Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File: prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier: Tbi4VOPpmiO/eGI2izVaIJRNHh2YQWOPpFDZla+7uqI=
Subject key identifier: DF:04:88:8E:84:43:72:E2:3D:0B:8F:7F:32:2E:90:80:7A:EC:78:53
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer: /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial: 01A0D0489E44E9CBA9EF869DF5AFE7147F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number: 0DC7
Signing time: Wed 23 Sep 2026 22:00:14 +0000
Manifest this update: Wed 23 Sep 2026 22:00:14 +0000
Manifest next update: Thu 24 Sep 2026 22:00:14 +0000
Files and hashes: 1: G42-Fdl3gJAxSTqoOxR_BXG1oH8.roa (hash: pai33aN90kyIzUMmy6nzZwQfDVVekgEOsKj6Cwhhy24=)
2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: /VQ8JnlTEJiSvrHKEbAm66vkvRlJWrYfV0fnKweBpAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:9e:44:e9:cb:a9:ef:86:9d:f5:af:e7:14:7f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Validity
Not Before: Sep 23 22:00:14 2026 GMT
Not After : Sep 24 22:00:14 2026 GMT
Subject: CN=df04888e844372e23d0b8f7f322e90807aec7853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:6e:92:c9:88:d9:da:60:5a:c0:39:c0:df:
28:1e:5e:d3:50:4f:e8:fb:8b:d7:c6:64:d3:81:3e:
9c:de:c5:a3:15:e5:cb:a0:d3:8c:12:61:5d:c2:26:
8d:dc:e8:8d:8e:fa:ff:00:cb:2d:aa:04:3e:a1:15:
3d:54:fd:68:74:be:56:a0:79:92:22:e9:22:ba:d1:
7d:e3:fe:6e:ac:9a:50:8e:af:56:4c:fa:23:26:5d:
10:8e:1f:3c:85:cd:68:a7:a9:ae:07:0c:62:89:e0:
b0:eb:f0:bf:7d:be:40:54:19:0d:ea:28:e7:e5:a8:
95:f0:c0:ec:e9:99:6d:89:ca:cd:8f:17:3c:67:28:
f5:5d:05:40:eb:dd:77:f9:21:cf:4d:b3:d5:0e:cc:
1e:58:9f:3f:e4:86:e8:b7:aa:74:00:52:b1:84:ad:
50:26:5b:16:66:76:f2:2d:c5:db:99:ee:7e:29:b0:
33:fb:9b:59:46:3e:b4:c2:9a:c1:c0:b9:f7:84:30:
31:70:af:92:36:69:31:e7:60:42:e3:0d:22:18:ee:
0f:2a:17:4a:3b:e4:ed:da:f5:60:40:30:12:d6:88:
8b:d3:64:4d:cc:83:0b:0d:c4:a6:92:aa:15:e8:3a:
06:82:83:f6:52:17:60:55:3f:b6:c3:6a:b0:04:75:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:04:88:8E:84:43:72:E2:3D:0B:8F:7F:32:2E:90:80:7A:EC:78:53
X509v3 Authority Key Identifier:
keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2b:74:f4:f9:4f:2d:79:bb:cf:9b:bd:73:2b:73:b7:cd:a9:
99:fd:9a:2e:41:b9:0e:0b:2e:c6:e5:9a:9b:9c:9a:ff:01:3b:
63:c9:f5:bc:8c:3e:c0:00:c7:8f:a6:22:df:13:53:c5:2a:b6:
cd:80:ff:f2:41:52:c8:eb:58:61:76:5e:8f:f0:bd:9f:f4:0a:
cb:f9:a5:ca:74:17:8d:af:b4:4c:f9:ac:75:5b:86:28:21:a4:
b1:eb:a5:e4:8a:84:94:a1:28:62:71:f4:d2:87:45:d8:1f:13:
c4:22:f7:80:2f:3a:0d:0e:21:9f:90:71:9b:b9:ba:fe:41:de:
5a:5b:fb:05:c1:9a:7e:95:8d:6b:05:ee:31:09:e8:82:c4:6d:
ec:af:bd:9f:78:22:7a:27:56:36:6c:81:80:76:8b:a6:7f:d0:
47:a7:bc:6b:41:3d:d1:57:94:b7:22:c2:a5:44:17:da:1f:27:
8d:26:6f:9d:2c:22:28:eb:f2:2e:de:d1:89:6f:73:b1:7f:42:
d0:e6:79:93:02:ef:32:e0:a1:f4:85:8b:57:45:91:d4:bd:c1:
14:3a:fa:9e:33:7f:d0:08:b6:13:3b:c6:60:c6:cd:9b:8a:01:
5e:ba:02:60:10:61:69:20:8d:7b:17:58:34:97:c0:0a:24:fc:
0a:96:df:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:05:41 2026 by rpki-client