Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
File: PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json)
Hash identifier: hFvMh6vauK36LxNs8g3qiUM9uULv2s2XN7FzNwqNz0s=
Subject key identifier: 33:07:F8:C7:17:A3:4D:B1:B4:A2:3D:7F:B8:29:E2:1A:C1:A2:F0:94
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Certificate issuer: /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial: 019CA94633E7B8F45C971A329A4AA8E0899F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
Manifest number: 0CBE
Signing time: Sun 01 Mar 2026 12:01:16 +0000
Manifest this update: Sun 01 Mar 2026 12:01:16 +0000
Manifest next update: Mon 02 Mar 2026 12:01:16 +0000
Files and hashes: 1: FcgVbK89FeRjuVyoSQOfN4fWFvA.asa (hash: 22DkZ7JjoLv+BaBD/x8KpQJlMw9ISrjqJDXnZSuMJzI=)
2: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: 9omik/2eRflAMMJn7K5BxAM0fCTu+SKidiICD58WFlo=)
3: Zn0XhdqYxe8o-jPEi-ZNfcsL5t0.roa (hash: rHtPfci/7WpFrwQjD0oZB4ESw2Ju9X+jUEYp4DLCYRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:33:e7:b8:f4:5c:97:1a:32:9a:4a:a8:e0:89:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Validity
Not Before: Mar 1 12:01:16 2026 GMT
Not After : Mar 2 12:01:16 2026 GMT
Subject: CN=3307f8c717a34db1b4a23d7fb829e21ac1a2f094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:6d:b7:e3:85:80:13:ff:25:d8:41:51:a1:
50:af:33:ce:2e:b0:bb:ba:5c:cd:ed:df:42:66:39:
f4:c9:aa:fd:71:a7:50:3a:53:ba:9e:4f:6c:52:ef:
e5:65:14:d5:a1:4a:42:b3:32:7e:a2:d4:05:b9:0e:
2d:08:21:f6:45:6b:ec:e2:01:2b:ab:bc:d7:cb:eb:
41:24:82:7a:7a:19:ce:05:23:73:35:36:1b:74:69:
b4:16:9a:18:2e:5a:21:3e:93:0e:d9:d7:ca:e4:35:
f1:40:e8:9f:d8:a1:6d:2c:8b:3d:9b:72:45:7c:40:
ae:fc:51:52:90:b2:b7:70:25:69:36:1f:d2:d3:e5:
b5:a1:95:eb:d3:55:25:8e:b0:28:9e:a1:66:26:b1:
66:e0:9b:80:de:99:9e:e6:b1:d2:56:5c:73:13:2f:
86:e6:07:a4:a9:f8:40:8a:b9:c7:69:f9:74:a1:56:
0a:5d:96:68:ee:d5:71:4a:11:8b:19:6a:8f:be:25:
78:fd:c9:72:cf:55:69:89:5b:b5:42:e5:ef:d5:50:
56:d0:89:51:8d:c3:c4:79:4d:b2:5e:e7:07:dc:08:
14:bc:16:14:f7:3f:dc:c7:1e:43:6c:49:74:15:65:
2d:ec:a9:4d:5a:f3:44:d1:ae:c9:9c:2e:22:17:6b:
64:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:07:F8:C7:17:A3:4D:B1:B4:A2:3D:7F:B8:29:E2:1A:C1:A2:F0:94
X509v3 Authority Key Identifier:
keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:96:cc:70:78:58:9a:a4:08:a3:31:1c:f2:84:e0:8b:52:28:
d4:1a:86:04:31:80:db:dd:a6:79:27:30:49:6b:76:d6:84:cd:
fd:d1:6a:a8:be:6f:9b:4a:e1:f5:78:cb:25:8a:7d:65:32:e6:
b7:16:d9:a7:28:38:62:9e:66:7e:de:90:25:c2:0c:fb:ff:18:
8c:47:d9:14:26:43:d8:fb:b6:2a:b7:e8:66:a5:e6:79:ae:e0:
3c:02:4a:ac:d4:da:5c:74:9b:96:77:5e:8e:10:d4:bb:c9:58:
83:6b:34:8c:11:a2:67:4d:14:df:5c:dd:b3:1f:90:f0:6c:04:
c7:75:38:79:b1:c6:39:a3:b7:40:57:ea:f0:d9:fe:d6:ca:b4:
a7:31:9d:5e:18:6a:f5:e9:43:6e:e2:43:f5:2b:b4:66:57:9f:
fd:c7:77:13:f8:87:af:1b:b3:b9:bb:ca:78:4d:76:e2:29:57:
37:e7:51:be:00:a0:28:92:bb:0b:30:06:3c:7e:b1:80:30:82:
4e:1f:52:f1:0d:78:95:19:9f:a3:1b:43:65:f4:6b:7d:0b:22:
a3:c8:c7:73:87:a3:a9:63:b5:0e:cd:3a:46:a4:01:0f:07:3a:
32:0b:f9:9a:ad:29:28:1a:c2:a2:6a:7e:e5:08:1d:4f:f6:3e:
76:3a:95:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:45:06 2026 by rpki-client