Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
File: PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json)
Hash identifier: COusB+Eh0PCStT0LFx71Bwm2dQRRvpP63AHclQPgSL8=
Subject key identifier: 29:FE:AA:01:FB:89:F7:3A:09:04:3C:C8:4C:21:44:44:5D:CD:1F:2E
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Certificate issuer: /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial: 01A0C1B165474B8DE866CF3BA4DBCD9D8AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
Manifest number: 0EDD
Signing time: Mon 21 Sep 2026 02:00:23 +0000
Manifest this update: Mon 21 Sep 2026 02:00:23 +0000
Manifest next update: Tue 22 Sep 2026 02:00:23 +0000
Files and hashes: 1: FcgVbK89FeRjuVyoSQOfN4fWFvA.asa (hash: 22DkZ7JjoLv+BaBD/x8KpQJlMw9ISrjqJDXnZSuMJzI=)
2: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: mMKLC7TfJWfe3/E+EvMmLiArwc2sqSr9+jS+JQmXAow=)
3: Zn0XhdqYxe8o-jPEi-ZNfcsL5t0.roa (hash: rHtPfci/7WpFrwQjD0oZB4ESw2Ju9X+jUEYp4DLCYRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:65:47:4b:8d:e8:66:cf:3b:a4:db:cd:9d:8a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Validity
Not Before: Sep 21 02:00:23 2026 GMT
Not After : Sep 22 02:00:23 2026 GMT
Subject: CN=29feaa01fb89f73a09043cc84c2144445dcd1f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:2e:08:25:0f:52:32:f1:17:c8:5d:c9:ae:
78:1e:4c:f2:14:d1:c2:3d:e7:dc:28:06:b9:06:12:
39:1e:cd:8c:70:71:aa:56:ef:53:96:93:b8:86:d6:
e4:7b:a1:2b:10:5c:0c:6d:ed:98:1f:9d:56:b9:88:
d8:36:98:db:dd:58:d1:a9:57:93:8b:bc:91:76:1a:
45:c4:c0:3b:45:82:c2:a4:71:16:f7:d7:6c:6d:2e:
4b:0e:2e:98:e4:b2:5b:60:78:11:dd:c9:d0:32:f8:
52:02:a8:d5:4f:33:ee:03:b6:44:8e:43:81:b9:a9:
23:22:d6:50:92:41:e0:c7:8b:60:f2:0c:63:f2:ec:
33:a9:ad:b2:39:e2:ba:ee:47:56:89:d6:9e:62:e9:
bb:fe:12:4c:eb:18:ca:61:1b:2f:77:8c:25:49:80:
c0:16:08:d1:c6:db:91:bf:b2:4b:e1:06:db:70:85:
96:75:fd:1b:49:0d:44:0a:3b:6d:fc:16:3e:44:eb:
f3:e4:e5:77:d5:47:78:30:62:0c:be:d2:bd:e5:58:
54:ec:da:35:91:63:b4:9d:2e:9b:64:b9:76:37:18:
0e:4b:d1:f0:d9:6f:c1:7b:7e:a6:10:9a:d7:4a:a3:
15:d2:10:31:39:5d:f7:ad:51:bd:22:98:79:cb:5c:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FE:AA:01:FB:89:F7:3A:09:04:3C:C8:4C:21:44:44:5D:CD:1F:2E
X509v3 Authority Key Identifier:
keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8b:02:1c:f9:93:ef:2a:e1:e2:d0:f6:d1:1e:40:d5:8a:b9:
05:a1:c0:f1:43:eb:c5:c4:cc:12:75:b0:a2:ea:b2:eb:82:47:
01:9c:c7:16:2b:03:63:ce:05:7a:3e:47:74:be:91:25:8d:9c:
03:b6:b3:f1:24:d4:0f:a1:d1:da:2b:6e:6b:48:5a:4f:e9:ed:
c8:6d:a5:b5:61:86:86:65:85:29:d5:5e:e0:89:80:d7:90:ed:
e2:4a:96:6c:a0:88:a8:57:d2:ec:6c:09:59:9b:11:28:d7:41:
d0:ad:a3:86:d9:61:74:fd:46:d1:a0:13:13:81:07:d9:ac:b8:
f6:e5:22:c5:70:99:6b:3d:e8:b6:26:99:79:aa:77:d7:aa:31:
73:61:92:eb:bb:b5:8a:2d:bc:1d:87:03:2f:75:34:54:2b:95:
16:16:6b:a3:a2:d5:64:ce:93:56:5b:fe:6b:8c:0a:77:0b:4c:
56:2d:46:bf:b2:32:11:2c:85:d2:35:2f:96:f9:69:a6:8c:14:
c0:b6:cd:50:90:1f:a4:68:8f:21:fc:26:e6:9f:06:95:94:47:
f2:15:c8:10:0f:e9:ff:99:37:a9:f5:6a:1c:79:90:44:fb:7f:
36:41:de:9f:c2:4b:e4:19:08:ce:c4:5d:69:25:a7:25:98:ee:
1a:0c:4f:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBsWVHS43oZs87pNvNnYqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNzc1ZTFiOWZiMGFjOTNkNTYzYmE4ZTk3MDg4NGRhNTdi
NmUxOTcwHhcNMjYwOTIxMDIwMDIzWhcNMjYwOTIyMDIwMDIzWjAzMTEwLwYDVQQD
EygyOWZlYWEwMWZiODlmNzNhMDkwNDNjYzg0YzIxNDQ0NDVkY2QxZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJsuCCUPUjLxF8hdya54HkzyFNHC
PefcKAa5BhI5Hs2McHGqVu9TlpO4htbke6ErEFwMbe2YH51WuYjYNpjb3VjRqVeT
i7yRdhpFxMA7RYLCpHEW99dsbS5LDi6Y5LJbYHgR3cnQMvhSAqjVTzPuA7ZEjkOB
uakjItZQkkHgx4tg8gxj8uwzqa2yOeK67kdWidaeYum7/hJM6xjKYRsvd4wlSYDA
FgjRxtuRv7JL4QbbcIWWdf0bSQ1ECjtt/BY+ROvz5OV31Ud4MGIMvtK95VhU7No1
kWO0nS6bZLl2NxgOS9Hw2W/Be36mEJrXSqMV0hAxOV33rVG9Iph5y1xp8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCn+qgH7ifc6CQQ8yEwhRERdzR8uMB8GA1UdIwQY
MBaAFDx3XhufsKyT1WO6jpcIhNpXtuGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMWRiYjctYmNmZC00YTYxLWE2NDEt
NGU1Njg2YmU2YjgyLzEvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMWRiYjctYmNmZC00YTYxLWE2NDEtNGU1Njg2YmU2Yjgy
LzEvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYsCHPmT
7yrh4tD20R5A1Yq5BaHA8UPrxcTMEnWwouqy64JHAZzHFisDY84Fej5HdL6RJY2c
A7az8STUD6HR2itua0haT+ntyG2ltWGGhmWFKdVe4ImA15Dt4kqWbKCIqFfS7GwJ
WZsRKNdB0K2jhtlhdP1G0aATE4EH2ay49uUixXCZaz3otiaZeap316oxc2GS67u1
ii28HYcDL3U0VCuVFhZro6LVZM6TVlv+a4wKdwtMVi1Gv7IyESyF0jUvlvlppowU
wLbNUJAfpGiPIfwm5p8GlZRH8hXIEA/p/5k3qfVqHHmQRPt/NkHen8JL5BkIzsRd
aSWnJZjuGgxPwA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:53:19 2026 by rpki-client