Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
File: PhYwnSXRPOXHlqWhdOQsPNm8tes.mft (raw, json)
Hash identifier: zwEUJji6xzvhgLFq+cjWRtQGbZPaif3VeJQYxF9iA5c=
Subject key identifier: 0E:59:C9:03:97:CE:1C:9B:98:DD:60:D1:EF:6B:48:FD:2F:D9:A5:F2
Authority key identifier: 3E:16:30:9D:25:D1:3C:E5:C7:96:A5:A1:74:E4:2C:3C:D9:BC:B5:EB
Certificate issuer: /CN=3e16309d25d13ce5c796a5a174e42c3cd9bcb5eb
Certificate serial: 019DDDD66814E3A12CF5CD6F11FC70FF3466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
Manifest number: C3
Signing time: Thu 30 Apr 2026 10:01:49 +0000
Manifest this update: Thu 30 Apr 2026 10:01:49 +0000
Manifest next update: Fri 01 May 2026 10:01:49 +0000
Files and hashes: 1: PhYwnSXRPOXHlqWhdOQsPNm8tes.crl (hash: h2KKQV3N5KdqyLTHvzAqDF4/hqltASu48OPbzAXdJMU=)
2: RfNBsHj8QcqkAL-Ye4KgxIRMAME.roa (hash: a3yGPg9Ldh+EVAvxaPgx65P1BWMxHy09aUciESjCmVY=)
3: UnaF_eoa9ROObjqYeTBIXsHw3Nw.asa (hash: oZG+a5/aGxOGxHi9FsasMcCsAqmNUBRZ44VQS9ERQa8=)
4: VFVPR_IRVw5BlqiNs1YWSmHiqsE.roa (hash: V8+sjv3juPFIm0G9xudc5DKK5HaQCguQbshspKidKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:d6:68:14:e3:a1:2c:f5:cd:6f:11:fc:70:ff:34:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e16309d25d13ce5c796a5a174e42c3cd9bcb5eb
Validity
Not Before: Apr 30 10:01:49 2026 GMT
Not After : May 1 10:01:49 2026 GMT
Subject: CN=0e59c90397ce1c9b98dd60d1ef6b48fd2fd9a5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:91:61:be:d5:fc:09:64:13:91:41:67:7a:
66:6c:35:0b:87:b4:78:66:0a:b1:a1:31:c6:ad:8c:
51:0d:73:ad:57:95:35:9d:58:33:49:e9:26:4a:7c:
89:90:14:c5:bb:2b:76:27:98:76:d3:a2:14:b8:00:
11:b3:0d:f6:f2:0a:48:d3:dd:60:9f:be:7f:bd:3c:
2d:29:55:b3:02:74:7f:69:92:8b:03:de:65:df:e2:
62:95:49:97:73:67:21:aa:ed:3d:a7:02:c3:f9:bc:
62:6b:9e:f3:d5:1a:c6:64:8e:1c:4a:7f:ec:fc:72:
e8:76:33:27:fa:b6:75:89:62:f2:df:3c:92:81:cf:
3f:63:b4:8b:d5:fd:62:c5:bf:17:1e:4f:9f:6c:27:
62:c5:22:10:42:12:a4:3d:99:9a:60:53:64:14:cc:
23:a7:6a:57:75:5c:a2:24:65:9f:08:08:b0:17:a0:
19:cb:3d:7e:8a:ea:cb:f1:39:f8:6c:74:79:99:6d:
86:11:bf:d7:77:f9:48:52:03:d1:3f:68:f0:91:4d:
60:70:65:9f:8e:73:53:ea:62:2b:16:53:79:52:c9:
59:e1:fc:f7:76:87:e5:62:e7:6f:bb:9d:cc:a9:0e:
ad:61:41:7e:00:c5:4d:d2:cd:b0:b7:1e:bb:14:29:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:59:C9:03:97:CE:1C:9B:98:DD:60:D1:EF:6B:48:FD:2F:D9:A5:F2
X509v3 Authority Key Identifier:
keyid:3E:16:30:9D:25:D1:3C:E5:C7:96:A5:A1:74:E4:2C:3C:D9:BC:B5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1e:9e:3a:b6:83:f3:5d:c8:90:59:49:d2:e1:d4:76:6d:e3:
91:e1:96:a8:0f:66:ea:17:30:7e:63:12:df:6a:96:3c:ef:7a:
b4:89:c6:69:78:5a:a6:a6:c2:91:a5:1b:d2:8a:11:2d:5e:66:
7a:d7:53:1d:3d:53:67:3b:15:e0:d5:7e:d5:a2:46:99:0a:72:
5f:82:70:d7:c8:73:67:da:2e:95:74:fe:2d:58:b0:db:3a:0d:
a7:02:38:64:53:1f:2f:35:73:c5:48:12:25:fe:04:17:96:7d:
74:cf:a0:d7:6c:84:03:fc:91:b0:cb:83:32:39:b9:19:e7:2c:
9c:85:ed:bb:93:1a:fc:1c:8a:68:3c:0e:3d:2f:18:a9:b1:d9:
de:c7:1f:56:9e:bb:e7:34:5f:c3:8b:9c:15:de:d7:6f:f1:4e:
8c:6d:cb:19:1a:eb:eb:a4:1a:0d:df:b3:fb:a5:b7:ad:9c:71:
4e:88:67:00:a7:57:a9:5f:51:ad:98:01:8c:c1:2b:40:67:eb:
84:e4:e0:96:96:ea:6e:47:e8:e3:51:08:ed:05:2b:a3:49:23:
50:ce:4d:2d:b0:cd:60:76:41:9f:fe:e9:9d:48:86:18:07:76:
d2:cd:58:d4:f7:10:f1:69:b3:6e:91:5e:f0:63:1d:52:cc:cc:
4e:ab:5b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:51:41 2026 by rpki-client