Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: Ju8BuTHJqdbyYbPgzn9Wg7fcxvyVkr3TIDsYN6SSJV4=
Subject key identifier: 83:A9:6D:34:08:32:C8:74:2E:0D:60:C0:B5:79:DC:AE:09:BA:07:E0
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 019D254CDC06D25CBBFA5BACE68F9A9B0639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 050F
Signing time: Wed 25 Mar 2026 14:01:27 +0000
Manifest this update: Wed 25 Mar 2026 14:01:27 +0000
Manifest next update: Thu 26 Mar 2026 14:01:27 +0000
Files and hashes: 1: 9IdHCEJQuzKyxwFpT8ujYaesS9w.roa (hash: C3vAatIUJjp84Pk7IwDii/846WZ3p/AWV1sBtD8WSCA=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: PiaHDGzGGO15+jYEEenpnDa8KrZsRcK5/Bsd9qhd4nM=)
3: dAsT8XG2mpyNIJ5hpWhJSc5415Y.roa (hash: 8hFFOmMnHAAA9ytOGH8EO+wUtjGfAGKJiyYhcntZJUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:dc:06:d2:5c:bb:fa:5b:ac:e6:8f:9a:9b:06:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Mar 25 14:01:27 2026 GMT
Not After : Mar 26 14:01:27 2026 GMT
Subject: CN=83a96d340832c8742e0d60c0b579dcae09ba07e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:0d:3c:0f:77:2c:a4:42:f8:5f:c1:76:fa:
ad:aa:62:d3:cb:fa:5c:c5:05:de:a0:7b:84:8e:c1:
43:25:70:e7:05:61:58:02:eb:77:72:77:ac:48:f2:
c4:1a:79:e6:0c:9d:54:dd:6f:a3:91:82:20:41:3a:
cb:fb:7e:a6:32:e6:c0:6c:7e:8e:97:5e:55:9d:ee:
43:80:34:34:b9:68:d7:3c:d5:6f:cd:f9:8c:dc:56:
7f:61:1c:e4:f4:73:ec:67:ca:e7:7d:01:14:75:72:
78:6b:7f:d4:23:9a:41:07:41:2e:08:31:41:17:31:
d9:ab:a6:9e:26:83:e6:e9:75:36:75:b4:e5:86:b1:
d0:67:21:ba:e6:62:22:2c:e4:b3:f4:9a:f0:0c:fa:
73:ca:c7:eb:82:09:b0:db:ea:4e:db:04:82:b9:50:
cc:23:5e:a6:97:c9:19:26:63:58:a0:ce:3f:4d:79:
62:cb:e4:8f:4c:c3:a7:dd:1b:37:56:b6:35:a9:fa:
33:a5:f6:96:d0:c2:e8:98:49:52:1f:00:2d:dc:06:
8d:87:77:dc:0b:0a:ac:4c:e2:61:bd:e6:02:61:47:
58:a4:69:78:37:43:04:41:8c:1a:a0:5f:29:3e:32:
6f:47:95:15:c3:50:d1:a2:d8:36:10:f6:85:61:f2:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A9:6D:34:08:32:C8:74:2E:0D:60:C0:B5:79:DC:AE:09:BA:07:E0
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:53:bd:0c:e3:9c:9a:de:79:b8:a8:c1:36:72:3b:c2:40:33:
50:01:ab:50:2c:8f:b0:6a:c3:17:8d:ab:2c:a3:59:43:5b:8f:
64:e6:ba:c9:d5:ca:13:37:cd:a0:a7:97:37:02:38:d7:07:1a:
3b:f6:63:35:46:b0:48:9d:e7:fd:ec:18:4e:12:24:c8:f3:a5:
d6:33:f0:dd:a0:00:ed:e9:b1:8c:0b:c8:f2:a5:dc:c9:51:e2:
24:6a:e5:a5:fb:ea:e5:6a:cb:f6:36:d4:e2:3c:67:f5:04:9d:
ff:bb:19:21:6e:b1:17:cf:b6:ae:14:3d:48:5b:c4:3b:85:f0:
c3:5b:39:c3:26:a0:30:fe:f9:ba:d3:be:cc:09:82:f9:e3:8b:
46:b3:d1:47:aa:b4:47:c5:db:36:82:e6:f9:c0:5c:ec:c0:b9:
da:ae:99:b7:c4:7f:9e:ab:93:e8:e3:63:89:15:22:cc:1a:3a:
be:76:18:de:4f:8e:db:13:5b:e6:64:35:db:d2:d4:95:41:5d:
e0:27:be:a3:d3:eb:fd:02:8e:89:a3:2a:76:68:74:63:80:33:
66:24:59:b5:65:55:9e:9c:05:1d:78:72:76:e6:3f:c0:b7:13:
28:09:c9:75:8c:d9:fa:04:5f:93:53:4a:e1:56:74:05:d0:3e:
2e:7f:61:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:13:59 2026 by rpki-client