Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File: PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier: OcXARAueAolZQLOi6Rbb4Z8+4BqLDN/UNcWtvapnAUI=
Subject key identifier: 58:4A:E9:33:11:AE:EB:7B:07:CE:3A:19:79:AA:00:89:49:4F:72:11
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial: 019F152F75EE1C860FEEC17754629B88D66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number: 117D
Signing time: Mon 29 Jun 2026 21:00:59 +0000
Manifest this update: Mon 29 Jun 2026 21:00:59 +0000
Manifest next update: Tue 30 Jun 2026 21:00:59 +0000
Files and hashes: 1: 8kiAQtkav2NHfFCJtiBA0ERhqIA.roa (hash: F/EijD7R25vjZwA9wYF9LplNamhupuIHanpPILz4ls0=)
2: M_79XQ2SXAKWIFy3HNmBFX2YRgI.roa (hash: PQS0FU2tcc2qRmlqMUo4a/MCLdHlPpwQ5M9eqNDwavA=)
3: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: vi2AUPqMtb2mtra3gg7GUoAsMbeD+eyy6kSaSA7bg4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:2f:75:ee:1c:86:0f:ee:c1:77:54:62:9b:88:d6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Validity
Not Before: Jun 29 21:00:59 2026 GMT
Not After : Jun 30 21:00:59 2026 GMT
Subject: CN=584ae93311aeeb7b07ce3a1979aa0089494f7211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:d8:4d:ff:86:95:ea:60:67:a0:1e:72:98:
96:da:46:0f:9b:eb:a2:0c:14:a4:0b:a4:1a:8e:ab:
fa:07:d8:1a:4c:b3:85:40:5a:f9:3e:9c:ac:4b:8e:
ee:40:5a:e5:97:37:de:2a:04:de:f3:b8:9b:e6:ba:
56:ea:99:b0:93:7c:c6:6b:d9:f6:05:7a:cc:34:5c:
45:46:b1:05:16:77:33:74:b2:80:47:37:0b:1a:e2:
01:f4:66:84:ad:a8:e7:f0:e4:3e:5c:2b:69:1b:a4:
42:51:4f:92:ca:c1:6e:9e:f2:5d:6a:41:ee:37:ce:
0f:de:26:30:d8:bd:f9:75:f2:9e:d2:2c:c8:5b:25:
30:1b:a8:fc:20:d4:7c:ac:22:41:48:d5:af:7c:1f:
d8:c3:b3:be:fe:87:4b:c5:c2:bc:e3:af:e9:b6:13:
89:c8:8b:9b:47:3e:10:8d:c6:0a:2f:f2:5d:06:3a:
00:e1:13:52:e0:9b:fc:e0:08:66:46:ea:77:61:b0:
26:b0:7e:17:5b:5d:54:2b:0e:54:6a:be:c1:5e:41:
22:27:00:ab:5b:77:be:0e:70:fa:08:94:ad:02:eb:
ff:bf:cb:c1:00:c5:da:56:46:99:5e:05:40:ce:db:
91:85:7a:09:d8:aa:60:30:24:00:64:75:d3:f3:a7:
84:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4A:E9:33:11:AE:EB:7B:07:CE:3A:19:79:AA:00:89:49:4F:72:11
X509v3 Authority Key Identifier:
keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:90:65:a6:f0:e7:59:da:06:65:b5:3d:f2:d6:46:aa:00:f8:
7e:13:07:81:8a:75:f7:27:d0:94:49:df:fa:b3:0a:71:67:7c:
35:5d:81:c8:9b:1b:a0:43:46:b8:66:be:bc:94:c3:ff:e3:13:
a0:31:88:72:79:83:f3:eb:5f:51:f6:55:b6:10:40:0c:46:ce:
59:98:e8:4d:87:b6:20:6b:8f:c6:b3:c9:57:8a:ae:51:3f:58:
a9:e6:e1:f1:b5:aa:e7:9b:41:8e:84:15:d2:bf:c4:68:c6:1b:
e3:13:ff:96:54:a1:f2:66:3e:b8:bd:c6:ae:36:d5:89:d3:c9:
b5:74:17:c6:d2:30:1c:24:fa:c5:54:a6:4c:fd:66:20:8c:d3:
b3:c9:4f:95:f5:0f:67:1c:d9:bd:a8:f2:cf:27:97:d6:49:e5:
b7:c9:da:78:51:66:23:15:bf:92:a8:49:a5:a1:81:7f:a4:2e:
e6:b6:07:7b:bd:67:f0:7c:bb:91:f5:1e:4c:29:5c:83:e7:98:
6b:e6:02:70:9a:0e:4a:a0:ea:60:02:08:08:96:cd:42:0e:70:
c3:06:9f:7f:fd:11:b8:7e:5e:37:83:a7:3c:4a:a4:5e:7e:a2:
1c:24:af:fe:e3:42:d2:e9:db:ba:e3:2a:30:ac:ab:d8:96:2c:
34:0f:7e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 04:06:19 2026 by rpki-client