Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
File: PrkDKEodFdwVitcYLqC854bOsq0.mft (raw, json)
Hash identifier: KSBaBm5438BII00O1XSjTR03vvfsLLYszcsUuTTshqw=
Subject key identifier: 31:8A:6D:9A:40:7D:76:36:C3:02:03:EC:72:80:6E:8D:27:C0:D3:4C
Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
Certificate issuer: /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Certificate serial: 019D273A97CB74A6E5A81A00D96BFE88A617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
Manifest number: 04E1
Signing time: Wed 25 Mar 2026 23:00:44 +0000
Manifest this update: Wed 25 Mar 2026 23:00:44 +0000
Manifest next update: Thu 26 Mar 2026 23:00:44 +0000
Files and hashes: 1: 0YvRiJaJZjqiY4U-xsumT6SoggI.roa (hash: YTiMe+1zJLvdrTTLNgEUB7xot3ds3X6F9h1I4Xe21t4=)
2: B3iq0ONo7KLOXNajJEU9_fT8nMA.roa (hash: siU5btEhE4XbyXfdsJsLAjTiTcogO6P0/rPXIN7WNVQ=)
3: IwL0FMLGOg5VqlW52QhR55d_wK8.roa (hash: Aq8zdRXcEkkg8WYuPHmD2/Gn6hy/jyUt5aM4M2GLRVo=)
4: PrkDKEodFdwVitcYLqC854bOsq0.crl (hash: yI6SiSYbDI8gOQMYRMN4M2pKwHUu1DiM+3C34OTkEHs=)
5: WOoCoLlmgXWyjK9qc9u-G0Pct24.roa (hash: lAKUdMYHZA1+80qntfhhpebRSlcoxO0/6Bne+KUexMI=)
6: gAidUOyTKtWsqogbz8Z7j-XZYdU.roa (hash: lrMZ/6KYodQFNtZQsABnSoAbHRdnZBb25oeXCjN3StI=)
7: uYBeqEVIhrx2gm5XzZWN3p3D4AU.roa (hash: K8Zss15V+Clx8kaH4kgNih0FONp94O63mbG65PyxQS0=)
8: wQa-_QrhebKsuNtc3pbAHGeGKYE.roa (hash: mXyLCczbJEb1sWHa1tj9M1BYnDbJgfQv+z61kz4D2so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:97:cb:74:a6:e5:a8:1a:00:d9:6b:fe:88:a6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Validity
Not Before: Mar 25 23:00:44 2026 GMT
Not After : Mar 26 23:00:44 2026 GMT
Subject: CN=318a6d9a407d7636c30203ec72806e8d27c0d34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:c7:7d:be:fd:35:07:28:0c:eb:44:8e:bc:
cc:a7:1a:e0:3d:12:08:89:ca:8d:4d:8a:c4:f6:a8:
99:e1:4f:07:15:80:15:c4:c3:5a:9b:c5:07:e3:f9:
2c:e6:67:94:82:41:f2:21:6d:7e:71:c6:34:bb:ea:
01:d2:7d:52:9d:f9:87:55:cd:93:fc:78:80:6a:34:
d3:14:a7:1f:88:7b:60:0e:25:ac:4d:f4:e1:9b:90:
ba:f1:47:57:43:00:49:80:43:2e:b7:a1:f7:62:6b:
cc:f6:3c:65:ec:5d:28:bd:46:f4:d7:d4:32:4a:d1:
ea:9e:35:f7:9e:a0:6d:6a:0f:ec:37:65:18:1a:6d:
58:32:85:56:ba:f7:29:a1:65:ea:73:45:35:cd:bf:
82:33:93:ed:65:56:e0:a3:f6:9a:a6:e8:3c:e2:4f:
18:3e:85:44:92:d4:48:ff:22:ab:cf:9d:8b:ae:14:
bc:20:06:c1:7c:8e:e1:9c:e8:b7:a4:cf:34:85:26:
51:d7:8f:e6:4e:57:cd:d7:09:28:00:53:4d:9e:a6:
09:65:be:e1:91:e6:d5:60:68:52:f6:9d:70:df:d6:
70:fd:ae:25:ef:21:62:51:73:61:75:0b:62:82:7b:
76:07:ef:e8:e3:29:b7:11:10:81:ae:67:23:b0:4f:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8A:6D:9A:40:7D:76:36:C3:02:03:EC:72:80:6E:8D:27:C0:D3:4C
X509v3 Authority Key Identifier:
keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cb:00:0a:79:31:31:a5:05:f3:e0:27:b3:47:38:39:18:2c:
6e:46:6a:76:5c:90:d7:84:2f:b9:6c:a1:cb:90:16:48:ee:0e:
67:25:9b:06:10:80:91:ec:9d:94:fa:a9:18:52:95:d9:ce:44:
6f:8a:13:aa:2e:4d:e3:1e:28:0d:88:70:a8:ee:bc:5c:5a:64:
46:4d:ee:56:d7:7d:e3:3d:95:4f:35:aa:8a:4e:03:30:60:69:
50:2c:19:77:40:81:c5:ad:f5:b4:aa:99:e3:5b:27:c8:64:d1:
84:d7:47:9d:b6:7f:3d:1e:e5:ac:ef:5c:d5:ea:bb:64:03:77:
4c:97:fe:eb:d6:fc:77:50:86:be:bc:97:4a:fc:ba:4b:d3:1f:
1a:85:e7:70:8d:35:5b:41:57:59:87:2e:1f:27:e6:4d:bd:c7:
bc:2f:89:10:05:80:18:b0:01:6e:ad:da:81:69:7c:5c:f7:29:
29:a7:35:4c:09:9f:09:b7:90:ae:62:3a:a3:82:46:b6:95:55:
60:4c:00:80:c2:89:bb:d3:9c:c1:49:3f:e1:a9:11:54:25:2c:
6c:40:f7:0d:6e:54:49:d2:88:38:36:b7:d7:b5:4a:6a:f6:9e:
5b:8f:5d:2d:e6:d6:b5:b2:ca:20:d1:75:a1:2b:22:56:58:2f:
5d:86:58:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:37 2026 by rpki-client