Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
File: PheDehDbHT3XPiDfC0eeQNsiNv4.mft (raw, json)
Hash identifier: U0w3LuK/OVY8cDaVWndi6plkZLYefDLG+7jKbldfzb8=
Subject key identifier: C3:E3:57:9D:5D:D2:2B:40:64:E3:2B:90:A6:FB:C1:67:E0:26:37:BD
Authority key identifier: 3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
Certificate issuer: /CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Certificate serial: 019D26CCB807C42FADFC46B6C88779227D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
Manifest number: 109B
Signing time: Wed 25 Mar 2026 21:00:43 +0000
Manifest this update: Wed 25 Mar 2026 21:00:43 +0000
Manifest next update: Thu 26 Mar 2026 21:00:43 +0000
Files and hashes: 1: J1ZNlvpAp8dQYGMOD7UX0oUYBcI.roa (hash: EeG9YUdg/cA88sV9yS1ysCVKGj6cTXLlHbFYfJXwIrI=)
2: PheDehDbHT3XPiDfC0eeQNsiNv4.crl (hash: 0RFfyuZ4fKbMAwRi/tA+mRfGZ9S4dWM77hQ90XPUHWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:b8:07:c4:2f:ad:fc:46:b6:c8:87:79:22:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Validity
Not Before: Mar 25 21:00:43 2026 GMT
Not After : Mar 26 21:00:43 2026 GMT
Subject: CN=c3e3579d5dd22b4064e32b90a6fbc167e02637bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:31:a8:40:e4:ee:25:90:dd:17:a0:28:30:
82:5f:13:d2:4a:88:ca:a3:be:70:c7:cc:6d:ea:11:
55:8a:5c:71:fe:bc:61:d5:b4:63:70:9a:56:ee:d2:
15:57:44:b7:8e:30:4c:de:c1:62:29:34:ae:6e:bd:
38:fa:6c:41:96:1b:17:b3:f5:07:76:fa:02:52:fd:
56:71:d0:e2:fb:e2:ac:b0:08:91:98:4c:e7:a9:36:
50:ba:99:76:e5:a3:c2:26:d3:56:c8:85:af:4e:11:
c5:bd:3b:38:c3:b8:6f:03:fa:fe:72:68:12:04:58:
e4:25:ca:18:30:b0:43:70:ec:2b:ef:6f:a8:f8:a5:
b9:cd:bc:f1:5b:ef:8d:ed:a9:35:10:d9:a0:01:84:
16:9f:d4:a8:65:7a:47:86:f5:9e:8b:a6:dc:28:9e:
b5:b5:1a:1f:d6:d8:a9:f3:b5:1d:e7:75:e1:9c:77:
e5:9d:72:07:02:1d:1e:1e:15:b3:b3:87:65:0f:bf:
22:ba:04:0d:ed:78:a2:dc:c4:db:71:4b:ab:86:29:
96:7a:87:48:3e:22:a3:68:e7:c9:8f:e7:6c:45:c8:
69:0a:49:6d:c8:e8:6c:7d:43:b6:19:8c:1d:e4:17:
bc:ac:7e:c5:5e:4f:b4:28:7d:47:8c:89:46:f8:29:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E3:57:9D:5D:D2:2B:40:64:E3:2B:90:A6:FB:C1:67:E0:26:37:BD
X509v3 Authority Key Identifier:
keyid:3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5e:27:cc:44:af:e6:c5:26:3d:4f:b0:13:27:b7:94:02:80:
b8:5c:ce:c8:f3:84:f7:fe:25:b2:16:e6:56:5b:27:07:cb:90:
dc:c1:48:6f:ba:4d:ac:d6:3b:71:d1:77:e5:f9:d1:70:47:ec:
2b:d8:83:87:f2:26:7b:ae:e5:d1:eb:d9:83:c6:0d:2a:d0:12:
1b:81:23:97:39:8d:b7:71:c3:43:43:7e:10:be:4b:09:2a:79:
a2:9b:9b:f1:f4:73:76:1b:5b:d7:50:2d:ed:c8:fa:0e:eb:25:
1c:df:86:8b:19:58:13:ed:86:e0:36:d4:a5:26:5a:68:bd:5d:
b6:cb:4f:85:97:39:54:65:e3:ef:3d:9e:dd:9d:22:4d:89:ef:
af:5f:b6:7c:70:4a:5a:63:1b:c7:e6:6f:1c:00:4d:56:5d:4f:
5d:3d:65:f0:ab:79:6a:81:f7:fb:06:20:5a:61:c3:8d:19:42:
cd:24:cb:df:da:38:dc:25:77:3b:e3:26:04:b6:8e:e0:67:50:
66:db:90:18:fc:39:5d:47:99:f1:85:86:37:b7:e4:97:19:01:
40:0e:cb:17:75:a8:68:f5:f1:6c:47:b3:c3:1d:a1:48:28:b1:
06:6c:b5:d8:4f:3e:95:12:39:80:1f:34:52:07:33:de:38:92:
15:06:a3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:39:40 2026 by rpki-client