Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft
File: 1PhqmjxCnBvCbsBqOuTkF8p0394.mft (raw, json)
Hash identifier: PORmod6GWA2W9nvBV+ZlYvuUD6bXgvPhBDcCY/20u2o=
Subject key identifier: 62:03:32:FD:F1:1E:BD:8C:A7:39:7F:27:29:8B:70:D1:0D:05:D3:F0
Authority key identifier: D4:F8:6A:9A:3C:42:9C:1B:C2:6E:C0:6A:3A:E4:E4:17:CA:74:DF:DE
Certificate issuer: /CN=d4f86a9a3c429c1bc26ec06a3ae4e417ca74dfde
Certificate serial: 019F909091CD4A63025CFF3D4FDE02C3DF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft
Manifest number: 0C4F
Signing time: Thu 23 Jul 2026 20:00:21 +0000
Manifest this update: Thu 23 Jul 2026 20:00:21 +0000
Manifest next update: Fri 24 Jul 2026 20:00:21 +0000
Files and hashes: 1: 1PhqmjxCnBvCbsBqOuTkF8p0394.crl (hash: dfMvA6Q4Qe7aDwXO4vpgbt7svPIAb2K++84v3rTglRw=)
2: Ew4ekZGDXX43yD0-ieU7rv9LPdY.asa (hash: UGPgFojxF93NEr3l+qQTH+Bt2iuDcML85Xezl8OoPI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:91:cd:4a:63:02:5c:ff:3d:4f:de:02:c3:df:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f86a9a3c429c1bc26ec06a3ae4e417ca74dfde
Validity
Not Before: Jul 23 20:00:21 2026 GMT
Not After : Jul 24 20:00:21 2026 GMT
Subject: CN=620332fdf11ebd8ca7397f27298b70d10d05d3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:20:fc:4d:d7:df:57:aa:ab:bc:e1:60:d8:e1:
4f:16:ef:be:72:f0:70:b0:d0:4d:8a:ba:d7:d6:bb:
4e:2d:cc:b0:c4:d9:61:de:55:f9:9d:1c:c3:8e:f1:
07:43:4d:6c:a6:41:92:81:88:34:9f:db:9a:9c:f0:
34:69:62:f7:27:d0:b6:87:be:b6:32:8e:da:01:eb:
72:a1:5d:4b:5f:b3:cc:f3:12:72:56:1a:f5:57:0c:
b4:e5:26:b7:fc:f5:be:5b:e2:e5:c3:f0:b4:44:f6:
68:33:36:19:69:c7:dd:23:18:da:e9:5d:cf:d5:e1:
0b:37:7c:aa:01:82:a9:8c:73:25:bb:0f:84:2c:ec:
92:74:0a:28:80:33:24:9e:28:d4:6f:03:4a:31:8a:
38:14:42:20:69:a1:aa:aa:48:e1:64:4d:3b:7a:e6:
2c:ba:ed:0d:a0:a9:3e:bf:b0:53:2c:1b:17:20:ca:
be:9f:d4:73:27:92:08:e5:d5:26:80:90:60:25:d5:
71:20:d8:46:00:dc:e9:94:cf:5a:bb:83:02:0c:61:
9f:b7:2c:e4:9c:78:1f:4b:a3:13:f1:fa:5f:1e:70:
b0:c8:3f:c7:2d:b3:88:f3:c7:33:42:c8:e1:ac:cd:
44:ea:66:bb:1f:13:46:2a:7e:5f:df:49:9f:61:0f:
c9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:03:32:FD:F1:1E:BD:8C:A7:39:7F:27:29:8B:70:D1:0D:05:D3:F0
X509v3 Authority Key Identifier:
keyid:D4:F8:6A:9A:3C:42:9C:1B:C2:6E:C0:6A:3A:E4:E4:17:CA:74:DF:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:41:67:81:32:fd:98:39:b0:86:72:27:50:fe:ba:69:a3:55:
48:94:cd:ab:0d:3b:5f:f2:84:1b:19:e9:7b:9a:3c:4e:92:a4:
85:f3:e5:db:5b:4b:a7:d1:8c:6d:4b:a1:5e:26:a2:b9:50:c0:
e5:3b:5e:00:01:d6:92:c8:e1:db:3e:4d:e2:d6:f1:63:0a:a2:
85:64:28:15:d4:a1:56:e5:4e:5d:74:c5:ce:9c:56:51:43:94:
80:aa:9d:66:93:d1:c0:04:c1:e6:c5:c7:79:ea:d6:43:ee:40:
6d:fc:2a:57:8a:16:a4:82:06:ff:17:0f:05:78:09:e7:06:37:
a1:e8:5d:e7:94:93:67:84:45:7c:25:b1:fe:09:d1:4f:11:25:
5f:f4:75:75:58:42:ef:df:3a:de:38:cf:da:5a:a4:57:a2:a9:
50:e5:14:53:15:9e:ea:e7:71:d2:f9:f8:a3:5e:29:88:55:ae:
fa:4d:fb:d8:83:a9:aa:ec:ce:cd:4d:88:38:72:03:e6:74:ec:
38:a9:95:f5:95:97:7e:4f:cd:25:e0:75:55:bb:36:1c:ae:c3:
e7:74:13:fe:c9:b3:23:b3:77:6a:4d:7e:54:b1:50:80:15:0a:
08:7d:a5:2c:04:b9:12:2f:2f:3e:68:16:5a:2b:53:04:d8:04:
95:7b:b1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:31:11 2026 by rpki-client