Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
File: PheDehDbHT3XPiDfC0eeQNsiNv4.mft (raw, json)
Hash identifier: M3bd9SjnoNp9GCu0mUWfL4iKsxSeGsReWDV8qRy4KkE=
Subject key identifier: D0:DC:15:1C:9D:95:07:8B:FE:F3:42:96:03:E2:55:4D:5A:0A:3E:DD
Authority key identifier: 3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
Certificate issuer: /CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Certificate serial: 019D382E4D164D8E17EAC869E50040934EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
Manifest number: 10A4
Signing time: Sun 29 Mar 2026 06:00:51 +0000
Manifest this update: Sun 29 Mar 2026 06:00:51 +0000
Manifest next update: Mon 30 Mar 2026 06:00:51 +0000
Files and hashes: 1: J1ZNlvpAp8dQYGMOD7UX0oUYBcI.roa (hash: EeG9YUdg/cA88sV9yS1ysCVKGj6cTXLlHbFYfJXwIrI=)
2: PheDehDbHT3XPiDfC0eeQNsiNv4.crl (hash: w10YSCbI7zw/SXigBrxIkWarzkN86wicFnToQhre7fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:4d:16:4d:8e:17:ea:c8:69:e5:00:40:93:4e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Validity
Not Before: Mar 29 06:00:51 2026 GMT
Not After : Mar 30 06:00:51 2026 GMT
Subject: CN=d0dc151c9d95078bfef3429603e2554d5a0a3edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:1f:a4:c9:c6:a7:c9:6b:a7:a2:8f:81:e0:
b3:ad:30:15:d9:93:f9:ab:d5:b1:c5:29:13:64:c3:
73:53:5c:ff:c1:c2:62:e9:fc:17:f5:be:2a:d3:c2:
64:d2:9c:6b:36:59:cc:d0:b9:c7:16:f8:f7:38:92:
2e:a2:8a:e0:fe:0d:4b:ee:de:c3:9e:65:44:c3:1d:
dc:54:76:8c:9f:a4:0b:ff:0e:d4:d1:81:ab:7d:5e:
df:53:3c:85:9d:9d:11:24:d9:75:c9:73:b9:5c:cd:
86:5d:18:0e:40:ca:27:b0:bd:cb:47:8b:bc:95:e3:
bc:b3:50:28:27:13:55:4b:fb:1e:c7:b8:a1:42:d2:
e9:11:33:f1:0e:26:3e:ef:ea:94:87:69:80:56:bf:
f4:2a:d7:38:e9:9e:a7:c1:67:99:6c:e8:a6:62:92:
a7:93:d4:d7:22:ff:a4:32:0e:01:10:bc:40:11:dd:
cc:de:68:02:c8:79:ba:1b:90:ce:2e:fc:4e:f4:d9:
62:46:bc:9a:c6:de:1e:a5:e2:21:f8:bc:d3:65:a8:
e0:52:d6:60:a8:72:2b:d5:de:38:ef:6c:73:12:26:
f3:3c:90:c6:7a:f3:a5:9a:f9:e2:47:a7:2c:a6:bf:
a5:33:01:e3:ef:17:58:a5:3f:70:93:8c:f6:68:32:
ad:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DC:15:1C:9D:95:07:8B:FE:F3:42:96:03:E2:55:4D:5A:0A:3E:DD
X509v3 Authority Key Identifier:
keyid:3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:97:13:5d:3c:63:6b:0d:02:df:6b:7d:66:f2:80:4f:e8:1f:
0b:9b:83:88:7c:50:30:96:66:9f:f6:b9:8b:80:ae:13:ee:f7:
63:bf:f6:37:e2:5b:2c:f1:07:63:86:a6:61:72:e3:58:a2:94:
44:80:3f:a9:67:c1:15:b3:f9:5b:ff:21:07:b5:7b:7d:4a:a7:
24:48:1c:05:e7:47:9b:5d:69:89:0c:c2:44:8e:5e:ea:88:92:
38:08:73:6b:99:f4:ca:66:71:de:72:f6:7b:34:6f:4c:39:9c:
c9:e2:cc:23:10:0a:1e:c4:26:51:fd:56:f1:48:aa:02:cf:33:
94:85:84:1a:90:d2:5f:d0:94:22:92:2d:93:60:a4:16:7d:88:
6f:8f:e5:12:41:87:e0:fe:a0:0b:32:75:81:cc:00:eb:59:51:
51:25:d5:65:13:c1:40:ab:8d:94:51:79:f5:c1:7a:fc:8c:4d:
67:f2:71:83:d5:63:ef:1d:f3:1c:01:16:0e:cb:5d:79:93:71:
47:c0:25:e3:4f:d4:9c:6b:2d:9a:53:a3:e0:85:e3:ca:8d:53:
97:31:2b:bf:61:5d:7f:17:4a:cb:9f:9e:bb:79:46:36:5a:f0:
47:66:e2:75:87:6f:f3:fa:6b:7c:5b:fc:b1:ae:36:62:6f:7b:
25:51:f8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:24:59 2026 by rpki-client