Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
File: PRRSju_C35P_tOdPobZQO3btls4.mft (raw, json)
Hash identifier: iQAnwTExB4Upe8HQfn6Qk+Yo66eAiVlOSIQAkxkuqbE=
Subject key identifier: C4:1E:6E:42:C3:A9:6D:51:D9:EE:9E:EF:51:EA:F3:A3:EF:A6:2D:9F
Authority key identifier: 3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
Certificate issuer: /CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Certificate serial: 019D29296262CD223C8225558D13D76524E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:01:11 +0000
Manifest this update: Thu 26 Mar 2026 08:01:11 +0000
Manifest next update: Fri 27 Mar 2026 08:01:11 +0000
Files and hashes: 1: PRRSju_C35P_tOdPobZQO3btls4.crl (hash: 5lxzZMyIxC7a/UcWG+PwfWdwa6VnwSx7HbUCcEmWrgs=)
2: qXL9HCnEZZ0eLCvEYVXXykmvKrI.roa (hash: lHRVSCUWXdm2fQuE7zCvC4y6PM1rko+SEbGui1sO7jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:62:62:cd:22:3c:82:25:55:8d:13:d7:65:24:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Validity
Not Before: Mar 26 08:01:11 2026 GMT
Not After : Mar 27 08:01:11 2026 GMT
Subject: CN=c41e6e42c3a96d51d9ee9eef51eaf3a3efa62d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:35:62:52:92:c6:3e:b1:9f:3f:e8:6c:aa:
ad:8a:9d:6e:b5:c0:49:ef:5a:f4:1b:8a:2d:b3:a5:
8a:2c:31:24:12:f9:d2:14:a9:e0:c0:e5:68:c0:28:
89:d9:01:ac:5c:a4:2d:51:f2:3a:b5:c1:98:30:31:
1e:ae:b8:41:fd:55:90:63:cc:c5:06:00:73:d5:67:
b3:58:20:12:ca:04:2d:f3:a5:9b:a9:c4:b3:20:ad:
a0:2a:a1:74:2c:59:84:c7:15:33:a9:e8:dc:fa:66:
42:23:8c:1d:b7:f0:cf:17:78:e9:7c:30:c8:01:96:
7d:d9:e7:bf:43:60:88:14:79:8a:1f:2a:ad:65:fc:
9f:7a:a4:06:07:01:3b:b9:49:61:cc:78:74:02:90:
2b:2c:97:12:53:5c:fc:4c:e4:91:a1:e1:25:14:b7:
d1:0b:d9:36:1c:7a:2c:32:63:c5:21:59:fb:62:a1:
58:1b:9e:4c:c4:d7:e2:b2:70:30:20:65:de:55:6a:
96:18:48:d4:a6:b6:af:4c:9e:35:ed:16:53:6e:bd:
4a:7a:62:38:16:59:53:e2:89:0a:ba:21:c3:a0:a3:
c7:61:35:17:ad:be:cf:52:47:70:19:4c:20:f6:ff:
73:34:31:c3:8b:91:b4:2e:b6:66:b2:81:69:1f:9c:
65:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1E:6E:42:C3:A9:6D:51:D9:EE:9E:EF:51:EA:F3:A3:EF:A6:2D:9F
X509v3 Authority Key Identifier:
keyid:3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2e:fa:6e:9c:6a:57:1f:a0:0e:59:65:ac:fa:31:f2:7a:4d:
fd:e8:d6:a5:bd:63:47:b9:cd:8e:a4:c3:71:65:ec:e1:f0:cb:
fa:a1:ce:88:e6:0f:f6:69:1a:ed:7a:8f:0d:e7:06:6b:1f:38:
3a:b7:70:c6:93:5b:66:7d:67:97:57:cb:57:22:43:84:87:cf:
e4:fe:2a:a4:0c:38:f3:5a:c0:40:35:33:2a:da:57:24:cd:13:
44:d1:55:21:d4:cb:10:45:c1:b6:3d:c8:d1:5d:0b:2d:c1:50:
14:d0:bc:4f:d6:71:c7:44:0d:e0:ca:04:1e:ca:19:6c:98:13:
85:69:dc:d6:70:9d:b7:5c:3e:4a:cb:ab:27:49:66:97:0e:78:
dd:35:ae:ff:39:0a:4f:42:9d:2e:c4:10:fc:40:db:fd:46:22:
ee:69:9b:93:97:8f:0c:9e:11:62:ee:76:78:64:ff:66:2f:fc:
46:f2:b1:06:d8:18:87:15:f4:26:76:67:5e:cb:ba:1d:65:97:
42:d7:f7:d7:91:70:7c:f8:85:cb:9a:e3:86:b0:69:27:13:04:
d9:40:34:42:fc:ba:8e:3e:0b:bf:80:53:f4:a0:0c:b6:dd:46:
aa:a0:55:f3:3d:2a:33:30:be:6f:36:4c:68:b5:a0:d2:32:5d:
54:70:78:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:21 2026 by rpki-client