Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier: 0YRGIPPebas/TzAc6DVnwUaZhLCelDQ9MvlI0zJiweU=
Subject key identifier: 1D:2B:BE:47:B1:9E:2D:B4:5E:5A:F9:11:CC:B5:65:02:DF:3A:86:A4
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 01A0D3F0862CA1B845B8576A56F2D7426889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number: 1334
Signing time: Thu 24 Sep 2026 15:02:30 +0000
Manifest this update: Thu 24 Sep 2026 15:02:30 +0000
Manifest next update: Fri 25 Sep 2026 15:02:30 +0000
Files and hashes: 1: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: ClQhrHf1OP7qUW1mZ0reMjUGyWxrBh4q1y/RLsCNpnQ=)
2: wumUMMWvHiUrTabZLhTSravhO6c.roa (hash: p2VcOKl2dOd/4+FLAlcMShjCSyG2pmnKtd0Km8VqtxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:86:2c:a1:b8:45:b8:57:6a:56:f2:d7:42:68:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Sep 24 15:02:30 2026 GMT
Not After : Sep 25 15:02:30 2026 GMT
Subject: CN=1d2bbe47b19e2db45e5af911ccb56502df3a86a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:6b:e7:ff:65:99:3f:36:9f:b7:85:5c:2a:
f7:2e:72:aa:6f:29:a2:ed:b7:2f:28:8a:b0:c2:6c:
ee:d4:ad:ba:09:fe:ff:56:69:78:40:d1:5b:dd:94:
c6:e5:20:7e:57:30:d3:28:30:fe:2c:33:70:f2:95:
57:02:13:a4:33:a4:1c:04:bf:f5:94:21:c1:c4:16:
c9:e6:fb:0e:00:95:e4:3e:bc:53:f1:90:3c:26:68:
f2:22:c3:e6:8d:d1:de:88:46:a7:ae:8b:49:87:4a:
a6:2b:f5:82:59:0f:8f:af:f2:39:ef:37:f7:89:21:
a8:1e:14:70:e1:5b:e3:e0:fa:30:41:b5:48:0f:83:
91:d6:7b:df:c7:32:a9:d2:8c:fd:79:5e:78:2d:62:
05:db:73:11:00:94:5a:76:cb:3e:45:49:3b:9d:d0:
47:3d:da:fb:b3:71:61:da:cf:64:d0:2f:ea:18:83:
23:6e:97:d9:dc:91:d7:86:3e:6a:90:74:30:38:2f:
a2:6a:6a:10:d7:fd:2d:2c:d8:2d:b1:76:9e:b5:19:
e7:69:f1:65:0a:79:ed:21:eb:14:01:82:e2:47:00:
49:20:8b:39:79:a8:73:60:d8:fb:24:27:b1:c2:14:
2d:e7:f2:54:35:67:cb:70:6f:ca:f3:b1:c1:ee:66:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2B:BE:47:B1:9E:2D:B4:5E:5A:F9:11:CC:B5:65:02:DF:3A:86:A4
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:34:8a:bf:92:63:18:36:43:90:c6:b7:a8:61:4e:82:1f:e0:
43:5c:0c:fe:ef:17:73:d3:99:18:de:6d:4c:8e:79:33:a7:65:
94:0d:2a:09:7a:72:28:cf:ec:fc:24:01:52:63:c6:95:ad:42:
6d:2a:b0:d3:a9:7a:d0:97:31:db:17:66:aa:8a:b9:74:36:6f:
d4:72:f4:fd:57:62:08:e3:f1:f7:e3:a6:27:87:c6:14:4a:2f:
9a:48:0e:09:9c:51:78:2f:ef:ad:5d:f2:a6:7b:5e:28:a6:e0:
c8:22:34:98:37:09:e0:c7:fa:b5:e5:ff:8c:36:57:f5:27:a8:
32:26:5d:da:20:99:f8:01:df:1c:dd:54:36:ba:ba:f3:7e:89:
16:d9:2a:89:55:58:46:88:82:19:4f:e5:0f:63:64:eb:86:56:
6a:aa:ae:c9:50:0e:ed:86:42:79:6a:a3:2c:4d:dc:dc:25:d8:
a5:1b:11:94:46:a1:07:a9:d6:30:ba:b2:31:c9:cc:9b:b9:71:
01:3a:78:9f:d2:50:8b:e5:00:49:77:1d:7a:e7:c7:fd:de:d1:
af:05:ff:4d:a6:b2:d4:a2:1a:d3:77:9b:73:3e:7c:c5:0f:c8:
c0:a5:b6:ea:5d:73:ac:2a:8d:d5:06:62:c9:95:18:71:a2:3b:
f9:d1:af:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT8IYsobhFuFdqVvLXQmiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTYwNzJjYTAyNTJmYWI1MDY1OGQ3MzZmZjJjNjBjMTYy
OWRjNzYwHhcNMjYwOTI0MTUwMjMwWhcNMjYwOTI1MTUwMjMwWjAzMTEwLwYDVQQD
EygxZDJiYmU0N2IxOWUyZGI0NWU1YWY5MTFjY2I1NjUwMmRmM2E4NmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb5r5/9lmT82n7eFXCr3LnKqbymi
7bcvKIqwwmzu1K26Cf7/Vml4QNFb3ZTG5SB+VzDTKDD+LDNw8pVXAhOkM6QcBL/1
lCHBxBbJ5vsOAJXkPrxT8ZA8JmjyIsPmjdHeiEanrotJh0qmK/WCWQ+Pr/I57zf3
iSGoHhRw4Vvj4PowQbVID4OR1nvfxzKp0oz9eV54LWIF23MRAJRadss+RUk7ndBH
Pdr7s3Fh2s9k0C/qGIMjbpfZ3JHXhj5qkHQwOC+iamoQ1/0tLNgtsXaetRnnafFl
CnntIesUAYLiRwBJIIs5eahzYNj7JCexwhQt5/JUNWfLcG/K87HB7majMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0rvkexni20Xlr5Ecy1ZQLfOoakMB8GA1UdIwQY
MBaAFD0WByygJS+rUGWNc2/yxgwWKdx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yZmJmMmMtNTQyZi00Yzk4LTk5ZGIt
YTRlNWRlOGVlNzE2LzEvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8yZmJmMmMtNTQyZi00Yzk4LTk5ZGItYTRlNWRlOGVlNzE2
LzEvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITSKv5Jj
GDZDkMa3qGFOgh/gQ1wM/u8Xc9OZGN5tTI55M6dllA0qCXpyKM/s/CQBUmPGla1C
bSqw06l60Jcx2xdmqoq5dDZv1HL0/VdiCOPx9+OmJ4fGFEovmkgOCZxReC/vrV3y
pnteKKbgyCI0mDcJ4Mf6teX/jDZX9SeoMiZd2iCZ+AHfHN1UNrq6836JFtkqiVVY
RoiCGU/lD2Nk64ZWaqquyVAO7YZCeWqjLE3c3CXYpRsRlEahB6nWMLqyMcnMm7lx
ATp4n9JQi+UASXcdeufH/d7RrwX/Taay1KIa03ebcz58xQ/IwKW26l1zrCqN1QZi
yZUYcaI7+dGvnQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:28:58 2026 by rpki-client