Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File: PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier: orAKGlpyMOte1AJ6TrE0nilwpSC5hJ+tRfh6EIxdsAg=
Subject key identifier: 43:1A:BE:7D:DF:3E:31:F1:AB:16:3F:C2:CA:5C:91:70:2D:4B:3C:FB
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial: 019D382E02B1D49254F00EA386FEEBE67C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number: 1086
Signing time: Sun 29 Mar 2026 06:00:32 +0000
Manifest this update: Sun 29 Mar 2026 06:00:32 +0000
Manifest next update: Mon 30 Mar 2026 06:00:32 +0000
Files and hashes: 1: 8kiAQtkav2NHfFCJtiBA0ERhqIA.roa (hash: F/EijD7R25vjZwA9wYF9LplNamhupuIHanpPILz4ls0=)
2: M_79XQ2SXAKWIFy3HNmBFX2YRgI.roa (hash: PQS0FU2tcc2qRmlqMUo4a/MCLdHlPpwQ5M9eqNDwavA=)
3: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: ffBC648rtMKW9Mg8TOAOkRNYeOSaVKau+Vj2BRrj1B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:02:b1:d4:92:54:f0:0e:a3:86:fe:eb:e6:7c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Validity
Not Before: Mar 29 06:00:32 2026 GMT
Not After : Mar 30 06:00:32 2026 GMT
Subject: CN=431abe7ddf3e31f1ab163fc2ca5c91702d4b3cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:eb:9b:fd:8c:04:f1:da:f1:5f:3b:b2:83:
4f:6e:9c:94:96:ad:27:91:ab:e9:91:13:97:f7:44:
2f:b3:37:46:1c:6a:ae:2f:a8:70:1f:ca:0c:02:03:
08:66:bc:9c:c0:e9:f8:93:bf:49:2d:a7:0a:ca:28:
cc:ac:f3:33:21:9f:7f:19:44:d8:a5:74:0f:3c:eb:
65:0b:7e:1b:b1:52:9d:6b:18:5f:f5:6a:bd:14:97:
69:c4:73:4e:b9:c0:5e:2f:81:84:c2:70:a3:d8:3a:
6e:83:50:97:3e:e1:b5:3a:8a:19:18:fc:12:23:06:
9e:ae:55:a2:cf:b2:6d:6b:cc:45:17:7b:bd:ce:12:
ba:ed:be:2a:1f:26:fc:45:0c:70:e2:64:95:0e:e8:
37:35:c8:bc:32:78:0a:0c:a5:fb:a2:85:ab:f6:83:
5c:7d:63:30:a7:9e:a6:73:32:4a:05:ea:a8:69:01:
a4:d3:90:e8:54:dd:cc:9c:88:e9:24:cd:0f:86:19:
62:f7:ec:b9:d3:c7:dd:1c:a1:d4:73:c3:c0:db:af:
5f:9e:be:1a:60:a6:ee:18:d2:7e:79:dc:d1:82:7c:
7f:58:3c:c4:ae:f6:e0:61:59:34:69:d8:37:4d:3d:
cb:33:ac:f7:1d:97:f1:0c:ff:9a:0b:0f:23:41:be:
32:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1A:BE:7D:DF:3E:31:F1:AB:16:3F:C2:CA:5C:91:70:2D:4B:3C:FB
X509v3 Authority Key Identifier:
keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0b:4f:5e:32:da:46:3d:d8:fb:f3:30:e0:48:a8:75:b8:dc:
a2:e5:5e:ba:f2:c3:5a:d8:af:7d:5f:b3:63:80:f2:bf:25:86:
21:03:0e:80:a5:5e:a5:81:09:7a:30:33:78:93:8b:19:36:40:
54:00:84:14:44:44:0a:fe:76:4e:5a:69:15:0d:92:d0:e9:e9:
2b:ed:4c:d4:73:ce:1b:5c:05:a4:a8:cc:35:dd:64:db:00:f6:
a0:00:79:f5:c5:64:23:b1:b5:57:bd:8f:1c:69:71:88:69:a3:
f3:5a:69:bb:8f:b3:45:56:34:ca:59:54:d2:f6:04:42:b5:df:
50:57:57:1a:72:56:11:10:a1:57:39:5c:50:1a:96:3e:fb:fd:
08:c7:23:4a:84:b0:4a:b6:45:92:9c:ce:f1:b8:a2:02:4e:4f:
1a:76:93:cb:54:c9:80:4b:a6:fd:e7:4f:a7:74:0f:0b:9c:2b:
27:5f:85:5a:e6:fb:76:8c:b8:c8:85:d5:88:f2:dc:56:17:b5:
35:83:95:15:4f:71:28:91:e1:f6:a5:d9:12:b6:1c:1d:f1:56:
89:ee:c4:26:80:20:1b:0e:1f:cf:5d:b4:a5:c4:4f:c4:64:74:
9c:66:8c:db:f7:1d:37:96:a0:9b:c2:9c:06:82:32:a1:3a:9f:
72:96:ae:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:19 2026 by rpki-client