Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
File: PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft (raw, json)
Hash identifier: t1u/nEIDJea68MLMRGF5tsmexd5xYSG46nwF5Z2vmp8=
Subject key identifier: A8:01:5E:7D:33:68:30:FD:E7:66:6E:DD:10:C7:EE:31:62:50:AD:13
Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Certificate serial: 01A1DE70957244E1D5D506537CEDD9CA3A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 09:01:22 +0000
Manifest this update: Sun 15 Nov 2026 09:01:22 +0000
Manifest next update: Mon 16 Nov 2026 09:01:22 +0000
Files and hashes: 1: PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl (hash: 7w7QhYScAz7eZ/zRT+65I69G+sXOEKE9K+fMylLYrMA=)
2: TAErp0MM5r1w7tsbSJAC4z0-eRw.roa (hash: 5ACRC91wVrH0LaYTctg5PRrelZg/lYtE/E2ynyD9EV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:95:72:44:e1:d5:d5:06:53:7c:ed:d9:ca:3a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Validity
Not Before: Nov 15 09:01:22 2026 GMT
Not After : Nov 16 09:01:22 2026 GMT
Subject: CN=a8015e7d336830fde7666edd10c7ee316250ad13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:35:5f:a1:64:57:12:9a:9d:07:af:6a:9c:
af:3e:de:a6:87:53:52:08:a6:4e:c7:c6:ef:01:33:
7a:88:27:0a:e3:ee:38:5f:e8:71:a9:0e:96:f4:97:
3c:2d:5a:3b:79:65:d1:b2:16:20:bc:5a:70:4a:2b:
7a:94:96:79:88:20:eb:d4:95:a6:a1:8e:19:23:dd:
ae:37:92:d5:0e:ea:6e:73:da:80:60:bc:64:32:1f:
e6:48:87:46:3a:65:44:be:72:b1:bf:31:16:3e:62:
67:ed:96:8b:d6:0a:56:00:b2:bd:05:4e:7d:63:c6:
61:d7:d3:aa:20:e6:fa:e6:a2:95:94:c7:a4:87:7b:
b4:8e:5f:48:d2:12:21:8f:2b:55:26:12:fd:10:f8:
09:f4:79:d4:a0:da:9b:23:c7:2a:00:df:f1:1c:a4:
f3:ca:7f:45:d0:bd:27:89:4b:ed:f6:0e:4a:76:6a:
90:cf:5f:ee:a3:25:a1:89:12:2e:34:de:4e:80:d4:
b5:c3:a2:35:9b:68:38:f0:03:8f:63:5a:8a:24:d2:
d2:14:31:0d:d4:37:1b:aa:b8:14:bd:8e:28:45:07:
47:02:ad:58:24:e0:a1:d6:7f:58:1a:2a:59:86:76:
d5:63:e9:4d:28:fd:b8:4e:80:d6:56:ae:a4:02:09:
ff:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:01:5E:7D:33:68:30:FD:E7:66:6E:DD:10:C7:EE:31:62:50:AD:13
X509v3 Authority Key Identifier:
keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d8:f5:f1:4a:70:0d:b0:7b:5d:29:a2:f8:30:e6:af:37:34:
ca:ab:50:d9:5d:2e:02:5c:a7:fa:c3:fb:8c:ab:ba:aa:3a:83:
b5:48:24:ff:f5:4a:bb:f8:9d:96:a4:1f:dd:07:1b:02:7d:d1:
7c:0a:65:00:a1:f8:6f:6c:97:f8:b4:45:4e:1f:82:8a:b5:8a:
fc:02:3f:d9:92:32:03:f9:ef:82:17:19:b1:61:4b:8d:55:67:
6a:d7:eb:5d:82:e0:5d:2c:9d:9f:9c:49:3e:a8:88:e2:90:cf:
da:63:2d:7e:16:88:6e:48:d3:d5:75:52:ec:2c:ac:1e:59:c4:
8e:70:63:30:ad:2e:de:7f:31:57:68:4e:c0:b6:a2:48:5c:11:
1e:b6:9a:4b:83:ee:b0:b6:80:10:b7:8b:5d:60:02:76:70:01:
79:6e:a3:16:b1:39:db:36:ae:49:0e:10:fa:5d:b3:9f:20:3d:
34:16:db:1f:cf:7a:36:c1:d1:db:43:c3:9c:97:de:10:80:21:
90:34:34:3c:1a:09:e6:84:de:4f:11:54:5f:3f:c5:f4:9e:0c:
28:ce:73:a1:68:c9:f8:fd:7d:fe:bb:3d:dd:ce:45:99:b6:d8:
41:32:14:64:67:16:28:e6:4d:43:75:dc:1e:b5:55:0d:fe:a6:
89:30:ac:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:01:03 2026 by rpki-client