Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File: PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier: rYOaxqQaKc2xTzB8NtC1p1iXqM+N1Af6YiMglb5VFnU=
Subject key identifier: 04:3F:2C:2F:F7:05:00:F5:D0:C5:69:AE:29:23:33:AA:6B:5C:A7:2A
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial: 019E1DFE43351344A69CD29989B09E33B1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number: 10FD
Signing time: Tue 12 May 2026 21:01:02 +0000
Manifest this update: Tue 12 May 2026 21:01:02 +0000
Manifest next update: Wed 13 May 2026 21:01:02 +0000
Files and hashes: 1: 8kiAQtkav2NHfFCJtiBA0ERhqIA.roa (hash: F/EijD7R25vjZwA9wYF9LplNamhupuIHanpPILz4ls0=)
2: M_79XQ2SXAKWIFy3HNmBFX2YRgI.roa (hash: PQS0FU2tcc2qRmlqMUo4a/MCLdHlPpwQ5M9eqNDwavA=)
3: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: EhQ2MhkwYd48utaQqqwn4yHQ25t+ViGNJCLqs7vW554=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:43:35:13:44:a6:9c:d2:99:89:b0:9e:33:b1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Validity
Not Before: May 12 21:01:02 2026 GMT
Not After : May 13 21:01:02 2026 GMT
Subject: CN=043f2c2ff70500f5d0c569ae292333aa6b5ca72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:a7:35:8f:e3:49:60:ee:f5:e8:3d:2b:9b:
09:8f:38:af:14:54:4a:91:f0:ab:c9:08:7b:eb:c3:
67:db:ef:e4:55:8e:d1:b3:4c:82:ee:dc:12:97:48:
37:09:76:fe:56:71:40:3b:52:64:5a:2c:79:4c:97:
1d:b1:b4:a9:dd:1a:0b:3a:53:48:81:f5:6b:0a:e0:
8b:a9:d3:f2:3e:bc:fa:55:0a:ff:ec:6d:5d:a4:d4:
75:f1:ce:46:05:1b:dc:70:70:5b:cc:e4:3a:d5:e4:
9b:94:ab:c8:7f:58:f1:84:58:ce:e8:7b:f4:ee:57:
70:67:82:01:e8:cf:cb:20:96:08:06:74:69:12:32:
4a:86:91:91:7c:e3:17:b3:61:da:78:94:8f:b1:f8:
ac:c6:65:8d:75:c3:32:bd:9e:a4:4d:20:87:a5:87:
d4:df:20:d0:0f:fb:e4:77:25:64:3c:53:a2:bc:11:
77:63:e3:93:78:ec:42:80:0c:e2:cd:15:e6:34:0b:
25:6c:05:af:93:29:ee:aa:76:fd:2f:a7:5e:0b:60:
78:f3:00:b6:ad:fc:25:6b:95:67:65:a1:8d:84:3a:
54:ec:e2:0a:e4:a6:43:56:0c:a8:0d:25:9f:aa:7c:
39:7e:98:ab:85:a3:af:48:2e:f1:a4:88:5e:d8:b6:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3F:2C:2F:F7:05:00:F5:D0:C5:69:AE:29:23:33:AA:6B:5C:A7:2A
X509v3 Authority Key Identifier:
keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:06:5b:01:97:e6:30:7c:09:68:4a:87:74:38:b3:3a:02:18:
6c:2c:0e:56:ad:18:85:a3:6f:41:e2:1d:9e:f8:67:c7:bf:53:
17:09:59:4b:09:3c:0e:36:b8:00:b5:b2:00:a7:12:28:93:1e:
81:3f:e0:6c:bf:1a:e9:ea:0a:43:a0:c7:86:c7:71:08:c5:6c:
29:06:4a:78:71:0e:be:63:7a:fc:e5:c8:66:d0:d3:7b:91:38:
71:28:57:34:b1:c1:ab:60:cf:00:15:95:10:d0:fd:6a:3a:38:
2d:5f:a0:fb:d2:e6:3e:6e:5e:97:fa:e5:a2:38:bd:79:cf:ea:
89:93:0d:59:cb:d4:bc:49:8b:a4:2c:d8:d0:d3:1a:53:ea:a2:
71:2a:aa:4b:31:35:28:77:4f:6a:3f:6b:3d:2f:e8:02:0a:80:
29:77:97:bc:c8:3b:2d:30:18:ab:cf:66:3d:8b:d2:b7:70:2c:
de:18:78:fa:49:67:ea:2f:c2:2e:b9:9c:a6:fb:c2:77:41:b4:
bc:14:ac:a9:d3:87:aa:b7:0c:30:49:8f:9a:81:62:28:f2:0d:
65:fd:e9:2b:e6:64:f3:00:db:cf:d0:84:c7:d9:eb:b0:74:b2:
9f:87:4d:1e:09:0e:20:f5:3d:03:43:e2:52:17:7a:04:18:f4:
8d:d3:94:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:53 2026 by rpki-client