Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
File: PRKXkoZrFiE7VsW_pr66x8YYsVA.mft (raw, json)
Hash identifier: ReRtejIvuR7LFPy4PzjZ3WA6zBQJ203DcqM/fdkpVNQ=
Subject key identifier: EA:EB:B2:56:D0:EF:01:C6:75:9F:3C:0B:66:1C:60:0A:FF:F2:6C:2A
Authority key identifier: 3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
Certificate issuer: /CN=3d129792866b16213b56c5bfa6bebac7c618b150
Certificate serial: 019D2CCF6ACB6CEBB3D1BD4094D8BEEF4C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
Manifest number: 1417
Signing time: Fri 27 Mar 2026 01:01:23 +0000
Manifest this update: Fri 27 Mar 2026 01:01:23 +0000
Manifest next update: Sat 28 Mar 2026 01:01:23 +0000
Files and hashes: 1: PRKXkoZrFiE7VsW_pr66x8YYsVA.crl (hash: 8RM+5AJvar6mLl4q9yY8Cb3hFi7iD+aSZGRlSFyqr7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:cf:6a:cb:6c:eb:b3:d1:bd:40:94:d8:be:ef:4c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d129792866b16213b56c5bfa6bebac7c618b150
Validity
Not Before: Mar 27 01:01:23 2026 GMT
Not After : Mar 28 01:01:23 2026 GMT
Subject: CN=eaebb256d0ef01c6759f3c0b661c600afff26c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:59:e0:9e:d8:04:43:dd:86:c3:5f:75:0b:
43:90:90:47:76:95:48:0a:53:01:2d:45:a1:07:dc:
b1:dc:1c:8a:dd:8b:c6:d3:0e:a9:10:5a:12:7e:b7:
54:19:89:22:1c:28:e7:4b:56:c6:ac:9e:95:d0:a7:
99:2d:c4:25:e9:59:bf:86:ff:45:ab:5a:d6:66:a4:
3f:05:e9:09:33:32:b0:c6:b5:d1:61:7f:c0:72:ca:
af:9e:2a:2d:4d:79:56:a5:1c:42:5c:d8:6c:c9:6c:
87:bc:ee:68:64:6a:f0:e5:1d:b5:35:ff:97:be:0e:
52:8a:2c:ab:45:b8:f6:ee:52:3e:0d:20:a6:ee:a2:
da:05:83:3b:18:03:67:10:0f:79:c7:34:9e:ac:9a:
bc:da:22:5e:3f:58:72:02:7e:86:88:80:6d:6a:59:
02:28:c1:88:6f:13:8e:c0:bb:eb:79:d2:a8:e9:18:
d5:09:31:e5:4c:f6:ca:13:30:36:7c:31:ea:06:d5:
d5:1f:61:20:27:e6:21:71:9c:16:4e:a3:81:30:bf:
41:20:0b:bd:62:21:3e:df:bd:e6:16:3d:1d:93:ca:
a7:cd:ad:a0:3e:a1:ee:0b:51:14:91:cd:c7:a4:c4:
8d:fe:17:46:c6:eb:0c:5c:0f:d7:ea:c2:7d:bb:a3:
f0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EB:B2:56:D0:EF:01:C6:75:9F:3C:0B:66:1C:60:0A:FF:F2:6C:2A
X509v3 Authority Key Identifier:
keyid:3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:49:9e:ad:96:10:70:2a:41:3c:4c:a7:ac:d4:20:cc:b7:39:
e6:79:b7:90:35:a4:cf:b3:b7:1c:1c:93:78:d1:97:90:30:a3:
7a:c6:b9:22:dc:6b:fc:86:a4:06:8f:fa:7f:2d:20:09:33:8f:
77:f8:7c:5f:b1:68:db:59:1e:ea:86:4f:c9:21:26:27:0b:54:
fa:68:4a:c7:e9:b1:d5:09:36:08:3e:62:b4:e2:5c:05:3a:a3:
b7:38:d1:c0:5c:8b:e2:14:20:d6:26:bf:d9:3d:47:a9:11:5f:
95:26:85:5b:bb:d5:4d:1e:40:7d:d8:c1:0c:a8:e6:a2:8c:23:
ba:ab:ee:13:d4:9f:45:9b:25:f2:3a:a4:aa:53:75:fa:5d:da:
5e:21:e7:94:10:9a:f8:27:47:45:80:8d:55:3b:82:48:f0:0c:
cf:72:d6:86:ba:bc:26:27:75:85:17:d8:67:15:5a:f7:dc:6f:
48:d6:e2:ee:56:a3:42:fd:20:9e:c0:b4:9e:80:79:39:d8:d7:
88:75:e5:51:02:de:f5:d4:01:68:ec:cc:1e:f8:03:93:83:4e:
dd:45:04:bd:ba:72:72:22:80:43:54:25:55:92:c4:1d:b8:45:
3d:a4:17:41:67:59:7b:d4:c6:a7:24:3c:e3:00:08:4a:4a:9d:
35:43:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:45:55 2026 by rpki-client