Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
File: PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json)
Hash identifier: dEZOBfE5t/QWNzLyOC5JZiHy0ZAs4mmyyYO36iAbjSo=
Subject key identifier: 44:B7:9E:3D:EC:0F:2A:20:8E:CF:DE:17:A4:BE:DD:50:B3:4E:95:D1
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Certificate issuer: /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial: 019EFC15E1B9B2930F075594164BF6E1F58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
Manifest number: 0DF2
Signing time: Thu 25 Jun 2026 00:02:32 +0000
Manifest this update: Thu 25 Jun 2026 00:02:32 +0000
Manifest next update: Fri 26 Jun 2026 00:02:32 +0000
Files and hashes: 1: FcgVbK89FeRjuVyoSQOfN4fWFvA.asa (hash: 22DkZ7JjoLv+BaBD/x8KpQJlMw9ISrjqJDXnZSuMJzI=)
2: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: 11FOjJ4c1RDmfEA+Gvx1XUu/eIHY6411t48ETSXsMoA=)
3: Zn0XhdqYxe8o-jPEi-ZNfcsL5t0.roa (hash: rHtPfci/7WpFrwQjD0oZB4ESw2Ju9X+jUEYp4DLCYRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:15:e1:b9:b2:93:0f:07:55:94:16:4b:f6:e1:f5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Validity
Not Before: Jun 25 00:02:32 2026 GMT
Not After : Jun 26 00:02:32 2026 GMT
Subject: CN=44b79e3dec0f2a208ecfde17a4bedd50b34e95d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:8a:46:e7:0b:41:31:c8:fc:de:0a:ab:27:
24:8a:0b:36:f8:8e:8e:da:6a:39:6d:0e:96:79:9d:
28:06:2c:2e:5c:10:73:cf:a5:03:71:e1:88:c2:44:
18:52:c7:54:75:ce:d6:a3:6d:f2:09:2d:0d:3a:47:
d5:82:d8:16:5e:6b:71:9a:d4:eb:54:70:e6:37:03:
5a:fd:e0:7e:a8:4a:1c:ff:25:4a:b6:dd:94:d9:b0:
f3:8f:8a:7c:cf:52:84:dd:db:f7:b3:62:b3:34:65:
84:0b:44:bc:a3:be:4e:cb:a2:01:55:d3:b3:50:7d:
ab:df:71:2c:e9:cc:fb:38:91:ab:bf:ad:e7:66:ed:
c3:0d:93:4e:8c:e7:ab:23:df:fc:5f:f5:c2:88:ef:
13:49:2e:2e:4f:55:b9:49:f8:6a:7d:4d:0a:43:f6:
03:2f:c4:07:70:a7:ec:eb:6b:13:b8:f4:ba:26:c3:
9e:c7:b8:a9:21:8e:92:12:55:f2:73:d2:de:49:f5:
87:9c:01:4b:bd:4e:fc:5c:d2:9c:29:e5:f9:75:54:
9a:75:df:d3:ec:31:ad:88:ba:22:24:6f:91:92:11:
35:7c:5f:3d:3d:5e:82:88:b9:0c:45:b1:0f:52:ee:
88:8e:1d:9e:32:a2:ae:ae:76:e8:11:d0:88:b3:86:
87:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B7:9E:3D:EC:0F:2A:20:8E:CF:DE:17:A4:BE:DD:50:B3:4E:95:D1
X509v3 Authority Key Identifier:
keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ca:58:7a:e9:55:5b:15:a3:5a:6b:5a:26:91:ea:10:01:4e:
24:f5:91:07:27:b8:de:99:9b:f6:6f:77:42:36:93:cb:69:a2:
38:a7:8e:63:99:8d:22:3e:94:b6:d5:cc:4d:db:18:ce:fb:ad:
3b:1f:7d:ee:c3:91:7e:40:e4:9d:4a:90:79:2d:05:47:ff:60:
44:21:3f:7a:ae:d8:37:52:63:e9:68:aa:1d:f5:1e:52:bd:0b:
c9:21:59:b9:a6:97:27:fd:b5:59:7d:ad:b2:16:54:35:b2:9c:
32:d6:ab:6a:b5:c7:c0:bc:2c:51:bf:6e:26:13:46:82:86:46:
df:69:2d:e7:db:e0:18:f9:d9:02:9d:9f:88:1b:02:a0:42:52:
f8:10:eb:39:b3:5f:bc:82:cc:35:31:81:ad:a3:28:e0:49:08:
8a:69:9c:48:34:26:2c:be:79:de:90:2e:38:a4:c2:b3:c0:54:
0f:4d:b8:7a:af:10:1e:4c:c1:36:13:66:bc:d1:2f:a0:93:27:
a1:e3:64:35:fc:9d:6a:d3:28:00:53:1e:c8:d0:f6:b3:46:f9:
fe:f7:e0:e2:2f:2e:2f:c6:6a:e9:58:ac:63:3f:6c:4f:97:1f:
3f:da:c6:a1:65:48:09:08:fa:87:ae:ec:58:c6:d9:1a:09:23:
2a:f1:6a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:27:57 2026 by rpki-client