Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
File: PhYwnSXRPOXHlqWhdOQsPNm8tes.mft (raw, json)
Hash identifier: 6+7sYtiHSJD/S2e0FVkFuQCGs2WRpszqyTKfyxahlB0=
Subject key identifier: E2:78:3D:2F:DF:73:D0:8F:5B:07:7C:4A:71:DE:7A:FF:F0:F0:65:63
Authority key identifier: 3E:16:30:9D:25:D1:3C:E5:C7:96:A5:A1:74:E4:2C:3C:D9:BC:B5:EB
Certificate issuer: /CN=3e16309d25d13ce5c796a5a174e42c3cd9bcb5eb
Certificate serial: 019DA3E6EE48B98CCF636CF478932A58143B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
Manifest number: A5
Signing time: Sun 19 Apr 2026 04:01:53 +0000
Manifest this update: Sun 19 Apr 2026 04:01:53 +0000
Manifest next update: Mon 20 Apr 2026 04:01:53 +0000
Files and hashes: 1: PhYwnSXRPOXHlqWhdOQsPNm8tes.crl (hash: SNrvTCCY7lTfbMCJkqfLZTN6llb9wgD6wyKt5ZsZ0Lo=)
2: RfNBsHj8QcqkAL-Ye4KgxIRMAME.roa (hash: a3yGPg9Ldh+EVAvxaPgx65P1BWMxHy09aUciESjCmVY=)
3: UnaF_eoa9ROObjqYeTBIXsHw3Nw.asa (hash: oZG+a5/aGxOGxHi9FsasMcCsAqmNUBRZ44VQS9ERQa8=)
4: VFVPR_IRVw5BlqiNs1YWSmHiqsE.roa (hash: V8+sjv3juPFIm0G9xudc5DKK5HaQCguQbshspKidKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:ee:48:b9:8c:cf:63:6c:f4:78:93:2a:58:14:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e16309d25d13ce5c796a5a174e42c3cd9bcb5eb
Validity
Not Before: Apr 19 04:01:53 2026 GMT
Not After : Apr 20 04:01:53 2026 GMT
Subject: CN=e2783d2fdf73d08f5b077c4a71de7afff0f06563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:48:65:3c:89:9a:44:4a:66:d0:ec:00:b4:86:
b8:25:a7:db:b8:96:74:aa:85:b4:04:10:61:51:8c:
d8:4f:81:95:3d:75:cf:06:a4:86:90:bb:da:eb:a0:
49:92:ee:0b:5e:69:98:50:66:4e:e4:30:bb:a2:54:
90:8e:ce:c0:b4:61:94:7b:a5:17:d3:ac:12:e9:97:
43:be:a5:7b:ac:0e:d8:2f:08:23:34:ab:56:07:5d:
ec:48:dc:8e:80:6f:bb:f8:82:6a:c6:aa:46:d7:de:
f7:b6:32:3a:33:04:cb:8e:1d:ba:4e:b2:4e:33:73:
ba:b0:aa:fa:95:09:dd:e7:bf:8a:52:5a:75:f5:ac:
5a:59:c9:7b:2e:21:f1:13:d6:4c:c3:0b:f1:f2:af:
26:df:a3:8f:ec:3d:6d:0b:53:df:f8:7b:9c:10:d3:
bd:81:31:76:23:49:5c:a2:b4:01:56:16:a8:b1:43:
da:fd:24:e7:23:2c:35:76:a3:31:bf:b9:81:96:ef:
24:35:fd:82:c9:25:17:59:78:0f:f9:52:a8:5c:a8:
9c:25:b5:23:a8:75:70:6e:38:9f:b6:9d:1b:10:46:
61:ef:1e:08:df:6a:4d:6d:c3:f7:08:12:5b:b6:03:
a9:10:83:82:6b:a4:7b:65:2e:e5:9b:d7:a8:c6:24:
da:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:78:3D:2F:DF:73:D0:8F:5B:07:7C:4A:71:DE:7A:FF:F0:F0:65:63
X509v3 Authority Key Identifier:
keyid:3E:16:30:9D:25:D1:3C:E5:C7:96:A5:A1:74:E4:2C:3C:D9:BC:B5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:13:c3:7f:a3:18:2c:91:51:7a:11:b2:5b:d4:3f:b7:46:2a:
d7:a9:cf:02:4a:94:07:de:07:77:07:1c:0c:4c:d1:e3:a3:31:
65:fe:b1:06:e5:13:03:db:a6:43:1e:98:04:b6:52:9f:13:52:
92:60:56:60:cd:27:24:92:de:5f:fd:87:6d:20:93:f4:0e:8d:
33:e7:76:73:e4:43:cb:21:23:f3:6d:a6:d1:3b:51:b9:85:c4:
28:3b:b1:63:14:17:ff:35:16:01:19:d7:5c:88:ce:0c:a8:75:
01:3e:ef:a9:de:43:13:de:bd:51:be:19:52:a3:9d:17:2e:15:
6d:b0:a8:e9:5b:1d:81:b5:a7:59:ee:d1:72:74:e9:c8:f2:8f:
de:76:1a:c5:00:aa:e9:c0:8c:b3:68:ae:90:04:ed:de:51:6f:
5c:28:45:41:62:83:38:17:bd:87:92:31:46:b5:b9:22:67:16:
44:ae:43:51:a0:77:56:8f:bc:b0:14:c6:7f:a0:ec:c5:d3:af:
f6:5b:f8:32:4a:6f:35:fa:c5:7e:3e:ef:f0:64:f7:28:20:28:
9e:63:e3:70:fc:98:89:58:16:c7:89:7a:46:df:13:7a:81:58:
bf:75:28:e3:f2:a1:00:79:6a:fb:81:67:94:ff:9b:45:8f:56:
d2:a8:a4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:11 2026 by rpki-client