Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
File: PryeUbqrPD5qtpn8tEPwB_VGw_s.mft (raw, json)
Hash identifier: ZLtCAZ/YG+ZyjZT+sVJB/iCwKOmJlf7MBtvQJzCOfWs=
Subject key identifier: 81:44:84:1C:6F:45:B3:A1:0F:25:C1:C1:B3:3C:30:47:B6:55:C0:46
Authority key identifier: 3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
Certificate issuer: /CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Certificate serial: 019D284D9F717C2A9359D11C1EC010C1C40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 04:01:08 +0000
Manifest this update: Thu 26 Mar 2026 04:01:08 +0000
Manifest next update: Fri 27 Mar 2026 04:01:08 +0000
Files and hashes: 1: PryeUbqrPD5qtpn8tEPwB_VGw_s.crl (hash: BsW6izVK4IIFxBy+dgGaOs12Xml6VKEFb7Q01et0WPQ=)
2: sCE1yodUvj9BdJNK5llFZ8BEDYY.roa (hash: 3/B6MniV1srlZK4xMEp39gTJz673XIWVDanm60XM8zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:9f:71:7c:2a:93:59:d1:1c:1e:c0:10:c1:c4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Validity
Not Before: Mar 26 04:01:08 2026 GMT
Not After : Mar 27 04:01:08 2026 GMT
Subject: CN=8144841c6f45b3a10f25c1c1b33c3047b655c046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:b9:f5:7f:01:4f:5b:59:b9:d1:37:67:ce:
82:e5:72:6a:a6:1b:0e:a2:66:7e:60:ca:96:fa:bf:
61:62:f5:71:48:f9:e5:81:96:1b:53:c2:17:eb:7f:
53:6e:09:9e:45:f2:27:37:8a:73:0d:34:08:08:62:
57:06:23:c3:ec:6d:1f:31:34:77:0b:2b:2d:5e:60:
43:69:c2:41:c5:26:9d:c7:a0:8a:5d:68:38:05:28:
74:6c:f4:79:bc:10:c3:eb:05:4e:41:f4:3c:bc:18:
8d:5c:de:87:e5:69:62:a7:18:07:db:55:28:93:78:
21:bd:83:0c:89:83:96:80:7a:4b:15:3f:2a:f6:c1:
c9:1c:4c:a6:4f:a8:c3:0a:12:bd:9c:a7:66:b8:94:
17:8a:93:af:ee:d9:1e:9e:a1:a0:86:0c:ea:e5:ee:
ca:70:94:d9:8c:ed:6e:b5:e2:1d:44:bc:45:8d:da:
df:90:6b:0a:c7:6f:c8:c5:31:78:b0:17:81:18:44:
cb:f5:21:2d:44:8a:e0:42:46:7a:df:80:d0:cc:55:
83:3f:7b:90:54:30:cc:b1:3b:ba:59:c3:7f:97:1a:
8e:54:0e:1e:6d:81:4b:9c:d1:9e:9e:5a:be:5a:e3:
2f:ba:d6:05:d8:9a:a6:85:bd:bf:19:9b:53:ae:91:
ce:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:44:84:1C:6F:45:B3:A1:0F:25:C1:C1:B3:3C:30:47:B6:55:C0:46
X509v3 Authority Key Identifier:
keyid:3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:af:5a:d9:c9:be:d9:c3:5d:05:08:4c:ce:ea:51:24:19:49:
58:cf:ff:1c:99:70:a6:88:f8:69:3e:57:40:81:05:db:13:3e:
c5:30:2f:76:7b:96:e3:f0:ad:49:53:22:33:b1:4b:6f:bc:00:
66:f2:32:56:08:f2:f8:c7:c5:37:d2:61:ec:be:98:a4:2d:ce:
75:e7:0f:08:3c:68:07:3f:40:51:00:6c:33:66:75:dc:dc:f3:
6e:90:a4:a5:76:1a:42:a0:e2:74:04:03:36:55:01:f7:ac:f2:
85:9a:e2:5e:79:71:71:e9:d8:79:69:ae:90:30:41:20:04:0d:
71:7c:3b:d9:83:22:6e:00:bb:31:52:cb:c0:25:2c:6e:ad:e7:
ba:5c:d9:00:f6:fb:b5:ef:12:f0:9f:e0:05:4c:7f:c5:b9:37:
a2:a6:b0:93:49:3a:94:cf:e4:54:10:91:29:79:20:0d:7a:74:
a4:db:fe:8d:a9:8d:2a:04:0b:c9:d2:55:2b:2d:b0:96:4a:1d:
50:27:f7:a0:c4:05:b7:2f:df:74:73:6e:92:c3:1d:b1:63:9b:
9f:fa:63:bc:fc:11:b6:c4:b1:5e:e2:99:7f:47:80:0b:45:b8:
a7:ce:75:dd:79:93:08:4b:cf:57:b3:2f:8d:a7:e9:84:d1:75:
55:8a:33:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:58 2026 by rpki-client