Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
File: PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft (raw, json)
Hash identifier: oczIO/Kr7HQzwu2qPB7DDdQdGpqDnE2W8XRgXvix8qo=
Subject key identifier: 0A:4B:67:F5:C4:A0:0C:70:81:94:96:FF:35:6B:C8:2E:3B:21:AB:9F
Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Certificate serial: 019F8F7FA2D1E31EA8AAFC48DDB7F263CCD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 15:02:14 +0000
Manifest this update: Thu 23 Jul 2026 15:02:14 +0000
Manifest next update: Fri 24 Jul 2026 15:02:14 +0000
Files and hashes: 1: PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl (hash: OoBzPQXvJgOLFwfuLmgWFGQBpSxAaVhbRSR1Wafjobw=)
2: TAErp0MM5r1w7tsbSJAC4z0-eRw.roa (hash: 5ACRC91wVrH0LaYTctg5PRrelZg/lYtE/E2ynyD9EV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:a2:d1:e3:1e:a8:aa:fc:48:dd:b7:f2:63:cc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Validity
Not Before: Jul 23 15:02:14 2026 GMT
Not After : Jul 24 15:02:14 2026 GMT
Subject: CN=0a4b67f5c4a00c70819496ff356bc82e3b21ab9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:79:65:54:f2:bb:1f:0a:b5:6d:7a:21:59:
58:36:f8:8f:0c:f6:86:69:36:18:ac:e5:f8:97:1e:
36:d9:94:91:ef:d1:ec:81:82:da:f4:64:4f:04:21:
34:df:ad:99:87:31:01:50:bb:9c:48:f3:d3:0a:24:
37:39:a7:bc:57:c7:e4:80:db:6d:ba:1a:5b:6d:a4:
1a:67:e2:b1:e1:99:41:5e:05:26:06:11:8d:0f:d7:
23:bf:b1:0e:60:41:af:3c:93:c9:6c:1a:40:8c:29:
47:69:cc:a5:fa:0c:5c:62:23:a1:06:58:4d:97:ac:
d6:f4:9e:20:34:d9:ab:96:cc:57:fb:ee:51:ed:cc:
d9:a4:d4:17:21:e8:8e:56:9d:b6:a2:b2:a9:75:0e:
fb:8e:b2:3a:f8:34:f7:2d:c4:3f:b9:bc:4b:d0:78:
ae:4b:ab:18:20:14:bf:08:78:25:cf:f7:10:b8:eb:
77:91:12:db:1f:89:0c:75:54:02:46:a2:e9:67:f5:
05:62:8d:7e:5e:39:3b:5e:e2:8b:cc:86:2e:d2:05:
93:47:45:e0:e2:8c:b1:94:1d:0a:eb:1b:5d:a2:a9:
72:0a:c6:cc:d3:e6:56:7a:a3:8a:77:9e:22:2c:88:
c7:c8:2b:83:b3:5b:1e:6e:92:8f:16:76:1f:ad:cb:
d0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4B:67:F5:C4:A0:0C:70:81:94:96:FF:35:6B:C8:2E:3B:21:AB:9F
X509v3 Authority Key Identifier:
keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0e:ee:a6:45:94:33:83:75:b8:ab:52:23:ee:ba:36:bd:17:
92:5f:41:65:fc:11:5b:f8:67:15:cd:dd:d5:8d:84:66:c0:45:
23:eb:70:8f:71:70:3c:84:33:0a:c3:bf:59:33:43:bc:a9:cb:
11:e7:db:63:a1:b1:a7:ef:63:40:42:e5:9c:a1:f4:3c:fe:ef:
6f:62:1a:bf:20:0f:85:db:5b:b3:ea:1a:1b:33:52:13:85:30:
31:ad:eb:4b:dd:7d:48:a0:f0:fb:3a:a8:0f:c9:b3:67:87:aa:
12:1c:fb:0e:84:2e:99:ce:5c:d2:be:61:60:ad:5e:49:87:8b:
4d:17:9e:6c:2b:e1:52:3c:0e:60:6d:2e:4f:63:d1:8f:47:09:
65:cb:a2:f6:d6:77:bf:51:55:54:b7:c6:07:ee:0c:69:8d:18:
0e:f3:68:74:55:b6:8b:dd:d1:dd:d7:2f:fa:46:67:a5:2a:32:
b1:5e:f7:f7:dc:04:9f:dc:77:f4:46:3c:0b:0f:bd:9f:53:45:
1b:da:7e:59:d7:e0:ac:61:30:7d:ed:bd:5b:bd:ad:25:0b:51:
91:5f:6c:e4:37:a9:7a:68:14:24:61:5f:c0:c1:b8:9a:52:2b:
07:45:1d:b9:6b:cb:af:0c:70:36:49:af:dd:ab:c0:74:bb:96:
b0:29:af:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:22:47 2026 by rpki-client