Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
File: PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json)
Hash identifier: 5xPBRxk9uorpi9UEQuiu2LY1ZCtK4vSBTq2FuqAsMSQ=
Subject key identifier: 0C:17:E4:41:79:A4:5A:2E:1A:33:9C:20:86:03:59:50:30:0C:35:DA
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Certificate issuer: /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial: 019CF496D7F4699F7F978DFE1C36461F833C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
Manifest number: 0CE5
Signing time: Mon 16 Mar 2026 03:00:52 +0000
Manifest this update: Mon 16 Mar 2026 03:00:52 +0000
Manifest next update: Tue 17 Mar 2026 03:00:52 +0000
Files and hashes: 1: FcgVbK89FeRjuVyoSQOfN4fWFvA.asa (hash: 22DkZ7JjoLv+BaBD/x8KpQJlMw9ISrjqJDXnZSuMJzI=)
2: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: OkA2q1BqcmSV0xKC+ZjHIbLcPGEfAP+8An0pUQztCHU=)
3: Zn0XhdqYxe8o-jPEi-ZNfcsL5t0.roa (hash: rHtPfci/7WpFrwQjD0oZB4ESw2Ju9X+jUEYp4DLCYRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f4:96:d7:f4:69:9f:7f:97:8d:fe:1c:36:46:1f:83:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Validity
Not Before: Mar 16 03:00:52 2026 GMT
Not After : Mar 17 03:00:52 2026 GMT
Subject: CN=0c17e44179a45a2e1a339c2086035950300c35da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a6:a4:4c:1e:1f:dc:8a:11:51:d7:96:af:51:
af:cf:27:91:b6:fb:85:35:56:29:7a:62:0c:5d:b8:
57:b3:69:11:fd:6d:86:3b:e6:82:21:bf:d8:b1:e0:
9c:69:af:d3:a8:14:e8:5c:5f:ff:28:79:7d:d1:cf:
31:79:11:d6:10:cb:39:14:db:55:3f:31:20:76:ee:
7f:c2:3e:99:12:3c:75:9a:f0:ee:7f:54:b5:9b:86:
d7:cc:11:e7:66:9a:c7:8c:5d:88:1e:0b:b4:be:58:
2a:fb:ec:13:9f:8c:e2:9a:58:0e:65:4d:2b:dc:e7:
99:33:3b:a5:1c:e3:af:6f:e0:d7:88:86:cc:4d:ad:
73:85:c4:a9:48:44:35:5f:01:0e:f9:6a:73:cf:6f:
bd:0e:e0:d0:73:c8:7b:72:2a:42:9d:a5:61:7a:e0:
31:f9:f6:07:55:1a:6e:c1:92:01:3f:2b:2b:23:4e:
de:8a:79:60:4f:57:7f:8b:b8:ec:db:06:89:d6:5c:
c2:24:98:a5:a5:f1:bb:8a:3e:2b:cb:12:f1:ce:ea:
fd:09:46:c5:16:e5:b5:e7:d6:c9:0d:5d:e5:cc:b4:
6d:49:d6:37:bc:69:62:d1:7a:fd:e4:f4:80:c1:51:
78:45:c7:30:46:42:38:d7:5a:45:6f:02:73:a0:92:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:17:E4:41:79:A4:5A:2E:1A:33:9C:20:86:03:59:50:30:0C:35:DA
X509v3 Authority Key Identifier:
keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f3:3c:c8:ed:34:af:48:ef:34:ab:99:cb:e3:c8:25:66:50:
4a:3a:3d:ca:be:ec:43:ef:22:a3:e3:4d:98:6c:d5:fb:23:f9:
6a:80:0c:85:7f:f6:3a:ea:9f:71:8d:a9:55:1d:c8:f7:8b:9d:
5d:ad:f1:0c:59:50:25:c9:67:c0:ae:c2:07:0b:b6:99:99:fa:
39:96:6c:cb:3e:78:63:f5:5c:c8:e7:eb:91:6f:07:84:85:2a:
ae:e5:81:c0:6c:fa:f7:37:65:3e:fe:54:cc:7e:45:d4:03:9a:
72:a6:5a:6e:4c:1e:a3:51:99:8a:49:d7:04:1d:ab:7a:a3:1b:
82:b7:50:ca:5a:d2:6c:30:d2:4e:37:49:39:2a:6f:23:51:5c:
e3:39:28:9a:37:b1:dd:d7:a1:b7:45:3e:12:14:d0:89:d3:f2:
17:ff:50:9d:39:28:13:fd:60:a5:1b:1b:af:c9:b9:07:89:78:
69:90:f8:b3:20:5f:60:d5:4e:1c:db:5d:41:0e:95:41:a1:f2:
09:70:6c:5b:35:46:7a:c6:fb:e9:74:2f:fc:8d:b8:bf:a0:cb:
6b:41:44:ce:a5:ee:5e:6f:72:4a:80:bf:3b:07:99:50:1a:60:
16:fa:4c:bc:22:21:37:d1:59:b0:5c:09:c9:b8:a1:78:a2:e5:
cf:ef:3e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:15:04 2026 by rpki-client