Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File: PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier: Hs6J4yV+vNyttk0njaaCXwUwT7FpPvkKyKoTW68+AS8=
Subject key identifier: 5C:57:3D:CF:73:C5:63:4D:50:40:81:6A:8A:EF:8C:35:93:AF:10:0F
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial: 019CA9464E8558F3D6B4556650B2E4652A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number: 103C
Signing time: Sun 01 Mar 2026 12:01:22 +0000
Manifest this update: Sun 01 Mar 2026 12:01:22 +0000
Manifest next update: Mon 02 Mar 2026 12:01:22 +0000
Files and hashes: 1: 8kiAQtkav2NHfFCJtiBA0ERhqIA.roa (hash: F/EijD7R25vjZwA9wYF9LplNamhupuIHanpPILz4ls0=)
2: M_79XQ2SXAKWIFy3HNmBFX2YRgI.roa (hash: PQS0FU2tcc2qRmlqMUo4a/MCLdHlPpwQ5M9eqNDwavA=)
3: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: 4GW/dq94W4namVAyu9hQnsEtaEJIpBYTO6H+FPAagho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:4e:85:58:f3:d6:b4:55:66:50:b2:e4:65:2a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Validity
Not Before: Mar 1 12:01:22 2026 GMT
Not After : Mar 2 12:01:22 2026 GMT
Subject: CN=5c573dcf73c5634d5040816a8aef8c3593af100f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:6c:4a:14:8b:3b:e7:2c:ba:ad:bb:d2:d2:
12:69:66:f4:4e:f5:72:89:12:d2:47:35:6d:8e:0c:
74:fe:5c:11:60:7c:f8:24:27:af:84:34:28:d4:95:
a4:f2:27:3a:cc:f8:7f:f1:a6:77:a2:de:c9:a5:c0:
32:5f:af:a9:fe:98:e3:0d:1d:9b:9e:43:80:85:87:
60:73:ec:cf:4d:49:f5:5e:25:c8:da:9a:09:97:2a:
03:fa:cc:ef:24:e8:6e:3b:c2:33:c1:2e:14:1a:0b:
07:66:66:0d:45:4f:bc:80:e9:31:85:ea:b9:8d:7f:
32:ed:90:33:e9:bd:f7:39:d3:34:37:b4:ee:0a:7a:
c5:fa:d2:ba:cf:39:63:53:2d:87:be:21:a3:f7:b5:
78:64:8c:ca:7f:b8:0e:5a:1c:60:c6:e2:02:46:a9:
14:c2:a6:47:14:10:06:e6:a3:9c:e7:82:2d:2e:4d:
08:c0:0e:74:7f:d4:e4:5c:94:ce:f7:46:63:e9:ca:
09:8a:56:77:6b:9f:36:13:15:da:a3:a9:e3:8f:c2:
4a:5b:9e:2a:5d:ad:1a:23:d4:cf:c5:e7:ce:91:25:
bc:1d:a0:43:b7:68:b0:80:ac:b6:1b:a5:17:bd:9c:
d1:e4:bd:70:62:78:1c:1d:92:f2:d2:4a:7e:ba:d6:
7f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:57:3D:CF:73:C5:63:4D:50:40:81:6A:8A:EF:8C:35:93:AF:10:0F
X509v3 Authority Key Identifier:
keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:77:c5:59:22:2f:2a:38:d8:7d:60:32:41:dc:a8:3a:fc:eb:
63:b6:17:86:09:b5:cd:3d:33:ea:8e:6e:14:36:d8:0c:be:f2:
61:66:b2:93:4c:e7:9c:ea:6b:70:51:91:c5:56:06:b2:18:c6:
de:11:e1:d2:50:dc:74:30:f0:23:40:fc:c3:b0:ef:55:54:86:
50:61:8a:9e:9f:c1:4d:c3:76:0c:9c:b6:b9:1a:5e:28:ab:98:
e2:ed:f7:9a:62:a9:81:a0:4d:a0:c8:36:5f:d0:6b:b8:d6:3b:
5d:14:f9:06:96:c8:d1:42:cb:65:eb:0d:58:4c:b6:00:56:fe:
06:91:1e:7e:22:23:8a:0d:9f:58:ac:d4:6a:6a:cf:be:cb:b1:
8b:0d:19:c8:de:cd:dc:78:34:31:89:9d:e5:39:76:9a:63:4f:
1d:7c:ae:e6:ce:bb:d4:55:3d:33:23:5d:05:1c:20:22:1d:6c:
b6:3a:7a:c9:79:68:e5:9e:ee:d3:54:d3:94:4b:e6:77:b2:c5:
b7:13:84:b9:e0:95:e6:8d:aa:d0:07:fb:8e:11:c8:5e:90:cb:
e8:57:46:6f:c5:99:f3:58:29:74:ee:42:1b:a9:61:4c:4e:18:
0e:85:4f:52:66:d3:e0:20:ec:28:93:01:a4:e2:c7:7c:4b:a4:
a7:bb:3d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:36 2026 by rpki-client