Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: G87vEtD1s+ZBnmNqxwooUotoF5tsWDwXvVds6F0QG5A=
Subject key identifier: E3:FE:CD:60:1A:2F:01:4F:A1:63:13:E6:32:D1:CE:14:F8:95:A1:52
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 019F951246DD77AE93717284C909E123906D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 0652
Signing time: Fri 24 Jul 2026 17:00:30 +0000
Manifest this update: Fri 24 Jul 2026 17:00:30 +0000
Manifest next update: Sat 25 Jul 2026 17:00:30 +0000
Files and hashes: 1: 9IdHCEJQuzKyxwFpT8ujYaesS9w.roa (hash: C3vAatIUJjp84Pk7IwDii/846WZ3p/AWV1sBtD8WSCA=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: De9oZQXAAPVUp/HIwzk7bnUGP3GwETAEF8aEJzVjVRc=)
3: dAsT8XG2mpyNIJ5hpWhJSc5415Y.roa (hash: 8hFFOmMnHAAA9ytOGH8EO+wUtjGfAGKJiyYhcntZJUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:46:dd:77:ae:93:71:72:84:c9:09:e1:23:90:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Jul 24 17:00:30 2026 GMT
Not After : Jul 25 17:00:30 2026 GMT
Subject: CN=e3fecd601a2f014fa16313e632d1ce14f895a152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:78:3c:6a:13:5a:a2:c6:51:aa:93:ec:2f:
02:ff:38:6b:aa:09:ed:90:ec:0d:ee:41:a1:4e:10:
99:11:05:88:f8:76:3f:62:e2:89:92:36:b6:9b:97:
4d:ef:ec:67:4e:3f:73:e1:df:e4:f2:e5:89:0b:51:
98:2a:2c:99:ee:dc:07:b5:82:53:0f:46:84:87:52:
84:9f:48:55:82:32:71:be:14:dd:9e:c3:4a:7f:1f:
75:91:80:69:33:3e:ed:bb:07:8d:b8:d9:04:2b:02:
78:93:8d:01:62:e6:86:14:b4:d9:df:19:82:18:ad:
12:a5:9d:8e:03:a1:f3:b9:a3:19:c5:f4:fa:fb:a5:
4f:b9:36:7d:e1:c8:15:d4:1b:1e:b0:4e:66:8b:e0:
97:38:30:b3:1e:27:f2:1f:c0:fd:20:af:cc:8e:5c:
fe:aa:87:b6:82:bf:99:69:2e:ff:14:e7:df:02:cf:
58:41:74:1f:72:0d:ee:00:48:d8:1b:de:10:3b:c7:
38:5f:e8:64:86:49:ce:3c:58:42:06:35:af:ca:c8:
a8:5b:18:cf:df:ef:04:2b:18:4a:bb:a9:ba:04:2c:
a6:7d:10:87:9f:5f:20:63:5e:7e:ef:7f:84:91:a3:
33:e5:3c:3f:22:7f:49:15:d0:6d:7c:ab:b5:cf:05:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FE:CD:60:1A:2F:01:4F:A1:63:13:E6:32:D1:CE:14:F8:95:A1:52
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:51:c6:fd:2c:e4:e1:dc:31:d5:f4:8b:d0:e6:38:fe:9c:3b:
0b:fc:1a:eb:67:29:97:94:ea:33:1f:d9:8e:c9:77:c8:d8:7b:
d5:50:cc:45:3b:4f:33:12:c1:7d:54:dd:5f:fd:c7:16:01:a8:
46:17:a5:20:9c:f1:2e:ad:3f:30:66:b5:c5:c5:01:5b:05:82:
49:5d:e4:6f:d7:c2:8c:5d:90:43:03:0c:78:7e:4e:b1:3c:63:
9e:c9:7d:6e:50:f9:ba:0e:67:31:74:e4:3d:84:77:ce:0e:b4:
c5:20:e4:cf:00:13:ed:38:90:ec:f5:07:d4:5a:c1:28:60:3c:
cb:39:4b:b0:45:a3:e5:ed:8d:0a:2d:5a:d7:8d:7b:36:6c:f7:
45:a1:42:46:aa:16:c2:d6:7c:41:1a:c6:56:2f:10:b0:7e:20:
5b:63:c2:3f:6e:2d:59:9a:e6:f6:54:ca:2a:ef:e1:dc:2f:8c:
7a:d8:88:9a:58:8e:01:b6:da:a5:6a:aa:1e:92:d4:0a:c9:c0:
26:63:63:2f:48:3a:97:3f:07:a9:92:f1:16:fc:44:7c:df:af:
b2:17:1f:80:41:dc:bc:6e:ac:c0:08:d9:5d:6d:5f:d3:24:ae:
16:70:18:83:93:0b:de:8d:d3:61:8c:dc:75:7d:47:3f:de:c6:
ac:dd:a7:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEkbdd66TcXKEyQnhI5BtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTFmYmE0M2Y1N2FiMDQ0NWU1NDJmY2VlY2I4NzY4MTY1
N2NjZjMwHhcNMjYwNzI0MTcwMDMwWhcNMjYwNzI1MTcwMDMwWjAzMTEwLwYDVQQD
EyhlM2ZlY2Q2MDFhMmYwMTRmYTE2MzEzZTYzMmQxY2UxNGY4OTVhMTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokx4PGoTWqLGUaqT7C8C/zhrqgnt
kOwN7kGhThCZEQWI+HY/YuKJkja2m5dN7+xnTj9z4d/k8uWJC1GYKiyZ7twHtYJT
D0aEh1KEn0hVgjJxvhTdnsNKfx91kYBpMz7tuweNuNkEKwJ4k40BYuaGFLTZ3xmC
GK0SpZ2OA6HzuaMZxfT6+6VPuTZ94cgV1BsesE5mi+CXODCzHifyH8D9IK/Mjlz+
qoe2gr+ZaS7/FOffAs9YQXQfcg3uAEjYG94QO8c4X+hkhknOPFhCBjWvysioWxjP
3+8EKxhKu6m6BCymfRCHn18gY15+73+EkaMz5Tw/In9JFdBtfKu1zwWLTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOP+zWAaLwFPoWMT5jLRzhT4laFSMB8GA1UdIwQY
MBaAFD0R+6Q/V6sEReVC/O7Lh2gWV8zzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYt
YzVkZDM4NTdhNGQyLzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYtYzVkZDM4NTdhNGQy
LzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlHG/Szk
4dwx1fSL0OY4/pw7C/wa62cpl5TqMx/Zjsl3yNh71VDMRTtPMxLBfVTdX/3HFgGo
RhelIJzxLq0/MGa1xcUBWwWCSV3kb9fCjF2QQwMMeH5OsTxjnsl9blD5ug5nMXTk
PYR3zg60xSDkzwAT7TiQ7PUH1FrBKGA8yzlLsEWj5e2NCi1a1417Nmz3RaFCRqoW
wtZ8QRrGVi8QsH4gW2PCP24tWZrm9lTKKu/h3C+MetiImliOAbbapWqqHpLUCsnA
JmNjL0g6lz8HqZLxFvxEfN+vshcfgEHcvG6swAjZXW1f0ySuFnAYg5ML3o3TYYzc
dX1HP97GrN2nWA==
-----END CERTIFICATE-----
Generated at Sat Jul 25 03:11:20 2026 by rpki-client