Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
File: phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft (raw, json)
Hash identifier: CyKjiNCf+sFFosP2qyr0VnDvmdEVaUT5CU+dGTGGHE4=
Subject key identifier: 65:13:74:32:6D:DD:F9:E2:3D:7B:29:59:EB:A0:BC:EB:33:15:B5:9F
Authority key identifier: A6:10:37:10:70:66:77:30:AA:F5:90:2E:9F:8C:63:40:80:0E:EC:88
Certificate issuer: /CN=a610371070667730aaf5902e9f8c6340800eec88
Certificate serial: 019F935B6651AC0C47F2E8D37D4AA8348776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:08 +0000
Manifest this update: Fri 24 Jul 2026 09:01:08 +0000
Manifest next update: Sat 25 Jul 2026 09:01:08 +0000
Files and hashes: 1: dZDlbqsnapFIwj1HUHLInqN8JVw.roa (hash: bs/eDOvdIuJ1snvbff8tQ4iMRziNZ2Vwxnsh8r7rh+0=)
2: h087lucF2ivPyD3F1D3_NLkhOb8.roa (hash: deWexSQgKEOrc0A416IV+spDrpGZpTVS9EaD2+rgd3g=)
3: kdSBI_9pb4sru0XZjIhpyOoJDTA.roa (hash: AahhJx6gs1/aCr1ScQXRa/wo3nSdwYac1ZF6rIEWe98=)
4: phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl (hash: bOjDSjUWDphq2fgWbWu5Iyp2ky/3dDgl6fHazsuCH7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:66:51:ac:0c:47:f2:e8:d3:7d:4a:a8:34:87:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a610371070667730aaf5902e9f8c6340800eec88
Validity
Not Before: Jul 24 09:01:08 2026 GMT
Not After : Jul 25 09:01:08 2026 GMT
Subject: CN=651374326dddf9e23d7b2959eba0bceb3315b59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:04:a8:03:d1:ce:91:b7:67:04:79:11:b0:83:
b5:9e:05:cc:d3:e5:74:f5:3f:fb:d1:dd:3d:35:17:
c8:e3:dd:45:55:a8:c6:46:b6:76:9c:3a:0f:7e:31:
c3:5f:84:5d:a0:b8:62:06:aa:45:03:71:dd:a8:dd:
15:b8:3d:7c:ed:1c:5a:94:63:25:1b:6b:b4:d3:4e:
54:73:ec:05:65:23:14:ba:e9:7d:73:e4:4d:65:56:
18:bb:6e:07:fe:e5:aa:0c:09:12:09:0e:8e:51:2c:
69:fb:fd:cd:83:e8:85:6b:40:54:38:f7:86:a4:ba:
ab:62:e0:3f:43:ae:28:ef:d9:69:8b:c6:28:fb:fb:
ce:45:b0:8f:f4:9a:d7:ab:e6:e7:73:b4:6e:a5:1b:
e7:78:d4:27:40:6a:df:33:88:03:95:72:ff:3f:5e:
e0:d5:96:dc:ba:de:2f:6a:52:9e:56:0e:f1:63:26:
12:56:1a:ad:1f:3f:c1:dd:7e:b3:77:c0:ba:e3:49:
5d:88:d7:6b:6c:b7:57:5e:0a:66:ff:b7:09:d8:28:
2c:bd:44:b0:2b:c4:1b:e5:6c:98:50:32:69:d0:27:
20:19:89:0f:e1:cd:c8:f4:ea:19:57:c9:d9:00:70:
c7:0e:25:09:bc:f7:52:da:85:92:4d:e7:f7:2c:e5:
d0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:13:74:32:6D:DD:F9:E2:3D:7B:29:59:EB:A0:BC:EB:33:15:B5:9F
X509v3 Authority Key Identifier:
keyid:A6:10:37:10:70:66:77:30:AA:F5:90:2E:9F:8C:63:40:80:0E:EC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0c:ab:67:7d:13:0c:31:6a:06:32:c8:f7:d0:7a:2d:fa:d7:
b4:25:06:53:c3:a7:d7:24:7f:a3:21:27:e8:75:e8:ef:3b:84:
c9:6a:ab:c5:8a:a7:2e:9a:8c:66:30:ae:36:a8:f2:74:e3:80:
be:0d:40:13:0b:41:f9:db:52:bd:06:a2:33:ab:0d:c3:cc:8e:
d2:4c:ec:9a:8a:fd:33:cd:f5:9e:91:00:38:e9:d2:1f:5b:0e:
70:f1:4f:31:12:f8:9f:6d:6f:ba:27:9e:1a:58:e3:e1:75:40:
29:65:7c:d8:f2:b7:e1:c4:0f:27:2f:d4:e7:e8:56:93:41:5c:
c7:08:82:e6:67:fc:5a:3a:29:08:cb:c3:38:a0:30:23:2d:85:
de:b1:e7:2a:98:a1:e2:09:df:75:03:02:59:0d:c2:e4:3a:70:
d9:4b:b3:c3:fc:47:05:1c:27:3d:d8:0b:40:cf:12:c9:c1:82:
44:86:78:ff:42:15:92:96:6c:df:64:57:01:0c:32:91:8e:bc:
d5:7c:b3:b2:48:77:cb:62:29:d3:e1:cf:09:3e:fc:e9:4c:7e:
79:9c:4d:63:2c:e6:3e:d7:8f:c8:9f:92:a4:06:c1:6d:1d:c1:
b1:fb:60:f0:2e:7b:ae:0f:9d:8c:ee:31:aa:61:06:7e:d4:04:
e2:3d:dc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:24 2026 by rpki-client