Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
File: PRzEAjSeGROS0ex0acG8gkNjRDk.mft (raw, json)
Hash identifier: YdH/NI6jOfHLsXoNO5GTNk725Rqnu6DbzbFMHOn58lY=
Subject key identifier: CD:71:95:E4:45:45:C3:06:5E:CA:41:1E:D7:D6:D2:8C:5D:60:1E:D0
Authority key identifier: 3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
Certificate issuer: /CN=3d1cc402349e191392d1ec7469c1bc8243634439
Certificate serial: 019D27A94AAD0E5A94655B3F51178E17D5A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
Manifest number: 0CC9
Signing time: Thu 26 Mar 2026 01:01:39 +0000
Manifest this update: Thu 26 Mar 2026 01:01:39 +0000
Manifest next update: Fri 27 Mar 2026 01:01:39 +0000
Files and hashes: 1: BkKBPihquQKqSH7m5QGPwWadRUc.roa (hash: qo3k4ZbWsxiyID0p5/iO1VNo9C8XPua8Kf4TKnBGlWc=)
2: PRzEAjSeGROS0ex0acG8gkNjRDk.crl (hash: efQxpw8eh111gQZkU6t5l0bcZiyjr1Wi8i/Xx3GAB18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:4a:ad:0e:5a:94:65:5b:3f:51:17:8e:17:d5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d1cc402349e191392d1ec7469c1bc8243634439
Validity
Not Before: Mar 26 01:01:39 2026 GMT
Not After : Mar 27 01:01:39 2026 GMT
Subject: CN=cd7195e44545c3065eca411ed7d6d28c5d601ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:8c:08:05:29:31:03:57:e5:d7:5d:7c:3f:
ff:df:55:cb:81:af:d1:25:1a:de:3e:4d:6c:8e:91:
3b:ea:58:69:ea:a7:53:f8:1d:83:bb:c5:76:74:b1:
da:12:a0:90:74:c2:47:fc:54:2d:90:25:39:d0:3b:
f2:4d:54:b2:3b:a4:09:7c:1a:0b:d3:49:53:17:e1:
0b:3b:55:d7:c2:63:0f:28:d3:8e:ec:c6:0f:a1:13:
a6:e7:eb:c3:d6:1f:5b:02:00:ad:2d:f5:8a:f2:f6:
1c:42:7c:84:ab:f8:29:ca:d9:c4:73:4b:e3:3c:30:
3e:ee:15:04:26:a6:78:98:e7:80:c7:73:63:27:57:
cc:af:4f:8b:a4:8e:bd:04:62:f1:dd:ed:ec:a4:0c:
44:fb:e2:cf:50:2d:09:f5:ec:4f:87:ff:d1:9d:3c:
f1:7d:98:c8:ae:6e:6d:02:90:2c:cb:fc:5a:04:08:
77:0b:f7:30:5f:1b:42:08:fc:84:81:5f:f7:88:4e:
4a:b8:c8:d1:0f:f7:83:6b:7f:75:6f:a5:38:f5:9c:
57:fb:d6:7e:20:75:24:b0:b4:5f:4b:76:07:26:e5:
8a:91:55:01:b0:51:ec:52:62:54:00:ea:c4:b4:6e:
56:72:6b:30:c4:72:26:d3:96:cc:9d:26:e4:78:80:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:71:95:E4:45:45:C3:06:5E:CA:41:1E:D7:D6:D2:8C:5D:60:1E:D0
X509v3 Authority Key Identifier:
keyid:3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:09:86:5d:50:31:1b:e4:8d:69:dc:55:9f:d6:dc:92:7c:db:
bf:ae:04:bc:b3:4d:45:35:bf:77:45:db:bc:d1:98:50:cf:73:
0b:32:76:03:72:a4:2b:15:3c:26:5d:65:10:ce:76:14:73:e0:
e6:2c:1f:9a:13:fc:26:2a:f1:5c:77:46:62:7d:0f:d3:9c:e1:
e3:81:6d:ba:ba:06:7b:66:ca:d6:ca:0d:37:3f:f1:05:56:08:
91:15:a4:99:dd:6d:3f:3d:a1:24:3f:b8:10:3d:12:05:a2:d4:
51:6d:c9:1b:e9:66:0d:60:04:83:01:a1:5f:f1:17:3a:fe:ee:
56:ac:fe:8f:fe:5a:e8:5d:d3:22:d6:c6:a2:55:60:fa:e2:93:
20:27:3e:2b:ae:ec:cf:14:d1:04:e0:64:20:22:41:f8:f8:f1:
a0:6d:02:a0:27:65:55:79:58:ad:f5:ec:1c:de:62:b5:10:12:
55:88:bf:b7:3e:a6:e4:5b:3b:49:3e:6e:15:13:59:66:ce:7e:
3a:52:36:bd:db:6c:ae:89:8f:2e:96:44:65:09:44:e5:6c:d8:
c6:7b:c9:2e:de:a1:6b:e5:13:cb:46:6d:52:6f:8f:f0:6f:f0:
ae:c8:f5:45:c6:40:8b:92:26:83:22:46:a0:d7:99:e2:08:bd:
7d:56:e4:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqUqtDlqUZVs/UReOF9WpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMWNjNDAyMzQ5ZTE5MTM5MmQxZWM3NDY5YzFiYzgyNDM2
MzQ0MzkwHhcNMjYwMzI2MDEwMTM5WhcNMjYwMzI3MDEwMTM5WjAzMTEwLwYDVQQD
EyhjZDcxOTVlNDQ1NDVjMzA2NWVjYTQxMWVkN2Q2ZDI4YzVkNjAxZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdKMCAUpMQNX5dddfD//31XLga/R
JRrePk1sjpE76lhp6qdT+B2Du8V2dLHaEqCQdMJH/FQtkCU50DvyTVSyO6QJfBoL
00lTF+ELO1XXwmMPKNOO7MYPoROm5+vD1h9bAgCtLfWK8vYcQnyEq/gpytnEc0vj
PDA+7hUEJqZ4mOeAx3NjJ1fMr0+LpI69BGLx3e3spAxE++LPUC0J9exPh//RnTzx
fZjIrm5tApAsy/xaBAh3C/cwXxtCCPyEgV/3iE5KuMjRD/eDa391b6U49ZxX+9Z+
IHUksLRfS3YHJuWKkVUBsFHsUmJUAOrEtG5WcmswxHIm05bMnSbkeICIjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1xleRFRcMGXspBHtfW0oxdYB7QMB8GA1UdIwQY
MBaAFD0cxAI0nhkTktHsdGnBvIJDY0Q5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJ6RUFqU2VHUk9TMGV4MGFjRzhna05qUkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yM2RlMDYtZmM5YS00M2QzLWFjOTUt
MzdlNjRjMDdjYzg2LzEvUFJ6RUFqU2VHUk9TMGV4MGFjRzhna05qUkRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yM2RlMDYtZmM5YS00M2QzLWFjOTUtMzdlNjRjMDdjYzg2
LzEvUFJ6RUFqU2VHUk9TMGV4MGFjRzhna05qUkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQmGXVAx
G+SNadxVn9bcknzbv64EvLNNRTW/d0XbvNGYUM9zCzJ2A3KkKxU8Jl1lEM52FHPg
5iwfmhP8JirxXHdGYn0P05zh44FturoGe2bK1soNNz/xBVYIkRWkmd1tPz2hJD+4
ED0SBaLUUW3JG+lmDWAEgwGhX/EXOv7uVqz+j/5a6F3TItbGolVg+uKTICc+K67s
zxTRBOBkICJB+PjxoG0CoCdlVXlYrfXsHN5itRASVYi/tz6m5Fs7ST5uFRNZZs5+
OlI2vdtsromPLpZEZQlE5WzYxnvJLt6ha+UTy0ZtUm+P8G/wrsj1RcZAi5ImgyJG
oNeZ4gi9fVbkGg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:20:26 2026 by rpki-client