Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
File: PhYwnSXRPOXHlqWhdOQsPNm8tes.mft (raw, json)
Hash identifier: iz8DNyfUrGQqH5TYlN2x8CL9G8T1FfXb7PESTldPyh4=
Subject key identifier: 11:90:A4:FE:6F:98:6C:78:4E:9A:11:87:5A:F8:6F:CE:0A:33:B3:1C
Authority key identifier: 3E:16:30:9D:25:D1:3C:E5:C7:96:A5:A1:74:E4:2C:3C:D9:BC:B5:EB
Certificate issuer: /CN=3e16309d25d13ce5c796a5a174e42c3cd9bcb5eb
Certificate serial: 019D265F1EADC2B3C784B444FA2CF1383032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
Manifest number: 64
Signing time: Wed 25 Mar 2026 19:01:00 +0000
Manifest this update: Wed 25 Mar 2026 19:01:00 +0000
Manifest next update: Thu 26 Mar 2026 19:01:00 +0000
Files and hashes: 1: PhYwnSXRPOXHlqWhdOQsPNm8tes.crl (hash: +l92Rr3re4zeNwhRlvMhumsOgtjaNPglxXKnNeIbjuw=)
2: RfNBsHj8QcqkAL-Ye4KgxIRMAME.roa (hash: a3yGPg9Ldh+EVAvxaPgx65P1BWMxHy09aUciESjCmVY=)
3: UnaF_eoa9ROObjqYeTBIXsHw3Nw.asa (hash: oZG+a5/aGxOGxHi9FsasMcCsAqmNUBRZ44VQS9ERQa8=)
4: VFVPR_IRVw5BlqiNs1YWSmHiqsE.roa (hash: V8+sjv3juPFIm0G9xudc5DKK5HaQCguQbshspKidKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:1e:ad:c2:b3:c7:84:b4:44:fa:2c:f1:38:30:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e16309d25d13ce5c796a5a174e42c3cd9bcb5eb
Validity
Not Before: Mar 25 19:01:00 2026 GMT
Not After : Mar 26 19:01:00 2026 GMT
Subject: CN=1190a4fe6f986c784e9a11875af86fce0a33b31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:56:3c:c4:30:fc:29:29:0f:9f:dd:72:20:
36:4a:f2:be:34:ef:33:6a:4c:b8:a3:31:43:c1:d0:
2d:59:f7:9a:f4:08:7e:2e:f6:cb:a8:04:25:b4:c7:
5f:2f:9e:b7:a2:b4:f5:1c:c2:0f:79:fe:ee:ae:6d:
c0:56:45:98:82:25:81:35:e3:15:2b:38:7a:21:ea:
d3:8b:ba:75:d9:49:ad:6f:3f:40:e9:bc:72:ff:56:
c6:a6:db:13:60:d1:33:b9:21:e0:4f:f6:ea:fa:c9:
69:1d:48:ba:65:ac:14:e2:43:21:de:f3:53:e2:2f:
c1:83:07:8a:12:d0:2b:6f:2e:ed:52:1c:c1:22:16:
d3:41:1f:e7:1f:40:d3:7b:60:9b:c0:28:98:84:4e:
a6:f1:5b:db:49:7d:e0:8e:97:e0:44:68:82:a4:05:
f0:2f:7d:ed:71:1d:ad:8a:33:a3:e5:2d:0b:f7:b9:
c7:3d:d9:98:21:16:f7:3e:08:ea:91:d7:f5:bc:e2:
a7:26:de:fa:3d:6f:5f:8c:81:e8:c0:53:f9:4d:56:
14:36:fd:a3:59:c9:f9:6b:00:43:81:de:dd:3b:08:
95:8c:6c:bf:fe:2e:d9:bc:0b:e0:6a:6a:83:ba:65:
57:d5:dc:61:ae:e4:3a:84:d9:fb:92:94:44:c5:da:
95:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:90:A4:FE:6F:98:6C:78:4E:9A:11:87:5A:F8:6F:CE:0A:33:B3:1C
X509v3 Authority Key Identifier:
keyid:3E:16:30:9D:25:D1:3C:E5:C7:96:A5:A1:74:E4:2C:3C:D9:BC:B5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhYwnSXRPOXHlqWhdOQsPNm8tes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e07cf7-50c1-4e18-8fae-1522f7537bcb/1/PhYwnSXRPOXHlqWhdOQsPNm8tes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:28:2e:aa:89:98:47:28:23:29:5b:f9:d1:44:c8:c1:ca:96:
ee:c1:07:ef:f9:6f:67:95:d2:05:9e:d4:fc:d6:41:43:5b:54:
48:38:aa:54:7e:9a:fc:90:1c:0c:19:82:6c:69:68:e0:3f:52:
48:2f:6e:a8:f7:a4:63:75:81:a2:1c:57:74:6b:81:fa:f9:44:
8d:81:d1:ee:e7:5b:fa:e0:5f:6f:27:c9:4b:89:c1:df:3c:ed:
f7:8f:57:61:20:c4:4b:ea:57:66:b4:22:9c:1f:2d:e3:f8:e5:
be:7b:c7:a6:3f:f4:aa:de:ca:23:bf:e5:42:03:fb:9a:5d:5c:
09:ca:85:84:11:f7:9c:d6:a4:4b:78:ef:04:0c:cb:ad:67:d1:
ec:92:aa:a1:43:8d:50:eb:78:17:67:b6:21:bd:62:13:fc:07:
78:5c:25:c1:3c:eb:91:26:f3:6f:25:ee:cb:37:6f:ff:0c:f8:
bd:52:c4:05:04:6c:68:d3:d0:62:97:44:e0:b8:d0:3e:bf:40:
ab:f7:ca:00:ca:67:68:17:fd:e2:6f:80:5f:72:ff:28:a1:10:
81:c3:62:30:16:74:31:50:c8:3b:a0:97:b0:fc:98:35:72:af:
37:7d:80:5c:4c:ea:fb:c9:15:5f:9b:40:1b:ab:b5:39:27:17:
6d:4a:88:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:15 2026 by rpki-client