Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
File: PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft (raw, json)
Hash identifier: NQ2HgwNytJWXL9E28K34nqMQsFR/qDwB7CAcqdnQtBA=
Subject key identifier: 17:FD:AC:88:68:A8:F3:0F:92:B5:C6:FC:79:4F:CB:59:65:91:95:4F
Authority key identifier: 3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
Certificate issuer: /CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Certificate serial: 019D284E01E3F2A719F5B23E804EF91B6A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:01:34 +0000
Manifest this update: Thu 26 Mar 2026 04:01:34 +0000
Manifest next update: Fri 27 Mar 2026 04:01:34 +0000
Files and hashes: 1: PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl (hash: KkUBNWoLS7wn2Un4JtNG2MJcFIM0DSNw+fTig6S+tls=)
2: hl6VgB4kLfF0gYQB_c8vvP9sw9M.roa (hash: /Dm24RIVCygX2v7yBsB0ok3cyUYLJnR87PFrPkROav4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:01:e3:f2:a7:19:f5:b2:3e:80:4e:f9:1b:6a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Validity
Not Before: Mar 26 04:01:34 2026 GMT
Not After : Mar 27 04:01:34 2026 GMT
Subject: CN=17fdac8868a8f30f92b5c6fc794fcb596591954f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:8f:5e:ba:02:d5:f8:d0:f3:b9:36:c0:cd:
41:44:8a:2a:0f:e4:73:d0:44:39:f1:0a:15:ed:54:
d8:39:16:dc:b6:96:71:f2:ed:9b:81:09:ff:c5:bd:
e8:00:41:d1:80:8f:22:04:3b:46:77:3e:48:25:95:
5e:77:91:a5:44:fb:2c:af:4b:99:b4:72:7e:67:dd:
d4:59:74:b5:ce:96:3d:a8:d3:5e:a8:87:41:8d:7d:
96:43:46:b5:ba:60:a2:d7:5a:f2:3a:ec:99:86:f0:
75:65:f0:d3:98:b3:ba:de:6a:be:3e:f0:21:c2:7e:
d7:3f:d6:4d:fb:8b:72:07:de:66:a7:19:fb:6a:ab:
f1:92:da:02:77:e5:05:d7:09:cd:2c:a0:eb:76:57:
17:dc:82:72:0d:2c:12:fc:38:9e:0f:1d:03:66:86:
f9:8b:45:be:ac:73:1b:50:a6:70:06:0a:3d:0a:f3:
04:1f:e0:55:c0:32:48:03:53:f1:e3:2d:20:ea:66:
ae:b6:75:e1:5c:e0:33:5f:31:8d:75:ee:40:a7:e7:
63:93:80:69:51:88:7f:15:32:b1:f6:6e:8b:e8:aa:
9e:a9:32:7c:e6:e3:f4:4e:cd:51:e1:ae:d5:e8:c4:
fe:04:5f:29:20:64:d0:e2:90:22:3f:6e:f5:75:c2:
24:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FD:AC:88:68:A8:F3:0F:92:B5:C6:FC:79:4F:CB:59:65:91:95:4F
X509v3 Authority Key Identifier:
keyid:3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c0:91:a7:ba:dd:15:d7:12:e6:bb:d3:6d:c0:46:1c:c4:02:
a2:2f:ce:e3:13:b9:fd:8d:c3:42:91:13:cd:2f:9f:7a:9b:84:
e7:31:72:f3:07:96:a4:ac:23:87:43:8f:13:00:d5:92:88:2c:
c7:cb:4b:c6:07:4c:c3:d3:52:9d:7c:ee:ae:ad:55:6f:6b:d0:
24:82:8c:45:65:f0:51:22:96:52:19:1b:f8:f7:96:99:c2:53:
58:23:4d:d7:a6:30:2a:a4:fb:e8:6f:f4:39:98:0e:8e:a3:89:
fb:91:63:94:6c:33:30:40:97:66:85:76:61:ea:8a:e1:3b:f6:
20:46:b7:9d:07:05:b0:09:56:db:3c:7c:14:44:b0:80:c0:3e:
81:71:48:a6:b1:02:59:c2:15:24:52:13:c6:77:94:a6:fb:8f:
fa:4a:e6:f7:0e:b3:18:2e:72:5e:41:33:34:f0:b2:55:22:d5:
46:32:28:2a:be:d8:4d:83:d6:bb:c0:c0:73:c2:11:c0:47:a1:
c7:6e:22:7f:29:79:1d:ff:b9:c5:74:68:1e:f6:d3:60:35:77:
39:fc:ab:29:98:9f:cb:2f:e2:e0:d1:e3:15:82:41:0f:b2:b3:
53:49:4b:5e:ce:05:35:2b:56:f7:73:77:d2:3f:51:c2:63:b3:
75:64:e8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:43 2026 by rpki-client