Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: 1piOUOZ/TYqfhQUSL7Ica0yixXuZ+4yCdYqVWvbYtSw=
Subject key identifier: 44:39:D1:36:4C:17:A6:52:FF:CD:BF:D2:D8:E5:D2:40:29:A7:9D:1C
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 019E1C7DF40CD686FA33CA64462D936C59A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 058F
Signing time: Tue 12 May 2026 14:01:16 +0000
Manifest this update: Tue 12 May 2026 14:01:16 +0000
Manifest next update: Wed 13 May 2026 14:01:16 +0000
Files and hashes: 1: 9IdHCEJQuzKyxwFpT8ujYaesS9w.roa (hash: C3vAatIUJjp84Pk7IwDii/846WZ3p/AWV1sBtD8WSCA=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: 5aJyytVV9Ndt5O1EyOd/2zX5yjZL01Z0IVdODDwE8oE=)
3: dAsT8XG2mpyNIJ5hpWhJSc5415Y.roa (hash: 8hFFOmMnHAAA9ytOGH8EO+wUtjGfAGKJiyYhcntZJUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:f4:0c:d6:86:fa:33:ca:64:46:2d:93:6c:59:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: May 12 14:01:16 2026 GMT
Not After : May 13 14:01:16 2026 GMT
Subject: CN=4439d1364c17a652ffcdbfd2d8e5d24029a79d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7b:24:a0:68:e5:3d:5d:8c:fd:6f:50:61:ed:
ce:17:50:38:ff:4b:5f:3e:d2:e1:06:01:5b:c2:75:
db:d2:a1:80:ec:09:38:fd:ff:cb:0d:d9:33:44:b3:
2f:b5:c9:4b:9c:00:30:cd:1e:62:ed:c2:79:4c:37:
2e:9f:64:5d:dc:5b:b5:4f:a0:33:e1:c0:14:3e:30:
81:96:5f:75:84:bb:e4:1e:45:0b:ee:af:a8:44:92:
6b:aa:5c:d0:e4:37:a4:40:b3:65:fa:70:5e:12:45:
d7:ca:bc:d2:29:75:5f:0a:4c:a9:4f:4f:2c:7b:24:
a1:fa:01:f6:08:5b:c1:ef:bc:40:b9:0e:d5:7f:f2:
b8:fc:ed:25:59:c3:a5:80:f2:d8:1b:61:18:c9:62:
50:3c:e8:4b:09:f0:20:8a:82:f6:be:37:ad:88:20:
db:3d:20:c5:9a:db:65:86:10:17:ff:f6:57:cd:5e:
5f:41:6a:d9:7b:df:44:64:1c:81:10:f9:37:44:e2:
39:8c:e7:52:71:42:3f:c5:10:99:57:3a:71:43:a6:
e2:4a:bb:f0:d8:9a:dc:d7:5c:71:80:e6:0a:16:f4:
a2:55:74:85:7e:fb:41:c0:bd:17:ad:ee:fe:11:86:
d4:fe:7d:62:ea:ed:4a:10:f1:cb:30:4d:83:fe:49:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:39:D1:36:4C:17:A6:52:FF:CD:BF:D2:D8:E5:D2:40:29:A7:9D:1C
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7b:00:a4:06:a2:85:2b:7b:dc:25:c1:c3:db:27:e1:3d:8b:
c3:57:c8:81:84:19:ec:8a:89:a5:23:9e:75:21:36:c2:1b:65:
79:a9:b3:09:a0:37:e3:1b:d7:68:63:9e:d8:88:f8:dd:53:be:
f5:14:db:2c:d2:04:da:ed:c9:34:0c:f9:d8:b9:7e:b7:e2:27:
79:6f:61:32:d4:10:2d:58:06:02:e2:a7:2b:89:fa:b2:f7:c8:
e2:1c:32:c7:1f:ac:cb:e8:4f:4a:79:4b:7c:31:c1:b1:a1:9f:
ba:22:8a:cd:30:c4:39:1c:f2:32:d2:d8:eb:05:0a:45:f9:b0:
ae:f0:bc:d5:af:f7:f0:7f:88:2f:31:94:e5:1b:af:b3:c7:38:
72:41:e2:51:c6:8d:d8:3d:cb:21:12:89:ad:14:35:ff:0e:e2:
4b:12:91:71:7b:f5:84:84:98:fd:65:09:61:7b:8e:79:00:9f:
23:4c:3a:f9:99:d4:1a:72:dd:d9:18:98:87:66:d0:2f:0b:d2:
04:ad:ac:6f:3f:d5:15:b7:7c:45:8d:ab:99:a9:69:4c:94:11:
6d:51:ef:f3:7c:a7:ed:7b:cc:5d:7c:0c:31:c3:20:0a:f9:a9:
5e:6c:6b:87:48:f4:a9:0b:3a:4d:eb:cf:4b:f4:d5:8e:8c:30:
99:ca:99:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:57:28 2026 by rpki-client