Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
File: PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft (raw, json)
Hash identifier: mMh6SyTa2YzqrEq7PzPWSvummBtNaK5F0SsoqfTI+TQ=
Subject key identifier: 5A:C3:DA:00:91:5C:BE:04:63:C2:25:BB:C1:B2:12:00:77:D6:53:A9
Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Certificate serial: 019D2772D67E506C3E8082BE12820BD6BDFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:02:10 +0000
Manifest this update: Thu 26 Mar 2026 00:02:10 +0000
Manifest next update: Fri 27 Mar 2026 00:02:10 +0000
Files and hashes: 1: PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl (hash: 6vn9+/Oq2g+BvYMDLfASjDwrNXmSTTuyAqUV/GK9uiw=)
2: TAErp0MM5r1w7tsbSJAC4z0-eRw.roa (hash: 5ACRC91wVrH0LaYTctg5PRrelZg/lYtE/E2ynyD9EV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d6:7e:50:6c:3e:80:82:be:12:82:0b:d6:bd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Validity
Not Before: Mar 26 00:02:10 2026 GMT
Not After : Mar 27 00:02:10 2026 GMT
Subject: CN=5ac3da00915cbe0463c225bbc1b2120077d653a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:c6:61:dc:31:da:d5:49:5f:c7:ed:af:5d:
7b:c8:2a:ff:5b:70:05:c0:df:34:ab:a9:5c:cb:9c:
b6:ae:f9:c4:17:df:63:13:a4:10:28:39:8f:9d:03:
36:e3:41:ab:40:4d:f2:f7:f4:ec:f6:3d:d2:f9:6f:
d5:c7:5a:df:be:fc:09:1c:65:43:ed:74:95:f3:1b:
9a:59:8b:41:02:2c:b2:81:f0:1d:06:64:b2:75:47:
50:21:d0:47:7d:5f:17:2b:1e:33:bc:22:79:c2:ae:
0d:b4:d7:ab:62:c8:6e:f3:eb:4a:b3:27:7a:28:8b:
7b:29:3f:aa:ae:60:bb:a9:68:be:3c:78:46:c2:16:
88:b1:68:3f:95:29:b7:6e:11:08:06:a6:e1:15:5d:
9e:3d:23:e2:53:9a:50:6e:d1:1f:8f:ae:46:56:69:
32:d4:1a:b1:76:c9:a7:f6:11:f7:6a:00:be:b6:8d:
25:2a:55:54:b8:93:53:8d:5f:68:ef:fe:b8:d8:32:
95:77:fe:c4:a8:78:25:9a:22:94:90:19:12:69:d9:
a5:9c:9d:59:f1:41:57:0d:e3:6c:88:52:7b:92:21:
ef:8e:a0:4d:3d:d3:71:38:95:48:1f:f8:52:d7:b1:
5a:93:97:cf:84:a0:66:6c:d5:98:fc:6a:54:77:e9:
5e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C3:DA:00:91:5C:BE:04:63:C2:25:BB:C1:B2:12:00:77:D6:53:A9
X509v3 Authority Key Identifier:
keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:99:76:43:5e:6f:c1:f6:ce:92:23:e5:09:88:a5:ea:a0:41:
2d:1f:78:5f:c6:a6:9b:59:a9:e7:92:06:01:af:83:87:bb:4a:
6a:f6:66:50:3f:d5:65:ab:90:7b:1e:59:d8:53:c3:aa:b9:07:
db:af:db:d2:14:63:c8:24:da:35:80:e0:cf:66:14:34:80:f8:
1e:41:a0:0c:3e:ab:70:c8:b5:b2:13:80:bb:46:1c:c2:09:59:
78:62:5b:ec:d4:7d:a1:c8:e5:b0:39:d2:d3:b3:88:4a:bc:8c:
64:53:34:8b:63:ef:e7:cc:45:6d:04:c8:0a:0c:07:7f:10:07:
4f:fc:f4:16:f9:aa:89:9a:27:bf:bd:ed:da:a2:9b:ba:20:7e:
2e:e5:3b:9f:b3:09:4e:c8:5c:72:8b:f9:26:cc:4a:11:62:1d:
ea:6c:d7:d3:32:f8:c5:f6:5f:35:0c:ee:1b:cf:8a:55:f8:66:
00:60:30:1f:11:80:2d:8d:83:de:4f:bd:bf:a0:24:51:40:d3:
10:4d:e1:8d:11:df:23:09:5f:b3:03:e4:92:d1:4e:88:43:7f:
14:fc:42:c4:4e:ea:89:13:4b:6a:e8:9e:78:21:f1:d1:76:d5:
16:7c:53:bd:1f:49:8a:1f:22:33:24:26:2d:04:e5:33:de:57:
74:02:00:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:50 2026 by rpki-client