Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
File: PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json)
Hash identifier: qSFo47fJMO4SG4TyM7ZdgT/HwjaQkQYH/P3uvXvVMKA=
Subject key identifier: 0A:42:4F:E7:C9:01:DD:24:9B:C9:3E:13:6E:E8:E9:3D:97:E3:21:C1
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Certificate issuer: /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial: 019DA4536888209935E70A29E2490995FA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
Manifest number: 0D40
Signing time: Sun 19 Apr 2026 06:00:22 +0000
Manifest this update: Sun 19 Apr 2026 06:00:22 +0000
Manifest next update: Mon 20 Apr 2026 06:00:22 +0000
Files and hashes: 1: FcgVbK89FeRjuVyoSQOfN4fWFvA.asa (hash: 22DkZ7JjoLv+BaBD/x8KpQJlMw9ISrjqJDXnZSuMJzI=)
2: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: ePjmq1uKCN4kf9/pyI6qQYTF/e6a3hQWiHiyl5mJ5ww=)
3: Zn0XhdqYxe8o-jPEi-ZNfcsL5t0.roa (hash: rHtPfci/7WpFrwQjD0oZB4ESw2Ju9X+jUEYp4DLCYRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:68:88:20:99:35:e7:0a:29:e2:49:09:95:fa:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Validity
Not Before: Apr 19 06:00:22 2026 GMT
Not After : Apr 20 06:00:22 2026 GMT
Subject: CN=0a424fe7c901dd249bc93e136ee8e93d97e321c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:a3:da:57:3f:25:16:9d:0d:37:8b:11:c6:
da:07:85:c4:6c:67:4c:47:46:52:9f:ee:9b:e9:e1:
b5:cc:f5:0d:d6:83:8f:44:08:a2:9a:5b:06:56:dc:
6e:60:cc:4c:b8:09:94:be:83:29:88:19:1d:18:14:
93:7d:37:a6:ed:81:fe:ef:a1:67:94:ed:f9:99:d6:
97:a0:14:ee:99:a4:07:47:63:d2:a6:1b:f3:21:f1:
68:b7:05:b8:bd:65:09:2e:49:ae:22:5b:3e:05:81:
2f:f5:c9:2a:f9:20:5a:c2:14:e2:13:11:27:43:46:
d0:f5:47:84:ba:92:b0:36:cd:66:0f:c8:65:d1:21:
ab:e2:2b:48:56:91:c7:cc:cc:fe:c0:fd:af:a1:84:
3c:9d:b2:1d:4e:cf:87:97:fb:50:8f:bf:b1:f4:d8:
9d:9a:61:3f:1e:e2:df:d7:70:3d:bc:3e:eb:75:50:
04:ae:f7:53:91:d5:ca:8e:b8:30:d6:b3:85:29:51:
a2:8e:82:39:c4:52:fd:d5:33:c7:ae:09:29:4f:d5:
aa:01:19:67:40:09:54:a3:97:3c:e8:a8:13:f7:7f:
28:68:68:a8:d6:3a:1d:af:ab:a6:73:e9:12:a0:17:
78:5d:86:98:60:ee:85:f0:8f:86:d9:fc:8f:b7:24:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:42:4F:E7:C9:01:DD:24:9B:C9:3E:13:6E:E8:E9:3D:97:E3:21:C1
X509v3 Authority Key Identifier:
keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fb:91:5b:f8:f0:05:38:73:99:89:28:18:4c:eb:02:a1:ef:
0c:d3:ba:b3:93:f0:37:bb:47:77:a4:94:5b:18:ae:b5:5d:f4:
b8:55:a4:41:d2:08:54:db:94:10:0f:fb:fd:42:a5:ba:97:cb:
e5:ae:4a:b5:26:c8:42:a1:6e:3c:89:be:7a:d4:bc:c9:72:e9:
df:71:4d:4d:d1:93:78:4c:4c:a1:a0:31:ad:50:e6:10:2c:0e:
05:02:15:c7:a8:64:bd:10:d6:31:81:36:7d:f5:fb:90:b4:d4:
45:cc:99:35:e5:45:ba:60:28:ff:a4:aa:be:1e:63:9e:01:e5:
32:6b:b0:d3:c9:68:79:f2:3a:56:3e:52:49:65:cd:5f:17:9a:
b2:03:24:6b:cc:69:1a:6c:1b:ad:f2:6a:0e:ed:74:76:09:fd:
65:b7:0a:14:85:63:f0:78:ce:ca:1b:53:28:cd:4a:8c:fb:f7:
0e:73:36:8b:2f:6c:8c:4b:cf:7d:62:e1:43:1d:79:76:45:3c:
19:51:89:f0:70:da:98:70:d3:ac:3d:4f:95:f1:23:62:30:0d:
e8:8e:0d:f8:55:3f:58:ef:0f:f0:53:b0:81:46:81:8d:7e:16:
40:3e:fc:1c:ca:f8:24:36:16:e2:d9:7d:c3:6f:48:4c:b3:37:
61:31:69:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:05 2026 by rpki-client