Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
File: PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft (raw, json)
Hash identifier: 8e3Ay7KEGV5Qb9tDowKBGC3NogjYWES5WOlMGmEeYOk=
Subject key identifier: 54:A7:23:12:CC:48:4D:46:A1:C3:57:9B:A0:7E:64:C4:6A:61:62:0C
Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Certificate serial: 019E1EA313DACC99A17F74DF8789A9C66D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 00:01:04 +0000
Manifest this update: Wed 13 May 2026 00:01:04 +0000
Manifest next update: Thu 14 May 2026 00:01:04 +0000
Files and hashes: 1: PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl (hash: ikTCB4jeat8uNa4V7cNv8ZSM0UDkVq9/SVRKRBZEZLI=)
2: TAErp0MM5r1w7tsbSJAC4z0-eRw.roa (hash: 5ACRC91wVrH0LaYTctg5PRrelZg/lYtE/E2ynyD9EV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:13:da:cc:99:a1:7f:74:df:87:89:a9:c6:6d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Validity
Not Before: May 13 00:01:04 2026 GMT
Not After : May 14 00:01:04 2026 GMT
Subject: CN=54a72312cc484d46a1c3579ba07e64c46a61620c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:05:f0:d6:3a:d2:55:0a:41:5f:0c:d8:1c:
4d:db:c6:34:d8:1c:f1:85:92:1b:b6:3c:c7:2a:ff:
70:1f:70:c6:79:dd:fb:81:f1:93:e0:fe:a9:ec:82:
e8:7d:ec:e4:c1:4c:2b:a8:e7:62:51:e0:ca:78:93:
75:1d:62:63:84:ae:4a:d9:26:7e:05:94:01:0b:7b:
60:1f:e2:6f:72:3c:87:bf:68:27:bf:6b:b1:b7:c5:
f9:b5:ab:44:85:9c:ce:34:59:1d:56:9f:fc:c2:f2:
4c:5d:46:77:a9:ee:dc:a4:2c:8f:de:d1:57:6b:e9:
02:13:8e:4d:2c:80:0d:48:75:1e:3f:e8:19:f7:db:
57:cf:20:55:a0:45:31:78:b9:52:62:c6:08:9a:57:
dd:8d:ec:a5:60:bc:f4:88:0c:8e:41:35:39:54:d7:
91:3d:53:57:a9:b7:df:2a:a1:c2:d8:cd:16:fa:74:
2d:af:c4:6c:72:52:b8:1d:83:eb:16:94:c0:09:c7:
29:61:76:2f:ab:f5:51:9e:d0:2f:05:63:94:d1:ec:
26:be:0c:3d:48:4c:23:47:4c:9d:f6:f3:3c:00:2d:
1b:0f:31:12:6b:63:de:24:b9:b1:54:a6:8e:d8:f5:
d7:d3:b3:34:b8:6c:01:f4:3b:2a:f8:f8:9d:84:00:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A7:23:12:CC:48:4D:46:A1:C3:57:9B:A0:7E:64:C4:6A:61:62:0C
X509v3 Authority Key Identifier:
keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3e:a7:d7:9c:59:7a:be:6a:19:bc:b7:46:ce:e0:89:5f:83:
b2:b0:fd:5a:42:0c:39:41:45:75:48:62:10:e2:6e:f8:7a:00:
40:16:0b:9c:a5:13:a6:f3:73:6c:26:77:ad:51:9d:93:5b:64:
f5:f0:df:0e:dd:a9:97:36:40:5a:61:51:21:3e:a2:67:37:77:
46:94:b4:92:1c:a0:d2:98:28:8c:df:ae:f8:54:5f:a5:98:9d:
22:87:58:fb:b0:90:dc:f1:81:4a:9b:9d:d7:8f:99:ad:a1:12:
62:fb:5b:8b:2e:58:15:52:75:5b:b5:29:37:cf:be:5f:3c:b5:
b7:1b:c9:17:f3:4f:00:25:26:be:ec:23:eb:82:5e:5e:2a:d8:
26:57:19:87:5b:d4:bb:1c:02:ff:0f:3b:e0:20:aa:86:e6:46:
3f:53:e4:a5:cb:61:72:20:b9:10:26:7d:b7:80:f1:3c:b3:bc:
8f:9f:5f:a9:b5:27:20:7e:16:f0:44:4e:3f:36:2b:42:62:cc:
8a:1e:9b:73:34:c8:6d:1c:c7:ca:94:d7:cd:c2:17:a1:a1:4e:
b8:f3:e4:83:46:3a:8a:67:75:43:1c:9c:33:a5:f8:69:e6:eb:
dc:d6:f6:10:84:01:ef:f0:02:cb:a1:4f:65:02:e7:23:ac:97:
10:3b:4a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:44 2026 by rpki-client