Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
File: PhYwnSXRPOXHlqWhdOQsPNm8tes.mft (raw, json)
Hash identifier: 5ZOA/ljNPFOoJqTfaH4VnyQ7Tgi38hffClGRDAyHUBY=
Subject key identifier: 81:F7:0C:ED:61:70:C9:53:29:E4:A1:95:74:B9:81:59:D9:A4:16:DC
Authority key identifier: 3E:16:30:9D:25:D1:3C:E5:C7:96:A5:A1:74:E4:2C:3C:D9:BC:B5:EB
Certificate issuer: /CN=3e16309d25d13ce5c796a5a174e42c3cd9bcb5eb
Certificate serial: 019CA8D8B58C44991AC04B08FA19E1823711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
Manifest number: 23
Signing time: Sun 01 Mar 2026 10:01:40 +0000
Manifest this update: Sun 01 Mar 2026 10:01:40 +0000
Manifest next update: Mon 02 Mar 2026 10:01:40 +0000
Files and hashes: 1: PhYwnSXRPOXHlqWhdOQsPNm8tes.crl (hash: DY1EroHTCytpNlTFhqYLppyTeHU098ajXAzRdz3tzDg=)
2: RfNBsHj8QcqkAL-Ye4KgxIRMAME.roa (hash: a3yGPg9Ldh+EVAvxaPgx65P1BWMxHy09aUciESjCmVY=)
3: UnaF_eoa9ROObjqYeTBIXsHw3Nw.asa (hash: oZG+a5/aGxOGxHi9FsasMcCsAqmNUBRZ44VQS9ERQa8=)
4: VFVPR_IRVw5BlqiNs1YWSmHiqsE.roa (hash: V8+sjv3juPFIm0G9xudc5DKK5HaQCguQbshspKidKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:b5:8c:44:99:1a:c0:4b:08:fa:19:e1:82:37:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e16309d25d13ce5c796a5a174e42c3cd9bcb5eb
Validity
Not Before: Mar 1 10:01:40 2026 GMT
Not After : Mar 2 10:01:40 2026 GMT
Subject: CN=81f70ced6170c95329e4a19574b98159d9a416dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:db:c7:23:dc:9c:b7:1a:87:97:67:33:9a:
17:9d:27:c7:db:37:13:45:74:b9:fe:b6:24:f1:6c:
56:3a:21:1a:b1:4c:bd:6b:fe:4b:25:7d:52:74:82:
58:1d:48:43:89:4b:aa:97:1b:8d:fd:38:dd:40:71:
8c:5e:1b:96:c0:b0:97:d2:9e:d6:f0:0d:f9:dc:68:
7b:1b:10:09:13:25:ec:50:8a:2b:49:8f:87:81:58:
97:49:c0:5f:bb:27:1e:7b:0d:75:9c:a0:d2:be:2f:
04:36:87:36:79:08:0f:64:c9:5a:ac:a4:86:6d:c4:
2a:8a:83:b6:ba:4c:cd:8e:73:de:60:30:a3:82:c8:
95:9e:c6:28:c4:95:be:41:48:9b:60:ac:0b:d1:57:
0a:e2:48:f1:61:00:e0:cf:ac:01:1c:4c:c1:88:6f:
cf:2d:fc:0b:89:fd:d6:82:1e:08:95:93:ac:fe:25:
0a:87:b1:c8:c0:93:47:58:75:5e:c3:a3:d6:06:f1:
e4:42:07:fc:ce:a5:f4:dd:32:9c:fa:37:a0:b3:c3:
e5:ad:e6:dd:0a:32:7d:0f:c4:b8:66:fa:f4:2d:3d:
92:35:ba:86:78:b6:93:35:07:32:3d:7f:20:da:df:
01:81:13:62:a0:28:45:89:f7:eb:f2:aa:cf:96:92:
bd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F7:0C:ED:61:70:C9:53:29:E4:A1:95:74:B9:81:59:D9:A4:16:DC
X509v3 Authority Key Identifier:
keyid:3E:16:30:9D:25:D1:3C:E5:C7:96:A5:A1:74:E4:2C:3C:D9:BC:B5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4c:c1:a7:63:25:14:93:bc:93:fc:33:d9:db:87:ea:82:70:
fc:6e:b3:54:d5:14:db:25:80:b6:dd:5b:7b:1d:54:0e:5a:6f:
bc:3c:3b:d0:ae:07:7f:7d:62:c9:67:6f:b2:28:bd:15:13:5e:
dd:4a:59:05:5d:56:8f:8c:19:b1:5b:ff:99:cd:54:49:b5:4b:
64:27:f3:53:32:e9:ad:09:22:03:c9:ad:2f:03:89:76:0f:4a:
f6:e4:73:64:94:14:79:6a:b3:4a:b1:b1:17:65:24:e2:c7:cf:
43:6d:84:60:37:8c:6c:ee:a4:c5:2d:cb:f0:40:d1:75:2e:e5:
a3:a2:bf:0e:74:79:34:4e:7a:1b:29:97:0b:fe:f6:12:bd:fc:
cb:dc:96:58:11:6f:3f:d1:c4:92:5e:3b:6e:70:95:9b:42:73:
aa:8d:84:a4:6b:56:b8:2c:03:73:23:8d:56:4c:3c:c8:31:cc:
90:19:d5:b6:1a:e3:be:7b:27:b4:79:7b:5d:be:13:61:9d:a2:
82:c7:9d:51:7a:8a:c8:9e:fd:40:51:75:9e:1d:9a:2e:f6:f3:
fb:16:84:26:d6:15:e2:de:bc:64:8c:fa:1d:20:ac:9e:fc:d8:
2f:1e:1a:91:19:c1:ec:69:6b:90:25:7a:48:f0:68:79:00:76:
69:1a:4b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:10:10 2026 by rpki-client