Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
File: PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json)
Hash identifier: S25+zX9JM/t36gDnjffBTtFemwtoNXcHiS3menL0PDg=
Subject key identifier: DB:8E:64:AA:3E:AC:FB:80:45:CC:A3:78:30:F0:B8:24:10:93:F1:00
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Certificate issuer: /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial: 019D98BD11070E0E703CB0503B714FEFA45E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
Manifest number: 0D3A
Signing time: Fri 17 Apr 2026 00:00:20 +0000
Manifest this update: Fri 17 Apr 2026 00:00:20 +0000
Manifest next update: Sat 18 Apr 2026 00:00:20 +0000
Files and hashes: 1: FcgVbK89FeRjuVyoSQOfN4fWFvA.asa (hash: 22DkZ7JjoLv+BaBD/x8KpQJlMw9ISrjqJDXnZSuMJzI=)
2: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: L+bqxwimPievk+9XS8mxbyBMPi8YeffVZWjF4ywApq4=)
3: Zn0XhdqYxe8o-jPEi-ZNfcsL5t0.roa (hash: rHtPfci/7WpFrwQjD0oZB4ESw2Ju9X+jUEYp4DLCYRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:11:07:0e:0e:70:3c:b0:50:3b:71:4f:ef:a4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Validity
Not Before: Apr 17 00:00:20 2026 GMT
Not After : Apr 18 00:00:20 2026 GMT
Subject: CN=db8e64aa3eacfb8045cca37830f0b8241093f100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c0:28:97:3b:2e:c9:db:ae:36:00:c1:83:c7:
56:4c:02:73:81:32:b6:44:96:fb:1e:e6:27:b4:20:
12:44:70:b8:a9:bc:e5:26:78:df:e7:21:95:fd:5b:
97:10:d3:97:c4:fc:a0:56:c1:b4:2d:97:b4:f5:19:
2b:2e:49:3b:ba:67:da:64:66:af:43:a4:a2:ef:26:
90:08:0c:b2:eb:8a:6a:73:0b:ba:a5:79:4d:dd:7f:
68:f7:9a:56:dc:ab:73:bc:84:fd:de:a3:59:37:b4:
9d:c7:95:08:1a:2c:f0:f3:64:71:fd:05:fc:e1:1d:
69:b7:14:12:d0:39:b3:06:67:60:6c:a1:7b:02:75:
5f:3d:ab:c2:c3:6e:14:cf:0c:a5:54:42:5f:d1:fd:
8f:e5:18:2a:b6:a2:43:4c:c7:31:95:6e:98:da:8b:
9a:9b:25:8f:42:a8:92:23:3a:67:5e:14:4a:a8:9f:
69:1c:43:9d:32:a4:0b:15:2b:39:b2:d0:5e:ca:17:
7a:98:7e:fb:a1:10:05:f9:15:4c:0a:11:ab:77:64:
46:a7:f9:e4:4f:1c:b8:53:f8:06:43:e8:dd:d6:9c:
f8:f8:56:72:2c:ad:60:c5:4f:73:e3:98:e3:f8:3b:
98:20:86:1b:23:9b:9b:a4:84:13:f4:37:bc:f3:c7:
b3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8E:64:AA:3E:AC:FB:80:45:CC:A3:78:30:F0:B8:24:10:93:F1:00
X509v3 Authority Key Identifier:
keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c3:09:59:95:27:96:81:8d:ec:00:dc:53:6b:a6:4d:0a:9e:
53:43:a8:3f:1d:d4:bb:7c:f9:eb:e7:18:eb:5d:d6:f5:e8:f5:
2a:29:e7:ab:2e:e9:41:1f:be:f8:55:d3:46:62:22:5c:f3:ef:
1a:b7:7c:7e:5c:22:82:7c:41:33:98:a3:e3:03:61:4f:55:f1:
c0:ae:f6:94:3c:c4:72:44:f9:53:c6:8a:42:58:fd:72:a5:df:
6d:a3:1f:b8:d0:cf:f4:1c:ee:26:e8:f1:2f:b7:0e:ff:98:29:
15:a6:4f:97:ef:81:b9:da:01:fe:d7:67:1c:47:9f:18:a8:40:
77:4b:6c:b7:86:18:56:21:db:e5:70:c7:6e:23:e7:f5:6f:c8:
9c:2d:cc:4a:eb:8c:c7:04:b7:89:a6:84:b0:07:49:91:b8:15:
30:33:d8:ce:92:fe:b8:da:4f:c4:de:93:a3:1f:9d:4c:34:93:
6c:21:7c:c1:ad:ad:70:96:bc:c1:c2:04:8d:9c:39:02:4e:3d:
11:31:da:1f:5f:79:b1:6b:b5:e8:23:e5:c9:b1:29:fa:08:4c:
31:a2:8f:f7:5e:d9:83:41:fa:0c:1e:aa:26:f9:9e:38:3a:44:
19:97:a8:d3:d9:88:4c:2e:85:36:34:5d:74:6c:4e:3f:c6:11:
13:9d:d9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:34:49 2026 by rpki-client