Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
File: PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft (raw, json)
Hash identifier: pRROF+oXBs5R6GQzEwqikmLz+p/pojzYkCyTFx/aIGc=
Subject key identifier: 57:08:87:E4:08:A5:34:41:58:62:BB:E4:5E:0A:30:01:80:5C:49:AB
Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Certificate serial: 019D38D38F3DC63E4C77D8DE8BC73B30B976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:21 +0000
Manifest this update: Sun 29 Mar 2026 09:01:21 +0000
Manifest next update: Mon 30 Mar 2026 09:01:21 +0000
Files and hashes: 1: PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl (hash: TulgPpQWV2PDSU2b1kLrIeL6ab2+O5Fo4wWTU6n5uCU=)
2: TAErp0MM5r1w7tsbSJAC4z0-eRw.roa (hash: 5ACRC91wVrH0LaYTctg5PRrelZg/lYtE/E2ynyD9EV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:8f:3d:c6:3e:4c:77:d8:de:8b:c7:3b:30:b9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Validity
Not Before: Mar 29 09:01:21 2026 GMT
Not After : Mar 30 09:01:21 2026 GMT
Subject: CN=570887e408a534415862bbe45e0a3001805c49ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:11:38:6d:1c:7f:ed:7d:d3:70:79:d3:0e:
e9:70:d6:f5:3f:56:e3:1d:31:c3:c4:0f:52:8a:05:
fe:b5:a2:74:c4:d4:7f:fb:a2:fb:4a:d7:e6:7e:25:
b7:e5:13:80:73:30:7c:65:41:74:5d:c8:39:74:20:
ec:9f:71:7d:f9:8c:39:f3:1f:07:34:34:cc:e0:9f:
64:78:27:f5:a8:2c:01:90:d5:30:68:a2:f1:db:36:
13:47:c9:2c:58:10:e6:36:12:e7:84:6f:75:4d:46:
67:0a:06:08:31:43:e5:91:bc:0e:40:c6:5d:cc:9d:
2c:91:5d:7d:d5:9f:56:2a:35:6d:9d:b1:42:5c:de:
bf:67:cd:e8:1f:ac:71:09:4b:aa:b5:ab:ac:11:14:
bc:30:89:6d:8e:d3:53:74:dd:24:5e:e0:17:85:b9:
80:94:a9:2a:28:17:a0:24:bc:65:e8:e6:04:d4:0e:
13:05:62:68:8c:61:e6:8d:25:aa:03:ee:75:59:9d:
78:70:d5:55:38:1d:2b:a3:6b:0a:09:b7:80:47:f3:
3d:8c:f1:49:cb:7d:f6:26:41:0c:7a:96:53:cc:d4:
b0:a0:28:8c:8f:21:1d:22:13:c6:e5:d8:c2:53:52:
41:a3:f2:df:bf:f8:7b:16:bd:86:4f:f0:06:fc:0a:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:08:87:E4:08:A5:34:41:58:62:BB:E4:5E:0A:30:01:80:5C:49:AB
X509v3 Authority Key Identifier:
keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:05:0c:c2:ce:20:6d:72:6b:3d:e0:46:b7:ea:88:54:ae:a4:
e3:57:9c:34:77:5f:ad:e6:c7:14:22:de:e8:38:58:a3:30:19:
a1:2b:7f:dc:65:e4:6f:26:62:77:3d:40:4f:1f:e8:19:0e:15:
5c:0a:c2:77:18:c8:b8:19:15:05:df:ed:70:29:9e:fa:f6:ab:
74:d4:b2:20:2e:59:ba:50:08:a0:f0:1f:5f:9b:96:35:31:37:
60:07:da:ea:46:e3:9f:ce:b0:60:8f:67:33:97:ae:a1:8c:b2:
93:e7:4a:ad:75:34:f8:ad:da:fc:3c:65:14:1b:61:b6:27:ae:
d1:4d:a5:9d:93:66:ac:d0:18:bc:3b:12:5b:4d:3f:84:93:d3:
cf:3a:44:80:d4:38:b4:bb:31:ba:b1:e6:a4:f4:1a:a7:8c:f8:
2a:3f:b6:b8:c9:9c:c0:d8:59:ff:09:0d:5c:f6:4d:0b:f0:ee:
93:5c:ef:b0:cc:dd:b4:47:4b:4c:c6:52:ec:fe:81:29:ea:53:
b4:fd:ad:64:bd:0d:30:39:e2:01:be:a6:2f:6e:91:c7:fd:80:
1d:f7:95:c4:71:03:59:a7:25:d3:ed:b8:47:06:75:49:67:3b:
5f:eb:57:fa:17:ef:45:42:4e:2a:73:09:15:1e:66:80:98:78:
9c:cf:4f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:52 2026 by rpki-client