Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
File: PrEhzwYygZ7s6r64qVVpxnUpiCE.mft (raw, json)
Hash identifier: kZmwzlCG33dbePHXr7GSg+vE2P6szhx/XdQwJfNqF2Q=
Subject key identifier: 98:AC:D2:EC:90:46:FD:00:E4:6B:CC:5C:02:3D:14:06:2A:2C:54:AC
Authority key identifier: 3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
Certificate issuer: /CN=3eb121cf0632819eeceabeb8a95569c675298821
Certificate serial: 019D265FB18BB730168A81D561F3CB27586E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
Manifest number: 140A
Signing time: Wed 25 Mar 2026 19:01:38 +0000
Manifest this update: Wed 25 Mar 2026 19:01:38 +0000
Manifest next update: Thu 26 Mar 2026 19:01:38 +0000
Files and hashes: 1: BvqPzBWXDdD_wNLa0N08b6_pz_k.roa (hash: GYBQI1YwuHCkNkDxrkD1QYuljCiU/SztGfYzxnToFa0=)
2: PrEhzwYygZ7s6r64qVVpxnUpiCE.crl (hash: rEAl9g+a8cjSn85+joL9ojwxySNx/4uQBEwzy+foYhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b1:8b:b7:30:16:8a:81:d5:61:f3:cb:27:58:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb121cf0632819eeceabeb8a95569c675298821
Validity
Not Before: Mar 25 19:01:38 2026 GMT
Not After : Mar 26 19:01:38 2026 GMT
Subject: CN=98acd2ec9046fd00e46bcc5c023d14062a2c54ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:c8:f1:9e:bb:c8:97:34:b8:e2:7f:e6:51:
f0:08:33:9f:1b:f4:6c:e9:32:74:8c:5f:2c:02:70:
ac:6c:bb:7e:7d:de:ca:5f:b6:17:f0:fc:17:8a:e3:
a9:eb:cf:83:da:3d:03:64:b7:9f:af:6f:09:a2:9b:
22:9f:5d:e5:d5:ad:98:bc:18:77:8c:93:a8:04:dc:
a4:dd:a5:30:65:f4:32:a4:b0:48:2f:cc:9c:54:92:
5d:08:11:a5:e3:3b:96:13:e2:e4:35:a8:f3:c0:7e:
1b:af:73:0c:33:e8:c2:40:c4:13:4e:3e:72:02:19:
d6:21:8a:b2:1b:9c:b5:a5:fa:03:35:e2:f2:dc:4d:
25:1a:86:f2:e0:9d:b9:00:23:7e:90:6a:97:61:5d:
f4:04:13:4e:d2:f9:41:32:43:98:a7:77:a8:cb:be:
b3:a6:c6:45:46:46:f5:e9:d5:8c:b2:76:1e:6b:52:
23:9e:6f:1c:3c:34:07:e8:5b:42:55:98:c6:8a:b0:
19:90:bc:c3:75:b6:93:54:0d:5f:be:b2:df:55:0f:
22:ad:d5:ce:4f:88:0a:8a:95:88:c9:26:ea:19:7d:
27:6a:42:0b:ac:4c:fa:7a:a4:c9:51:6b:2f:5f:2e:
9b:2c:5b:93:04:8b:e8:b0:c6:40:a9:99:c5:7e:1f:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AC:D2:EC:90:46:FD:00:E4:6B:CC:5C:02:3D:14:06:2A:2C:54:AC
X509v3 Authority Key Identifier:
keyid:3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7e:62:33:f0:46:d4:ed:d3:71:64:65:1d:da:f9:29:74:42:
3c:bb:78:e2:d4:5f:eb:41:e6:02:c6:00:ff:49:bb:90:17:cd:
8e:9a:51:c1:09:a2:39:f8:80:f3:11:4c:23:9d:a0:96:82:e4:
3d:10:4f:d0:85:96:bc:8b:0e:14:e1:9f:1d:16:4d:c1:75:e1:
c9:b4:66:15:b8:4a:39:f1:3e:7e:12:ac:33:11:e1:7a:45:43:
bf:d3:ea:6f:1c:5b:9b:e6:b4:ef:2d:4d:51:74:a8:27:c4:c0:
0b:b5:d2:1c:fa:b4:4b:76:f3:d3:14:87:d3:b3:b7:d2:46:a4:
9e:b3:77:bf:1f:07:54:91:61:dd:5a:4f:fa:a1:3f:62:31:f8:
76:e0:8e:6d:ee:3d:e7:06:5d:f0:31:ee:fe:17:8a:1d:90:51:
99:87:3c:c0:31:7c:04:16:06:28:58:0f:64:92:54:8e:06:32:
85:36:ad:7c:ef:70:95:5d:2e:6a:41:92:c2:14:3b:03:13:04:
83:53:cd:c1:e8:92:55:f1:2a:61:5c:0f:8b:18:76:f3:6a:58:
62:72:03:da:c0:94:4e:53:80:68:df:7b:a6:35:f3:95:07:e9:
5b:81:c2:4d:11:36:70:fb:3c:e6:83:00:08:b9:94:cb:56:4d:
23:94:90:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:37 2026 by rpki-client