Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier: ebLwwCf7v4V/z8YdDMT1y82ruAqKNtr1Demto/XL9A0=
Subject key identifier: 0F:34:A3:81:4B:0B:EA:39:B2:B4:D5:97:36:4B:5E:47:E8:2D:D3:19
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 019F935BB00A0EE99265CFA3A33839E55BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number: 128E
Signing time: Fri 24 Jul 2026 09:01:27 +0000
Manifest this update: Fri 24 Jul 2026 09:01:27 +0000
Manifest next update: Sat 25 Jul 2026 09:01:27 +0000
Files and hashes: 1: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: AOKt/2XA1TJnyGDpXLKbmX/dLT8z26B3n0MNySZ18EY=)
2: wumUMMWvHiUrTabZLhTSravhO6c.roa (hash: p2VcOKl2dOd/4+FLAlcMShjCSyG2pmnKtd0Km8VqtxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:b0:0a:0e:e9:92:65:cf:a3:a3:38:39:e5:5b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Jul 24 09:01:27 2026 GMT
Not After : Jul 25 09:01:27 2026 GMT
Subject: CN=0f34a3814b0bea39b2b4d597364b5e47e82dd319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:28:9e:91:4f:9d:77:dd:bd:58:b4:d6:49:e7:
80:cb:f9:c1:39:a7:a4:4a:84:9e:79:1e:c0:0c:c3:
2a:3c:5f:2b:d8:7a:5f:f9:82:f2:65:1b:88:7e:d1:
c8:89:df:42:ad:de:5e:98:b4:26:ff:8e:a7:1a:5d:
4d:67:5c:cd:6e:6b:2b:62:40:fb:c1:b9:b3:15:75:
02:cb:f6:c5:68:2a:22:89:f9:f2:77:e5:27:45:65:
c5:04:6d:dc:51:ec:da:19:51:ae:ef:8f:c5:4a:b7:
ac:e8:62:9b:56:d8:59:1d:53:87:ee:31:ab:33:dd:
23:22:b6:91:0f:61:94:28:98:08:27:79:28:44:b6:
5a:95:a5:9c:f8:e4:88:49:44:46:99:80:1b:7c:23:
22:70:4d:e7:78:cc:0d:c2:0a:bd:ec:e2:2d:12:8f:
21:0b:27:ed:53:d4:0a:1a:c7:4c:a5:85:7a:3f:43:
c6:a2:89:fc:55:fc:c9:b1:a1:a5:94:7b:91:5e:d2:
25:37:af:20:d7:f6:93:b4:38:dd:5e:fa:24:3f:09:
79:e7:5a:f8:9b:61:2d:2a:88:bb:e0:1f:76:57:3f:
d5:64:18:bc:50:d8:f8:90:d9:d7:ad:c1:ff:b8:b4:
b0:86:53:e7:f2:9a:0a:61:f5:54:0e:f2:d1:ad:87:
3e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:34:A3:81:4B:0B:EA:39:B2:B4:D5:97:36:4B:5E:47:E8:2D:D3:19
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f1:24:33:ca:0b:ba:08:1b:1c:cb:cd:6a:a2:2c:63:34:c8:
e3:b8:cc:47:d1:1c:96:74:e5:ce:19:a2:bf:cc:2a:aa:93:86:
a6:a9:33:10:fa:27:ca:93:07:08:98:6d:35:21:33:63:3c:82:
49:3e:38:8b:1b:44:c8:e1:65:0b:97:4d:5a:44:be:79:68:0f:
07:d5:08:4b:17:68:dc:d5:7f:92:03:92:f4:94:26:0a:d6:3d:
18:26:56:31:03:88:20:64:6d:bb:76:28:c4:b8:4e:25:3e:c5:
cf:39:8b:dd:1b:cf:60:80:b3:20:74:61:46:9b:e6:ee:03:e1:
be:76:54:6e:7b:b3:09:42:6e:3a:e8:7c:7b:de:16:6a:b5:e7:
9e:9f:d4:36:a2:cd:ea:da:81:54:69:97:c4:58:ed:19:3a:18:
15:b6:22:09:a7:d7:df:1a:00:66:10:f6:b1:b8:9a:01:b3:96:
c6:c9:70:04:08:01:ba:d2:96:b6:a6:4f:fd:15:9b:98:00:44:
a8:d6:b6:db:d7:d9:9d:76:a3:2e:c6:50:3b:d8:17:27:f5:75:
f9:f7:70:cd:49:23:e9:4c:31:63:2d:7b:9e:3b:3b:74:94:8b:
c7:f7:f6:ed:f0:d9:34:3d:c8:ba:2a:90:33:08:e9:25:21:f1:
fd:94:44:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:52:36 2026 by rpki-client