Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
File: pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft (raw, json)
Hash identifier: EPgu03WUjgPjGBfjHTByG9kHUHXPZ1AyXA0bjhz6dYk=
Subject key identifier: F8:FE:93:7B:5E:F9:D7:0B:B7:53:81:5B:98:55:50:FC:9F:D8:0B:6C
Authority key identifier: A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0
Certificate issuer: /CN=a475e651f81aab603392f25521b7c9ab5bd281c0
Certificate serial: 019D2695B6F4F7FEA0381A330F60EE173561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
Manifest number: 06B2
Signing time: Wed 25 Mar 2026 20:00:39 +0000
Manifest this update: Wed 25 Mar 2026 20:00:39 +0000
Manifest next update: Thu 26 Mar 2026 20:00:39 +0000
Files and hashes: 1: pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl (hash: M24cU6E9Sc6UfVLzFZjlwz0qhHlaazCjOeZ/kTd6utc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:b6:f4:f7:fe:a0:38:1a:33:0f:60:ee:17:35:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a475e651f81aab603392f25521b7c9ab5bd281c0
Validity
Not Before: Mar 25 20:00:39 2026 GMT
Not After : Mar 26 20:00:39 2026 GMT
Subject: CN=f8fe937b5ef9d70bb753815b985550fc9fd80b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:a1:af:3b:d7:cc:df:9b:18:a9:96:8d:13:
27:e1:8b:82:cd:ca:f4:3a:71:9a:60:23:f0:d7:30:
b0:fe:47:67:6a:b6:be:6a:75:82:72:e6:9c:54:59:
94:ea:65:27:3a:16:bb:27:61:a5:61:70:36:67:fb:
ce:dd:6a:0d:e3:cc:c3:80:a0:58:a5:3d:ab:0c:30:
4f:bf:33:2c:cc:b9:a8:32:97:c2:1f:2a:0a:c3:b7:
7b:d1:cd:86:7a:c6:44:33:d5:5e:03:94:f9:3d:55:
05:8d:86:bd:7c:69:a5:a2:c4:5e:7f:a3:7a:99:3f:
a4:61:a1:9b:88:ef:1b:b8:73:b5:78:6b:b7:ad:57:
c2:5d:d9:d1:ef:c1:77:a3:60:61:21:f9:d5:ae:5b:
25:7b:ec:fa:a9:10:44:b2:3a:07:23:53:83:3c:e1:
4d:6e:6e:8d:78:33:27:69:ef:a9:10:8d:c3:46:8c:
79:1b:26:0b:b5:48:02:95:8b:7d:dd:6c:30:fc:b8:
2b:0e:76:c8:c6:41:bc:89:73:08:31:77:f8:cb:36:
e5:8f:77:9a:7b:a3:f9:6f:dc:67:23:50:0b:78:a4:
ba:20:e9:87:a4:00:3d:bf:eb:ef:5f:be:55:1b:40:
f3:7c:49:97:6b:da:0c:e7:10:47:3e:42:bf:e4:eb:
fe:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FE:93:7B:5E:F9:D7:0B:B7:53:81:5B:98:55:50:FC:9F:D8:0B:6C
X509v3 Authority Key Identifier:
keyid:A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d5:91:ac:89:25:fa:ff:1e:82:ea:3b:a8:a5:a9:49:7d:d4:
24:0e:27:13:0f:41:5b:24:0b:7a:27:21:de:11:bc:a6:6f:77:
07:c5:00:62:53:69:e2:af:db:0c:5f:bb:bc:d3:5f:da:73:75:
47:4e:d0:d7:81:4f:5f:fd:4e:3e:8f:e0:90:52:9c:80:af:35:
ac:e8:7b:3a:4a:5a:c5:aa:7e:9e:b9:f0:79:7f:4c:eb:bc:7a:
99:d4:c8:ac:5f:cd:22:1f:29:ca:7a:6e:62:c9:ac:89:7c:77:
6c:37:25:c3:5c:bf:4d:eb:72:cc:14:0c:f2:bd:67:8e:ed:96:
89:d4:b4:0a:55:e0:e5:c6:b8:cd:6d:a0:de:d4:a8:18:e6:9e:
d5:57:a6:26:f4:84:6d:09:65:fe:d6:f8:61:2a:fb:01:65:c9:
c1:a4:7c:c8:b2:3a:5b:36:b6:56:38:ef:3e:d6:d8:20:a6:a9:
0c:bf:9f:02:15:be:9c:9b:bc:40:f6:42:30:ac:81:f0:d1:14:
40:28:43:e4:b2:61:8f:36:d8:04:0c:bf:1f:3d:dc:a9:5f:8e:
a2:95:70:c8:aa:8d:14:ae:1c:e6:d9:1d:4e:95:59:ec:85:81:
9a:38:77:50:7f:ba:ab:72:2c:b2:3d:e7:5b:be:7a:97:21:bc:
20:54:a5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:13 2026 by rpki-client