:9d:7d:5d:ed:fb:1a:
cd:cf:ff:9d:2f:95:42:0e:c8:ee:04:5d:ba:ae:e1:
74:f0:56:28:b7:e7:f2:2b:a2:75:9e:c1:3b:43:09:
28:20:e2:65:fe:46:40:fc:8e:d6:b0:62:27:02:4d:
55:2b:83:51:d2:dd:45:ee:97:8f:a3:ab:37:82:42:
61:bb:16:fc:08:f4:8e:29:9e:21:46:5d:40:67:49:
48:6a:19:98:f0:ea:d1:0b:51:58:94:63:5c:6c:42:
d1:d9:30:9b:ba:d2:75:61:c3:2e:89:69:5f:14:5f:
58:e0:9d:a4:10:62:a0:de:f0:ee:ed:54:54:22:14:
1b:3a:6c:55:2a:35:0e:16:fb:14:be:a0:ea:8f:17:
13:d5:74:89:b4:f3:a6:88:d1:d3:62:04:81:b1:72:
32:0b:ea:77:9a:70:a2:a5:00:57:83:25:de:e3:e1:
87:78:b2:b7:9a:1d:87:62:1d:06:b1:19:9f:a1:8f:
e5:6e:d0:60:bc:8e:6a:bc:56:90:7a:ea:0f:77:df:
c0:ef:42:b5:c4:4d:13:12:09:15:8f:dd:6b:01:a5:
c1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E0:62:4A:38:F3:60:C5:7E:82:B5:FC:87:7F:AD:0E:40:DB:87:18
X509v3 Authority Key Identifier:
keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:be:df:31:14:fc:be:1c:f0:07:e6:61:a4:fe:4e:18:49:f9:
59:cd:ff:9d:21:1b:e4:85:e5:e3:eb:1e:bb:a8:af:39:d8:29:
5b:d1:e2:71:68:cd:4f:51:00:0f:fc:b3:7c:a7:5a:c6:53:39:
6d:a4:11:1c:28:28:fd:38:bf:19:83:8e:33:e6:cd:1f:c2:3d:
97:33:2b:95:3e:fe:2f:a9:4a:40:e1:0b:cd:72:df:c2:70:c2:
b9:15:43:5d:8c:a0:c1:e4:0d:ff:86:79:9d:95:59:bc:65:37:
9d:c7:b3:0e:77:e5:a3:1f:89:0f:13:84:d7:5d:e2:e2:52:cb:
f7:99:60:ff:fd:da:39:4d:f6:e4:33:fa:00:28:78:b9:e6:cd:
17:13:de:ce:c1:50:57:ab:c9:11:a1:00:64:c0:7d:2a:73:bd:
fc:f2:bb:5c:52:91:7b:15:91:20:22:26:15:25:d5:62:79:25:
eb:84:19:b7:2f:75:b9:ae:37:23:9f:bf:95:5e:cb:0a:bb:9c:
8a:e2:9a:49:86:7b:42:91:a5:7f:e7:bd:f2:ec:9a:68:b7:fb:
e2:62:a7:e0:8e:9e:df:82:a2:97:57:67:ec:fc:8a:d4:8c:79:
7f:7c:ad:dd:2a:07:dd:16:3d:bb:93:1a:43:c9:46:90:51:13:
b6:36:88:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO5ozgnV+CtTtsBX8Q2t6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYjQ3MGZkNGQ2NzQyMTJmZmM4MmE5OTM2ZjNmZTI1NGJl
Y2NlNjYwHhcNMjYwMzI2MTMwMDQyWhcNMjYwMzI3MTMwMDQyWjAzMTEwLwYDVQQD
EyhhOGUwNjI0YTM4ZjM2MGM1N2U4MmI1ZmM4NzdmYWQwZTQwZGI4NzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ+e032/O8zESr0eza1ooSSF2prS
NnaGdduhQplqwZacqBVqvKmdfV3t+xrNz/+dL5VCDsjuBF26ruF08FYot+fyK6J1
nsE7QwkoIOJl/kZA/I7WsGInAk1VK4NR0t1F7pePo6s3gkJhuxb8CPSOKZ4hRl1A
Z0lIahmY8OrRC1FYlGNcbELR2TCbutJ1YcMuiWlfFF9Y4J2kEGKg3vDu7VRUIhQb
OmxVKjUOFvsUvqDqjxcT1XSJtPOmiNHTYgSBsXIyC+p3mnCipQBXgyXe4+GHeLK3
mh2HYh0GsRmfoY/lbtBgvI5qvFaQeuoPd9/A70K1xE0TEgkVj91rAaXB6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjgYko482DFfoK1/Id/rQ5A24cYMB8GA1UdIwQY
MBaAFD60cP1NZ0IS/8gqmTbz/iVL7M5mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJSd19VMW5RaExfeUNxWk52UC1KVXZzem1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83NDRlNTMtOGRlNi00NjcxLTlmODAt
NWYwMTU3MzBkODExLzEvUHJSd19VMW5RaExfeUNxWk52UC1KVXZzem1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83NDRlNTMtOGRlNi00NjcxLTlmODAtNWYwMTU3MzBkODEx
LzEvUHJSd19VMW5RaExfeUNxWk52UC1KVXZzem1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlr7fMRT8
vhzwB+ZhpP5OGEn5Wc3/nSEb5IXl4+seu6ivOdgpW9HicWjNT1EAD/yzfKdaxlM5
baQRHCgo/Ti/GYOOM+bNH8I9lzMrlT7+L6lKQOELzXLfwnDCuRVDXYygweQN/4Z5
nZVZvGU3ncezDnflox+JDxOE113i4lLL95lg//3aOU325DP6ACh4uebNFxPezsFQ
V6vJEaEAZMB9KnO9/PK7XFKRexWRICImFSXVYnkl64QZty91ua43I5+/lV7LCruc
iuKaSYZ7QpGlf+e98uyaaLf74mKn4I6e34Kil1dn7PyK1Ix5f3yt3SoH3RY9u5Ma
Q8lGkFETtjaIUw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:25:21 2026 by rpki-client