Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
File: PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json)
Hash identifier: VoKsiY9xi6BLZD/dKKnmB9R3w+JEK9qT14DcFiPBY0s=
Subject key identifier: 33:F7:63:23:33:77:F9:5C:91:41:B2:22:C8:80:0A:EC:A8:54:41:5A
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Certificate issuer: /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial: 019FA7BDF9FE55C13BCEE51A8C7C80D12F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
Manifest number: 0E4B
Signing time: Tue 28 Jul 2026 08:01:12 +0000
Manifest this update: Tue 28 Jul 2026 08:01:12 +0000
Manifest next update: Wed 29 Jul 2026 08:01:12 +0000
Files and hashes: 1: FcgVbK89FeRjuVyoSQOfN4fWFvA.asa (hash: 22DkZ7JjoLv+BaBD/x8KpQJlMw9ISrjqJDXnZSuMJzI=)
2: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: hXz9/9c1nrUEaTc8lQXYIvT/er24lwxywtfnMiiwiMI=)
3: Zn0XhdqYxe8o-jPEi-ZNfcsL5t0.roa (hash: rHtPfci/7WpFrwQjD0oZB4ESw2Ju9X+jUEYp4DLCYRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:f9:fe:55:c1:3b:ce:e5:1a:8c:7c:80:d1:2f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Validity
Not Before: Jul 28 08:01:12 2026 GMT
Not After : Jul 29 08:01:12 2026 GMT
Subject: CN=33f763233377f95c9141b222c8800aeca854415a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:8b:ae:d5:c6:3f:48:c4:ec:3e:04:1c:db:
67:e4:c0:93:40:d8:d4:05:78:c9:df:00:36:2c:95:
28:af:98:ab:0d:21:b5:50:6d:39:05:19:3a:4f:27:
de:b0:bb:e2:94:a3:9a:c7:6c:15:53:84:51:0a:26:
78:e2:78:c3:f4:da:67:bf:9b:cb:36:b2:29:2c:ee:
83:7c:68:ca:a7:89:75:02:09:c9:fc:7d:18:03:f8:
01:c4:05:09:47:10:ab:c7:0c:ce:f3:ac:7b:19:a9:
95:2b:d0:a1:0a:5c:b6:73:98:24:9f:1d:04:01:55:
62:03:68:9f:6a:a8:4a:d2:77:23:72:87:b2:a8:a2:
1f:72:45:d0:18:72:e2:8e:3d:2f:b8:7b:d4:4b:81:
77:06:b0:e3:d0:51:07:ee:92:31:8c:a0:de:30:03:
80:dc:f5:b9:70:8b:39:f3:fa:7a:5d:27:66:4f:d5:
9b:60:f4:56:7f:ab:9c:3b:60:c9:7b:f7:c9:c8:f8:
5a:b7:b8:56:26:07:df:39:b4:10:64:1e:80:3e:55:
da:c3:96:0c:fe:17:d3:f9:73:81:82:2e:8d:46:fc:
b8:27:a6:83:bd:51:10:75:ff:ab:d2:e2:14:67:fd:
66:74:ad:c4:ba:bd:cc:e8:59:fa:0b:63:01:26:6e:
53:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F7:63:23:33:77:F9:5C:91:41:B2:22:C8:80:0A:EC:A8:54:41:5A
X509v3 Authority Key Identifier:
keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6e:f6:f2:36:c5:2b:2c:63:48:21:ed:31:79:41:f0:09:18:
ca:57:61:ad:ab:f0:e6:e4:21:04:eb:1a:47:89:69:e4:33:61:
a3:d4:cd:74:59:02:4d:1f:d9:99:3e:b6:89:4d:ee:99:a5:4e:
34:c5:95:eb:da:93:bd:76:d7:1d:c3:85:9d:df:89:82:3b:f4:
9c:c2:07:33:b3:fb:cf:0c:49:b2:3c:34:59:d6:82:47:e0:40:
c1:21:50:13:da:09:27:08:60:21:a3:a0:00:74:6b:d4:73:23:
74:d2:c9:52:e7:fd:71:14:69:e8:d9:6f:84:eb:bd:53:47:52:
cb:52:5c:e8:33:03:b2:cc:4e:e2:bd:13:dc:fc:c4:e3:cc:68:
a2:71:e3:cc:9f:a0:2d:d1:e4:4b:10:98:49:fe:8f:9a:24:0f:
58:57:4a:f1:93:3b:5f:db:32:d4:f1:d2:8e:3c:e0:9f:9e:4e:
7a:20:02:71:f5:66:06:09:4b:98:bf:c0:e1:56:3a:52:53:d7:
2a:85:ba:68:13:a8:79:35:4c:1e:f3:77:89:49:de:df:93:2f:
48:60:5e:c5:9e:0c:62:33:8c:35:35:fa:6d:e4:de:c2:ca:94:
d7:b7:85:87:21:6b:df:00:8f:7e:3e:b9:4e:90:93:52:6f:d3:
c0:83:e5:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nvfn+VcE7zuUajHyA0S8EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNzc1ZTFiOWZiMGFjOTNkNTYzYmE4ZTk3MDg4NGRhNTdi
NmUxOTcwHhcNMjYwNzI4MDgwMTEyWhcNMjYwNzI5MDgwMTEyWjAzMTEwLwYDVQQD
EygzM2Y3NjMyMzMzNzdmOTVjOTE0MWIyMjJjODgwMGFlY2E4NTQ0MTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTWLrtXGP0jE7D4EHNtn5MCTQNjU
BXjJ3wA2LJUor5irDSG1UG05BRk6TyfesLvilKOax2wVU4RRCiZ44njD9Npnv5vL
NrIpLO6DfGjKp4l1AgnJ/H0YA/gBxAUJRxCrxwzO86x7GamVK9ChCly2c5gknx0E
AVViA2ifaqhK0ncjcoeyqKIfckXQGHLijj0vuHvUS4F3BrDj0FEH7pIxjKDeMAOA
3PW5cIs58/p6XSdmT9WbYPRWf6ucO2DJe/fJyPhat7hWJgffObQQZB6APlXaw5YM
/hfT+XOBgi6NRvy4J6aDvVEQdf+r0uIUZ/1mdK3Eur3M6Fn6C2MBJm5TvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDP3YyMzd/lckUGyIsiACuyoVEFaMB8GA1UdIwQY
MBaAFDx3XhufsKyT1WO6jpcIhNpXtuGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMWRiYjctYmNmZC00YTYxLWE2NDEt
NGU1Njg2YmU2YjgyLzEvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMWRiYjctYmNmZC00YTYxLWE2NDEtNGU1Njg2YmU2Yjgy
LzEvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2728jbF
KyxjSCHtMXlB8AkYyldhravw5uQhBOsaR4lp5DNho9TNdFkCTR/ZmT62iU3umaVO
NMWV69qTvXbXHcOFnd+Jgjv0nMIHM7P7zwxJsjw0WdaCR+BAwSFQE9oJJwhgIaOg
AHRr1HMjdNLJUuf9cRRp6NlvhOu9U0dSy1Jc6DMDssxO4r0T3PzE48xoonHjzJ+g
LdHkSxCYSf6PmiQPWFdK8ZM7X9sy1PHSjjzgn55OeiACcfVmBglLmL/A4VY6UlPX
KoW6aBOoeTVMHvN3iUne35MvSGBexZ4MYjOMNTX6beTewsqU17eFhyFr3wCPfj65
TpCTUm/TwIPlzQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:10:24 2026 by rpki-client