Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File: prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier: 1ILBqi+NEGUINHFKGoQ8SLEkHiyEeBltsOtRE7yLMgk=
Subject key identifier: 26:83:2D:17:06:BF:55:A7:1E:2E:35:CD:44:08:70:1A:D2:27:21:56
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer: /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial: 019D333E823231BC6AB3084F1220E317BA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number: 0BE8
Signing time: Sat 28 Mar 2026 07:00:27 +0000
Manifest this update: Sat 28 Mar 2026 07:00:27 +0000
Manifest next update: Sun 29 Mar 2026 07:00:27 +0000
Files and hashes: 1: G42-Fdl3gJAxSTqoOxR_BXG1oH8.roa (hash: pai33aN90kyIzUMmy6nzZwQfDVVekgEOsKj6Cwhhy24=)
2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: RUqdnSwyygoG5UFORPRv7ryfoNPJX4XipnRISrZMpuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:82:32:31:bc:6a:b3:08:4f:12:20:e3:17:ba:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Validity
Not Before: Mar 28 07:00:27 2026 GMT
Not After : Mar 29 07:00:27 2026 GMT
Subject: CN=26832d1706bf55a71e2e35cd4408701ad2272156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:6f:1d:a8:2c:fc:90:db:e2:bc:bc:21:74:
08:20:f7:2a:4c:83:5f:6b:7f:2c:f5:2a:e2:59:46:
ac:ad:cb:d7:5d:4c:2d:3a:3d:f8:89:81:9d:5a:df:
03:4a:31:74:97:c3:94:85:c7:32:bf:a7:44:10:25:
38:90:d4:15:37:fa:d6:6b:79:da:77:12:08:7b:6a:
a8:6f:8e:14:55:9f:59:66:9b:9a:2c:fe:cf:7a:ac:
dc:36:7f:20:b3:95:7b:93:61:e0:28:e9:bf:80:29:
0f:e3:d0:cc:8f:6a:78:64:d7:1b:74:12:a4:2f:1f:
a1:da:f4:8f:88:b2:d8:d5:2e:64:49:eb:ae:2a:e6:
57:1f:92:07:b3:dc:65:26:aa:68:c6:68:37:63:87:
5d:df:be:52:ff:97:d0:4a:e5:dd:0a:6b:ef:b2:b6:
7d:f5:04:98:5f:37:b8:b5:76:b7:0d:10:64:4c:37:
6a:a9:7e:53:fc:d0:83:41:1c:3d:7f:21:46:bc:6d:
fe:09:a4:3d:3b:f8:42:da:82:3e:20:7c:e6:98:40:
64:30:0c:39:35:be:9f:78:ed:3e:ba:e5:23:03:37:
fb:c6:24:5b:0d:fe:f3:07:39:de:53:a0:3f:01:e0:
bf:2f:b5:5a:83:ac:6e:81:e0:2f:3d:94:8e:9a:f5:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:83:2D:17:06:BF:55:A7:1E:2E:35:CD:44:08:70:1A:D2:27:21:56
X509v3 Authority Key Identifier:
keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c0:87:0a:76:c9:f4:8a:c3:4e:b3:7a:70:e8:33:52:53:4f:
fe:dc:b4:fb:ff:bc:b1:bb:18:fc:a6:49:cb:93:55:c5:a1:d1:
ca:cf:43:1e:c0:01:e5:9b:d3:7d:1d:65:04:0d:ae:57:2c:2a:
02:e3:94:57:05:7c:b7:97:c5:4e:84:73:7d:0e:ec:e9:f4:7b:
8c:f7:22:5c:01:19:f1:58:16:15:37:dc:aa:51:7e:c7:a8:80:
44:81:95:75:6c:cb:7b:4b:4e:2c:7b:63:6c:98:9a:f4:a8:90:
15:a2:69:36:e8:30:e4:86:f4:28:f1:2f:17:e1:1f:b7:53:c0:
c6:3b:d8:d7:b8:b2:ce:74:2a:e1:ed:47:46:57:37:72:da:39:
3e:00:a1:2a:9a:25:a5:09:e0:43:06:08:55:d9:a3:a0:96:e0:
9c:35:98:67:2d:a2:5e:36:79:13:29:38:43:35:ef:a1:c7:f9:
38:ce:db:f0:3a:0f:9e:2b:b6:3d:94:4e:c0:cf:aa:b6:f9:ed:
9a:78:f7:11:dd:f1:7d:3d:3a:69:6f:f9:3a:d0:54:6f:77:2c:
0d:99:52:cf:ce:c4:fb:bb:0a:19:c1:24:f5:7e:a7:b6:6d:44:
cd:7b:17:19:8d:f1:7b:04:6e:7c:c3:9e:2e:e7:1b:74:3e:7c:
73:2e:58:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:12 2026 by rpki-client