Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
File: S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft (raw, json)
Hash identifier: ERQHdlRvbVchwRCYoKMbhIGp679aJoC35fWjzcoXN54=
Subject key identifier: 24:9E:47:D2:C4:93:B2:41:89:0D:EE:48:CA:0A:37:B6:3C:1A:C0:7C
Authority key identifier: 4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
Certificate issuer: /CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Certificate serial: 019D28171CC39C86D8991774C1E4AD15DE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
Manifest number: 183D
Signing time: Thu 26 Mar 2026 03:01:36 +0000
Manifest this update: Thu 26 Mar 2026 03:01:36 +0000
Manifest next update: Fri 27 Mar 2026 03:01:36 +0000
Files and hashes: 1: A7oH_fLfnOw7C8Ezc6fn-0zm-WM.roa (hash: p+2iqj6NoeYI6sIm7F3U7seEwOT2LgHbpeFNruLRw/8=)
2: S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl (hash: SpyP+0mFylKXmY4IG7LiDALgP7KZEB8PI7B5HKM9pdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:1c:c3:9c:86:d8:99:17:74:c1:e4:ad:15:de:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Validity
Not Before: Mar 26 03:01:36 2026 GMT
Not After : Mar 27 03:01:36 2026 GMT
Subject: CN=249e47d2c493b241890dee48ca0a37b63c1ac07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:d3:c2:8a:e0:27:ea:35:c6:eb:61:a6:fa:
97:f1:ec:f3:8f:b5:cb:5a:72:84:e7:35:70:eb:ba:
4b:da:d9:09:b9:70:fc:ab:e2:e2:2e:b6:76:fc:38:
8b:13:d1:de:cc:d5:d7:1d:ac:20:e6:e1:82:26:1f:
18:bc:49:eb:90:a9:05:28:21:04:c2:f0:6c:54:a0:
2e:ad:26:e4:f6:54:fd:03:77:95:f8:dc:21:80:ca:
bd:d2:53:54:ab:2d:d9:11:bd:02:6a:ec:0f:12:2e:
76:7c:91:28:98:5e:8a:d1:90:d2:14:a8:9c:5c:4c:
1d:49:d9:59:94:ef:12:e1:10:7a:24:53:cc:e2:d7:
f6:a3:d2:7b:1b:f4:80:5b:5d:db:fb:a2:b7:6d:36:
e1:b8:44:5e:2a:6c:9f:9b:ce:d4:8e:13:28:8e:87:
55:f0:d7:e3:f5:7b:7b:3e:62:ad:a1:e3:46:75:c7:
52:c9:72:2a:4e:f4:70:fa:52:70:eb:f3:b4:d7:19:
cd:ee:1a:16:c9:88:1d:6b:9d:f2:5f:58:c4:01:05:
4f:bd:67:04:b1:11:0f:41:de:eb:1d:f6:54:80:06:
93:df:de:bf:63:de:ae:4f:44:89:47:74:4f:1d:1d:
f9:cd:8b:b3:1e:18:4a:4d:09:81:cd:e9:1f:f6:e4:
e6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9E:47:D2:C4:93:B2:41:89:0D:EE:48:CA:0A:37:B6:3C:1A:C0:7C
X509v3 Authority Key Identifier:
keyid:4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e0:b9:ff:50:51:d1:48:b5:bd:b5:32:1f:dc:df:f6:be:e3:
89:b8:09:18:a6:a9:a3:3d:73:a0:74:b4:ca:98:35:d0:1d:55:
1b:41:e7:52:b3:8d:bb:da:d1:46:aa:34:1e:ad:35:47:e7:1e:
79:28:d8:a4:07:4e:b1:22:47:3d:a2:8e:ef:aa:d1:db:bd:90:
ef:a2:1c:e9:f3:ab:e5:79:4c:11:32:35:a9:9c:3e:c8:93:5e:
60:e8:31:6e:b9:98:c8:8f:a3:51:6d:d7:19:79:72:97:5c:a0:
e1:47:5c:f8:d0:af:e9:b9:1a:06:8d:a3:ec:90:ce:06:36:9a:
c7:3b:ce:03:e5:69:a7:0c:86:24:62:1d:54:e7:c0:8a:48:5e:
e4:ea:ac:9c:b4:b6:d3:e7:68:d6:31:ec:39:e0:6e:b5:f2:df:
97:34:ff:26:72:3d:89:e2:93:97:fe:c3:b9:4d:e5:72:5d:6f:
36:ee:cd:d6:24:16:c2:32:a0:0f:57:4e:59:58:ae:f4:59:a8:
05:04:b5:d5:47:a9:81:29:1b:7a:dd:cc:c3:f9:2e:c5:f3:13:
c1:f5:55:91:39:f1:bb:c7:b4:b5:6d:9f:bc:2b:a4:62:2c:f9:
07:97:33:16:62:db:41:57:8c:7c:ef:e3:c9:9e:20:23:d5:a1:
ab:74:c0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:58 2026 by rpki-client