Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
File: PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json)
Hash identifier: 3LY+aIKUVUVRPSws3cnqrApuLBACH7bkBA4xa0HMgCw=
Subject key identifier: FA:86:8E:FB:2B:CC:76:CD:46:34:EC:AC:CD:BC:63:0A:03:0F:6B:4B
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Certificate issuer: /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial: 019D26CD7CF7004F278FC4E5A901842D7AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
Manifest number: 0CFF
Signing time: Wed 25 Mar 2026 21:01:34 +0000
Manifest this update: Wed 25 Mar 2026 21:01:34 +0000
Manifest next update: Thu 26 Mar 2026 21:01:34 +0000
Files and hashes: 1: FcgVbK89FeRjuVyoSQOfN4fWFvA.asa (hash: 22DkZ7JjoLv+BaBD/x8KpQJlMw9ISrjqJDXnZSuMJzI=)
2: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: WJ+CB3T/i5WsgheuRlL/WxcXKEiI0slRm7R5Q/eTYK0=)
3: Zn0XhdqYxe8o-jPEi-ZNfcsL5t0.roa (hash: rHtPfci/7WpFrwQjD0oZB4ESw2Ju9X+jUEYp4DLCYRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:7c:f7:00:4f:27:8f:c4:e5:a9:01:84:2d:7a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Validity
Not Before: Mar 25 21:01:34 2026 GMT
Not After : Mar 26 21:01:34 2026 GMT
Subject: CN=fa868efb2bcc76cd4634ecaccdbc630a030f6b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:f5:3c:f3:b1:70:e6:90:04:35:60:b6:9e:
f1:47:74:21:98:29:cf:76:76:76:8a:7c:c1:6f:dd:
70:1c:09:2e:31:5b:74:f8:3c:d5:4e:d3:80:ed:c0:
52:3f:98:cc:71:d3:d6:ff:25:e6:bf:2a:87:c3:94:
01:56:1b:46:26:c1:a0:55:d7:47:83:ba:1d:5e:6e:
44:7e:97:e2:35:5f:24:28:61:03:20:2e:f3:48:a7:
42:99:0e:e6:b8:3f:6e:62:94:68:11:8c:f0:cf:9a:
14:d0:d6:3e:82:76:60:ea:2c:6d:ec:cb:9d:dd:67:
d1:5b:ca:9c:a2:0b:93:15:86:e9:5f:bf:b4:90:66:
ce:c9:89:25:08:42:38:6c:53:81:da:af:5b:b8:cb:
91:83:3a:85:a1:c6:8f:4c:e8:6f:6b:94:a7:c0:02:
cb:49:b6:5f:20:67:bd:a6:fe:89:b9:37:b3:0c:45:
31:da:19:52:60:65:5b:d5:0a:59:4f:72:26:87:d4:
64:80:47:66:d4:e3:22:34:4a:77:cd:a8:17:cb:de:
a0:c5:8f:cd:2a:be:93:de:dc:92:02:2b:0b:1d:34:
bb:b1:9b:4f:0a:04:02:01:46:09:87:83:93:b3:e0:
c6:da:78:13:c6:4a:99:3f:f4:8a:5a:5c:47:73:70:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:86:8E:FB:2B:CC:76:CD:46:34:EC:AC:CD:BC:63:0A:03:0F:6B:4B
X509v3 Authority Key Identifier:
keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0b:6d:71:9e:75:7e:78:2a:1e:bb:ba:fb:68:3d:b5:c7:27:
5e:a7:21:52:05:d8:16:4b:bf:bc:7a:28:c7:e3:13:18:8b:8e:
1a:6e:b7:f9:d7:db:18:bf:b7:c1:3b:a3:75:d8:4a:24:3d:f7:
64:ff:94:d1:9d:8e:a9:2b:b1:e0:9d:0f:2b:57:8c:3c:5a:d2:
77:b4:8c:c6:85:03:c5:e7:03:5c:93:cf:21:ad:42:a8:ce:c2:
da:6f:4c:f8:9e:25:1f:83:32:6b:e2:c4:20:25:fd:1c:1c:5b:
b5:a0:d7:60:22:d1:6e:2f:4e:dc:fa:ba:30:bf:8f:03:bf:c4:
65:bb:3d:a9:9d:d5:f2:60:f8:87:85:e5:59:cc:63:01:c6:26:
02:74:bc:f8:a6:24:b0:4b:d3:7a:26:f0:1c:a6:e8:83:26:7d:
9d:13:70:e8:12:0a:e7:2a:52:cb:22:68:03:f9:24:ae:74:ec:
46:74:d8:81:86:dd:83:07:9f:9d:38:ca:8d:f8:a6:37:cc:31:
d3:3c:91:f7:51:29:1c:c0:85:95:33:4d:5d:86:97:0c:f7:fc:
94:19:6a:0c:c4:86:fc:3b:ca:8f:7e:0f:3b:5f:9e:e1:dc:4e:
34:ab:2a:f0:2d:1c:fe:06:f4:ad:23:ad:a2:5b:f9:58:d7:74:
21:60:33:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:35 2026 by rpki-client