Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
File: PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft (raw, json)
Hash identifier: SiX97qL+e7S7eYWC0OopmY4V5W6bCc7jQ0Z05MoMm1c=
Subject key identifier: 5B:73:3B:63:27:1A:DE:9D:08:DB:D6:7B:A7:45:0E:F1:77:D0:9E:5A
Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Certificate serial: 01A0DD986FF68181D548B507A0FF564B910C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 12:02:29 +0000
Manifest this update: Sat 26 Sep 2026 12:02:29 +0000
Manifest next update: Sun 27 Sep 2026 12:02:29 +0000
Files and hashes: 1: PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl (hash: CTcIMFUxWUJA0hMi1fyFz/bME81TU9OuxZ5UMtPWuBo=)
2: TAErp0MM5r1w7tsbSJAC4z0-eRw.roa (hash: 5ACRC91wVrH0LaYTctg5PRrelZg/lYtE/E2ynyD9EV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:6f:f6:81:81:d5:48:b5:07:a0:ff:56:4b:91:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Validity
Not Before: Sep 26 12:02:29 2026 GMT
Not After : Sep 27 12:02:29 2026 GMT
Subject: CN=5b733b63271ade9d08dbd67ba7450ef177d09e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:76:4a:e5:fa:3a:74:5f:6e:14:ce:07:13:90:
d6:3d:69:d7:7a:29:4a:11:de:08:43:15:8c:4c:67:
3c:c3:31:c3:78:97:79:15:09:0e:af:a6:02:82:da:
ec:0b:c1:dc:d0:85:d0:24:e9:35:33:60:29:0b:7e:
a5:4a:46:2a:7d:7e:e2:8f:a0:7a:47:be:4f:cf:e5:
1e:b2:26:df:7e:b9:8b:19:91:7a:72:5c:1f:c0:e7:
fe:ac:e2:29:5d:7c:b9:a5:cd:c6:68:5e:9a:71:9c:
cf:9d:04:89:62:ce:e2:72:02:41:00:d2:73:4c:0d:
4e:29:64:e0:e1:0b:94:32:3c:1f:ff:55:32:ef:e3:
38:28:a5:56:89:63:c1:1e:17:a0:75:9c:1e:e0:85:
9f:6c:3b:cf:3c:52:28:88:c9:36:d7:c2:92:5c:a4:
3d:64:6f:88:2b:12:f4:60:a2:45:09:9b:53:ad:89:
e2:9b:7f:5e:f3:79:13:4b:2e:97:de:85:a2:2e:96:
13:77:6a:39:85:5c:f8:07:ef:ff:37:88:b0:49:d5:
07:aa:48:52:f9:4b:da:59:92:4e:03:b6:36:4e:13:
86:84:0f:43:10:5a:f0:d3:55:39:59:49:11:68:8a:
dd:17:ec:60:47:b8:74:10:c3:fd:07:ee:54:f9:4b:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:73:3B:63:27:1A:DE:9D:08:DB:D6:7B:A7:45:0E:F1:77:D0:9E:5A
X509v3 Authority Key Identifier:
keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f1:18:87:b4:16:f5:bf:62:4e:d1:26:af:dd:a5:90:12:bd:
c7:7c:8e:3c:3f:de:93:60:be:e8:dd:56:a1:9c:ea:c5:1c:94:
ba:f6:97:c6:19:ff:53:24:a8:f8:fb:5c:73:92:4c:ca:7c:a5:
8f:e7:19:94:c1:82:24:2d:3b:c1:7a:01:0b:8d:66:d5:d3:8a:
19:c2:4d:9c:38:1b:75:38:18:e3:d2:7b:40:7e:7b:d0:44:62:
1c:b0:bd:a4:a8:f6:9b:7c:b9:0f:d5:6c:22:e4:69:5e:9c:86:
a2:7d:6d:c8:5e:90:ef:e3:cd:29:cd:fc:60:4e:0f:51:72:69:
3a:78:c9:33:64:71:f3:86:67:81:e3:42:5f:0a:1c:3c:9f:9d:
98:9e:5c:e6:f1:c3:05:d0:cf:e5:f7:fa:c3:20:9d:9c:8f:a4:
c7:e2:92:20:de:09:2f:ff:d6:4a:43:35:48:54:f3:20:6f:22:
8e:5f:58:01:72:e2:6f:81:8c:a2:20:5d:f4:56:66:05:97:3a:
62:59:30:8c:56:9e:e7:25:32:10:dc:f3:ff:30:42:7d:12:5d:
c8:f8:33:1c:ed:ce:76:2d:ae:fa:0d:9c:64:23:cb:8b:3c:5e:
3a:c5:90:96:dd:8b:a8:f9:93:8e:4d:a7:fe:69:8d:3a:b9:8b:
51:84:18:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:47:15 2026 by rpki-client