Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
File: PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json)
Hash identifier: CqXEs4+JyvC49PFAUGMztPUjnnpUHVPWe1j+iJqXc+I=
Subject key identifier: FF:73:29:96:5C:C7:92:53:15:58:17:BF:EE:CC:70:83:9F:BD:EA:12
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Certificate issuer: /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial: 01A0C39FC7665CF8A353C8ACE83B9E510933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
Manifest number: 0EDE
Signing time: Mon 21 Sep 2026 11:00:23 +0000
Manifest this update: Mon 21 Sep 2026 11:00:23 +0000
Manifest next update: Tue 22 Sep 2026 11:00:23 +0000
Files and hashes: 1: FcgVbK89FeRjuVyoSQOfN4fWFvA.asa (hash: 22DkZ7JjoLv+BaBD/x8KpQJlMw9ISrjqJDXnZSuMJzI=)
2: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: Kivlu12uFJAMH9FoL/4AK3i33DDS6djmlxFOA+sWsH0=)
3: Zn0XhdqYxe8o-jPEi-ZNfcsL5t0.roa (hash: rHtPfci/7WpFrwQjD0oZB4ESw2Ju9X+jUEYp4DLCYRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:c7:66:5c:f8:a3:53:c8:ac:e8:3b:9e:51:09:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Validity
Not Before: Sep 21 11:00:23 2026 GMT
Not After : Sep 22 11:00:23 2026 GMT
Subject: CN=ff7329965cc79253155817bfeecc70839fbdea12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5c:c6:cf:26:b2:77:14:e1:78:99:aa:49:2f:
05:de:64:eb:59:33:e6:70:b2:b7:a0:61:15:1a:26:
32:1d:9e:73:e2:54:9d:9f:3b:4c:66:5e:40:5e:4f:
0e:0b:e7:fc:a8:52:d7:03:f5:8c:7b:26:9b:7e:27:
a9:74:2e:21:bb:38:5a:5b:bb:be:80:ad:52:50:9b:
37:99:fd:96:45:19:05:85:41:75:88:de:9f:6e:96:
f6:a3:f9:93:da:06:0f:71:8d:d1:6c:4a:de:84:f0:
80:b5:30:d7:cf:e8:84:37:7f:f2:29:28:b2:57:08:
dd:5b:48:ec:62:bf:00:8b:e8:e1:1d:d0:4b:e1:da:
ce:45:f8:b3:62:c8:6e:f2:77:e0:fb:59:62:9e:0e:
9c:e4:c0:0f:77:da:f0:08:4d:6f:92:5e:91:f3:25:
a1:f5:85:70:79:7e:a2:77:f2:d1:b0:7d:0e:de:8b:
57:94:47:14:be:fd:77:30:db:bf:1e:53:06:57:56:
27:51:98:47:5b:e4:33:42:4f:17:bd:9f:2f:80:e2:
cd:2b:e0:a5:3a:87:e8:0b:0b:a3:8e:10:b2:73:bd:
67:07:c0:0b:c0:f6:13:40:af:41:d4:b0:4a:06:63:
a5:5e:31:9b:36:41:7a:4c:ce:7c:93:8f:36:0b:8d:
a3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:73:29:96:5C:C7:92:53:15:58:17:BF:EE:CC:70:83:9F:BD:EA:12
X509v3 Authority Key Identifier:
keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:40:8c:61:01:6d:aa:ff:c9:20:ba:b2:65:fc:2e:6e:cc:89:
36:92:99:0b:a6:b2:20:69:92:d5:88:44:97:dc:b9:53:fd:80:
b8:78:4a:71:6d:2d:0d:c9:a0:38:30:6f:a0:d6:0d:27:f2:d5:
88:20:87:f2:a7:81:db:b6:34:99:3f:d1:1e:83:8f:74:55:0d:
2d:0f:9e:e1:08:27:e9:92:cd:5e:7c:55:89:a2:1b:ea:e2:d8:
78:eb:ac:e8:36:db:14:31:28:1d:d3:48:a0:7b:f4:cb:b9:35:
8a:5a:99:4e:fd:52:4b:41:fb:ac:b6:62:e2:27:5b:b5:2e:31:
5d:ec:7e:08:23:de:31:de:ad:5c:f9:42:ea:98:f3:16:45:33:
52:c8:91:7f:00:76:33:eb:ed:9b:27:90:09:99:7f:79:ad:00:
55:d0:d5:28:59:31:aa:bd:d6:57:b5:51:97:90:2b:1b:14:b1:
4d:80:81:96:4e:51:2a:0e:23:d1:ad:9e:2d:76:cf:ff:8c:26:
57:84:7f:93:40:23:49:25:7d:37:a2:4e:33:a4:d7:61:7d:06:
b0:fb:82:7a:56:97:64:b8:7a:ce:91:79:c7:1c:32:d4:1c:03:
77:da:66:a7:87:fc:02:f3:c9:1f:fa:3f:34:b3:a2:68:9c:7c:
47:0e:58:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:25:45 2026 by rpki-client