Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: Hn8KPnFYqAiV+MVo/RsgE59e/Hq7ZnxLnxN7hRNthQY=
Subject key identifier: 18:55:71:07:55:1B:41:99:71:94:23:0F:FC:D3:2F:F7:C1:79:17:15
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 01A0CA7E156BEBAB89AD346E4BC97CD0AA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 06F3
Signing time: Tue 22 Sep 2026 19:00:55 +0000
Manifest this update: Tue 22 Sep 2026 19:00:55 +0000
Manifest next update: Wed 23 Sep 2026 19:00:55 +0000
Files and hashes: 1: 9IdHCEJQuzKyxwFpT8ujYaesS9w.roa (hash: C3vAatIUJjp84Pk7IwDii/846WZ3p/AWV1sBtD8WSCA=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: LH+caJvkTCrqzpZk4wOVrBWttmUnX8jOAjIlj91jRi4=)
3: PxvDtGkLrRUdBdSSMkryKYSq5DQ.roa (hash: a1Y1p5Rfj50JqGUs7MR0i4IkKy2749qtvdCUmfhjfIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7e:15:6b:eb:ab:89:ad:34:6e:4b:c9:7c:d0:aa:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Sep 22 19:00:55 2026 GMT
Not After : Sep 23 19:00:55 2026 GMT
Subject: CN=18557107551b41997194230ffcd32ff7c1791715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:c8:76:d0:72:8c:e4:12:ac:7c:ac:9b:e0:
40:a7:30:83:92:71:8a:9c:a0:e8:44:8f:df:ca:47:
e8:59:54:c7:78:df:2f:7c:4c:7b:13:89:92:ac:4c:
b0:13:56:a0:c8:08:d9:48:e0:61:b6:20:60:6f:d0:
62:07:7b:31:36:a6:1c:03:75:63:16:e9:ca:fc:17:
0e:5b:75:ad:5d:0b:8e:7c:0f:d7:cf:7f:ff:99:d4:
68:9f:2e:94:78:ae:17:a7:e8:21:ba:ab:9d:45:75:
99:e7:71:7e:e5:4c:3f:2d:ec:ab:15:15:2f:fb:1b:
74:3a:dd:00:e5:54:16:02:1f:2f:0f:b3:0d:37:69:
5c:50:43:88:0b:4d:95:8e:79:eb:ad:d7:4f:20:18:
bf:0f:b5:b2:54:bf:ee:fa:cb:99:d9:24:71:51:53:
a4:ee:55:5c:ee:1a:c0:38:d8:c0:f7:56:af:97:62:
c6:e2:53:c4:1a:94:70:00:16:52:b0:64:b9:b6:c9:
c2:58:a0:92:d1:e4:ea:6b:1c:6f:54:7d:07:66:41:
55:e1:2f:eb:9b:be:6a:49:75:35:a1:80:ed:29:67:
a8:81:28:a3:fc:80:ae:46:98:65:b5:64:d1:23:1a:
4f:76:ac:67:d0:5f:6e:5d:2d:bc:ea:38:db:6f:4b:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:55:71:07:55:1B:41:99:71:94:23:0F:FC:D3:2F:F7:C1:79:17:15
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c9:b4:78:cc:a0:7b:70:01:b6:cd:c8:a1:2c:2d:dd:b2:70:
db:47:fa:8f:8d:54:fa:b6:1d:e4:5b:6b:9d:21:16:e0:a3:4a:
6f:93:08:14:40:d9:ae:06:31:bb:17:a1:ae:e9:2e:c2:a6:00:
3c:22:3d:d1:ea:31:01:f4:26:49:9b:31:6e:dd:d3:d1:ca:46:
36:e5:85:5b:27:23:8c:6f:54:71:cc:2a:73:79:02:57:13:24:
b1:96:ce:0f:4c:bf:f9:2e:95:78:ff:0b:52:c8:b8:0d:d9:61:
37:26:c4:f2:9f:56:6f:48:db:d9:5e:33:0d:25:fe:1a:33:6e:
e5:4a:ed:12:2a:2a:4e:74:61:4f:a5:36:c8:c7:21:f7:be:9e:
d6:57:c8:45:8e:96:0f:1a:5c:12:2a:05:3f:83:87:ff:6e:f1:
c4:8a:f8:83:62:21:73:7f:9f:d7:33:d2:3f:95:72:d8:e1:c4:
05:f5:b9:14:05:9c:4c:68:fb:18:6f:c2:4d:34:6c:01:3c:8c:
7a:83:fc:d7:59:0f:87:92:00:46:41:66:4e:71:5a:60:99:37:
b4:c2:96:e2:b5:b9:3d:c7:5a:cc:df:6c:12:ff:8d:60:19:98:
6d:ad:c1:5d:42:aa:75:08:49:c1:82:06:5b:9d:62:85:e0:b8:
8c:a2:33:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:17:35 2026 by rpki-client