Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
File: pHFXAbAK3kiVo5p2oNgQDsleq-M.mft (raw, json)
Hash identifier: 8XapzzwqhNcEV80G56ImtlXJgUiQ7udRwnlpoIu+sX0=
Subject key identifier: 36:4C:AE:F1:C7:38:89:D2:85:63:D8:28:4F:F4:E8:E7:E1:A9:FC:5A
Authority key identifier: A4:71:57:01:B0:0A:DE:48:95:A3:9A:76:A0:D8:10:0E:C9:5E:AB:E3
Certificate issuer: /CN=a4715701b00ade4895a39a76a0d8100ec95eabe3
Certificate serial: 019D2A72E2247B834E4F985B9C2BD9842D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
Manifest number: 04D9
Signing time: Thu 26 Mar 2026 14:01:05 +0000
Manifest this update: Thu 26 Mar 2026 14:01:05 +0000
Manifest next update: Fri 27 Mar 2026 14:01:05 +0000
Files and hashes: 1: pHFXAbAK3kiVo5p2oNgQDsleq-M.crl (hash: OJEQsDC3imJjQ1cTFH2lefP2q4TGwasWhSkc+yDuoQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:e2:24:7b:83:4e:4f:98:5b:9c:2b:d9:84:2d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4715701b00ade4895a39a76a0d8100ec95eabe3
Validity
Not Before: Mar 26 14:01:05 2026 GMT
Not After : Mar 27 14:01:05 2026 GMT
Subject: CN=364caef1c73889d28563d8284ff4e8e7e1a9fc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:c4:12:b2:0a:07:0f:b6:76:8b:22:12:c1:
8d:41:ad:2d:27:94:8a:3c:20:c8:4c:3f:4d:7d:e3:
09:f2:09:d9:c2:33:64:83:d5:3a:3a:0c:8b:b3:1a:
a6:2b:ef:25:d8:3e:23:34:df:81:8c:f1:88:31:1c:
a9:30:2e:18:1c:cc:3a:d5:b8:1e:d4:83:46:79:a3:
53:25:01:8e:39:51:27:6b:5f:1e:4f:f7:74:fa:8c:
ab:39:0b:d2:61:d8:78:bf:73:03:02:93:1f:81:27:
d8:67:fc:51:88:3a:91:44:b1:84:06:62:ed:4d:cc:
70:8a:50:f6:d9:3e:59:72:84:bd:d8:d2:80:53:8e:
eb:1a:71:9a:21:ab:63:a0:77:b7:8b:e0:d4:85:e1:
e1:b8:45:36:36:18:60:6d:43:c1:50:e2:6b:f6:56:
94:40:4b:7a:4d:ef:93:14:ca:3c:1c:da:c0:38:c2:
55:49:08:ef:3a:73:d1:b8:4e:b5:78:10:d9:80:73:
94:83:ea:9c:81:bd:2c:5c:43:2e:85:ed:f8:77:aa:
35:d9:86:61:fe:94:47:c8:31:94:73:89:01:05:04:
9a:cd:b6:8c:0a:c1:5d:31:2d:38:d9:6a:66:cd:14:
26:2d:db:99:65:5f:10:89:94:42:0e:9f:c3:a0:e9:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4C:AE:F1:C7:38:89:D2:85:63:D8:28:4F:F4:E8:E7:E1:A9:FC:5A
X509v3 Authority Key Identifier:
keyid:A4:71:57:01:B0:0A:DE:48:95:A3:9A:76:A0:D8:10:0E:C9:5E:AB:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:be:41:75:6d:4c:a0:39:ca:26:ab:33:7d:ab:41:c0:1b:65:
25:0e:36:a2:07:08:8f:23:60:b5:ba:97:8f:8e:85:d0:19:48:
19:c8:8e:ba:c2:8b:a9:d4:15:73:14:67:31:9a:6a:eb:59:17:
63:8f:ea:b7:33:98:be:38:c5:27:86:fa:2c:a1:17:7e:42:7b:
22:3c:14:43:89:54:9d:00:1c:85:8c:27:1b:04:eb:5d:a5:5c:
6f:1f:3d:fb:4f:06:6f:c3:5e:9c:d5:76:3f:9d:d6:d3:7f:00:
5b:bf:08:e3:16:3c:b3:23:66:d0:6a:05:9d:1a:79:5b:11:ba:
45:7e:39:c0:e6:20:e8:10:ca:d5:de:f7:8d:d5:68:7b:0f:83:
1a:ae:88:49:ad:25:42:de:da:e3:f6:54:2c:56:e8:af:7c:7b:
76:4d:87:d8:7a:fa:a7:8a:fa:0e:66:6a:83:66:0b:41:48:a8:
bf:a5:5e:a6:a8:bb:e4:09:76:08:b1:9a:cd:d6:db:06:51:d1:
dc:4b:e5:10:f2:35:92:84:53:12:ae:4c:71:a9:00:98:6a:65:
0a:c7:8c:65:06:f5:e2:f9:c6:82:ff:ad:ce:68:2e:34:04:6c:
d7:9d:77:1f:3f:44:be:ed:46:51:00:c0:b8:af:f6:10:fc:a5:
dd:d4:a7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:48:52 2026 by rpki-client