Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
File: PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft (raw, json)
Hash identifier: pWj88VCCGCQtgVQsbXbpaPHx7pHc3sRayxDjYXvmkcs=
Subject key identifier: 1C:00:BA:67:08:FA:66:12:4D:27:AA:A5:3D:CF:BD:A8:DE:9C:97:10
Authority key identifier: 3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A
Certificate issuer: /CN=3ca447fd0979b8a989355c354d304d114d20727a
Certificate serial: 019D28BBEBBB52DC56D65B638DC88CD77C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
Manifest number: 0565
Signing time: Thu 26 Mar 2026 06:01:37 +0000
Manifest this update: Thu 26 Mar 2026 06:01:37 +0000
Manifest next update: Fri 27 Mar 2026 06:01:37 +0000
Files and hashes: 1: 3ozsuY79It-DMdWFEyLhstJbsHI.roa (hash: zjtvqxxsFQq22pHgPm5ML4HBHgnWmrbjfRUKAtA9O/c=)
2: PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl (hash: +NVAphQTaJxeBe3HdG/yYJCOAAkLKppZlewa7NVCclY=)
3: Rfqa8OJ2kQsd8ZG_LegzwW5IjHg.roa (hash: bd9vTzTkuvRXu3qYlvcAWmBvwcVPHwkBDQ7+v06V9d8=)
4: dGvFgDTa9c-WyY5c2fus0GTGmYs.roa (hash: 1KB6ISgMwSKc5X/zQ0taoCJinEVqBhQhQ69Q8uCNRZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:eb:bb:52:dc:56:d6:5b:63:8d:c8:8c:d7:7c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca447fd0979b8a989355c354d304d114d20727a
Validity
Not Before: Mar 26 06:01:37 2026 GMT
Not After : Mar 27 06:01:37 2026 GMT
Subject: CN=1c00ba6708fa66124d27aaa53dcfbda8de9c9710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b4:31:fb:1f:aa:cc:8d:83:50:f1:28:71:be:
c2:0d:e3:66:b7:1b:03:4f:c1:12:1a:75:fd:d9:4e:
61:5c:1d:af:a4:0d:d4:83:4e:9f:72:55:99:ed:1b:
09:c0:f1:9c:38:5e:38:b3:0e:3f:45:01:f9:45:90:
9d:3b:e3:3a:68:d6:02:42:2b:67:4c:7c:75:74:ca:
8b:c9:bc:40:07:ae:64:d9:63:6a:f3:ed:96:2c:33:
e6:6b:19:44:6f:ae:f3:33:8d:06:c5:b7:67:ae:fc:
0c:72:ff:fe:73:97:5d:26:47:06:f1:5d:ad:7c:b0:
99:a6:76:01:b8:bf:19:3e:a8:19:ed:1e:d6:7f:8f:
a7:9f:b5:07:1d:85:c3:2c:f4:ae:6e:4c:f3:85:04:
17:c5:b8:4d:06:2f:31:a1:2d:d3:e8:20:66:ff:39:
5c:bf:19:88:8d:7f:3b:70:a4:e1:d8:2b:3b:9a:96:
c4:3d:98:54:45:ee:fb:01:13:5b:7f:df:04:40:d4:
df:35:1e:9f:06:8c:5e:a6:78:87:81:fb:b0:2f:4f:
bb:bd:52:a3:be:43:2d:f1:95:f1:4f:93:ea:3b:bc:
bd:14:64:c0:47:88:42:76:9d:0c:cb:67:b4:7a:80:
a3:e2:f6:e3:30:17:cc:7d:07:06:56:1e:ee:81:bc:
52:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:00:BA:67:08:FA:66:12:4D:27:AA:A5:3D:CF:BD:A8:DE:9C:97:10
X509v3 Authority Key Identifier:
keyid:3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2c:c2:ab:93:ec:24:52:93:da:6c:51:5c:93:7f:6c:f0:5b:
1d:e4:28:c5:db:90:11:9a:8a:45:bd:0b:2b:23:2a:71:be:06:
49:45:fa:2e:2e:3e:66:8e:08:31:72:03:a1:16:58:24:10:2c:
ca:af:bc:3e:f2:35:c9:51:50:11:f0:f6:10:11:92:f5:0c:c2:
8b:67:3c:ca:01:09:f4:e7:61:2f:bb:c8:02:fd:4b:77:92:09:
e8:26:17:98:bd:a4:32:47:25:1b:0c:02:3b:70:68:50:8d:55:
f6:54:94:be:ee:fc:b8:d5:28:ef:19:ec:74:6e:ba:7b:38:42:
a0:f1:de:e7:75:55:05:f9:2b:bd:a9:f1:90:95:a5:30:7f:c9:
26:8b:48:5f:82:d4:ea:0c:64:7d:b7:ed:e7:48:9b:a3:11:11:
ca:c6:68:4e:38:cb:28:72:fe:b7:de:05:19:31:2e:90:f2:34:
7c:a6:b8:86:95:d5:19:b3:9e:87:30:f9:22:84:81:fd:cb:3e:
03:5c:c9:6c:be:41:8f:4c:da:dc:5c:97:d0:9d:09:9d:2f:67:
79:98:e2:e5:00:ec:81:79:f6:eb:ed:97:e8:e7:0d:76:be:7c:
81:97:50:fe:64:f9:86:18:7d:94:c9:70:6a:8f:3a:cc:88:ae:
f5:4d:f5:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou+u7UtxW1ltjjciM13xiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYTQ0N2ZkMDk3OWI4YTk4OTM1NWMzNTRkMzA0ZDExNGQy
MDcyN2EwHhcNMjYwMzI2MDYwMTM3WhcNMjYwMzI3MDYwMTM3WjAzMTEwLwYDVQQD
EygxYzAwYmE2NzA4ZmE2NjEyNGQyN2FhYTUzZGNmYmRhOGRlOWM5NzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLQx+x+qzI2DUPEocb7CDeNmtxsD
T8ESGnX92U5hXB2vpA3Ug06fclWZ7RsJwPGcOF44sw4/RQH5RZCdO+M6aNYCQitn
THx1dMqLybxAB65k2WNq8+2WLDPmaxlEb67zM40GxbdnrvwMcv/+c5ddJkcG8V2t
fLCZpnYBuL8ZPqgZ7R7Wf4+nn7UHHYXDLPSubkzzhQQXxbhNBi8xoS3T6CBm/zlc
vxmIjX87cKTh2Cs7mpbEPZhURe77ARNbf98EQNTfNR6fBoxepniHgfuwL0+7vVKj
vkMt8ZXxT5PqO7y9FGTAR4hCdp0My2e0eoCj4vbjMBfMfQcGVh7ugbxSxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwAumcI+mYSTSeqpT3PvajenJcQMB8GA1UdIwQY
MBaAFDykR/0JebipiTVcNU0wTRFNIHJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEtSSF9RbDV1S21KTlZ3MVRUQk5FVTBnY25vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iNWEwOGYtZDlmOC00MzJkLWJhNGIt
YTZlZjc1MmM2ZGMyLzEvUEtSSF9RbDV1S21KTlZ3MVRUQk5FVTBnY25vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iNWEwOGYtZDlmOC00MzJkLWJhNGItYTZlZjc1MmM2ZGMy
LzEvUEtSSF9RbDV1S21KTlZ3MVRUQk5FVTBnY25vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyzCq5Ps
JFKT2mxRXJN/bPBbHeQoxduQEZqKRb0LKyMqcb4GSUX6Li4+Zo4IMXIDoRZYJBAs
yq+8PvI1yVFQEfD2EBGS9QzCi2c8ygEJ9OdhL7vIAv1Ld5IJ6CYXmL2kMkclGwwC
O3BoUI1V9lSUvu78uNUo7xnsdG66ezhCoPHe53VVBfkrvanxkJWlMH/JJotIX4LU
6gxkfbft50iboxERysZoTjjLKHL+t94FGTEukPI0fKa4hpXVGbOehzD5IoSB/cs+
A1zJbL5Bj0za3FyX0J0JnS9neZji5QDsgXn26+2X6OcNdr58gZdQ/mT5hhh9lMlw
ao86zIiu9U311A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:23:42 2026 by rpki-client