Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File: PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier: M/0rKMcZpQLL4rQFulxPr5FJo1kuTyhOarEBLbu0/XU=
Subject key identifier: DB:CC:92:A4:B8:F0:16:50:54:B4:D6:76:72:2C:37:AD:CC:B8:92:C3
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial: 019F92B6A4A5A68816562FD8E9AFE1520A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number: 11BE
Signing time: Fri 24 Jul 2026 06:01:10 +0000
Manifest this update: Fri 24 Jul 2026 06:01:10 +0000
Manifest next update: Sat 25 Jul 2026 06:01:10 +0000
Files and hashes: 1: 8kiAQtkav2NHfFCJtiBA0ERhqIA.roa (hash: F/EijD7R25vjZwA9wYF9LplNamhupuIHanpPILz4ls0=)
2: M_79XQ2SXAKWIFy3HNmBFX2YRgI.roa (hash: PQS0FU2tcc2qRmlqMUo4a/MCLdHlPpwQ5M9eqNDwavA=)
3: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: QOusF712hhwxNvsN2FvEKGXnNn2XCv9BIwY+5LXgrcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:a4:a5:a6:88:16:56:2f:d8:e9:af:e1:52:0a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Validity
Not Before: Jul 24 06:01:10 2026 GMT
Not After : Jul 25 06:01:10 2026 GMT
Subject: CN=dbcc92a4b8f0165054b4d676722c37adccb892c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3f:c1:92:2a:5e:30:92:af:b7:b9:95:85:83:
35:da:be:71:d9:de:7c:91:23:17:74:f6:d3:2a:f4:
65:06:22:c9:eb:8a:79:e8:8f:a1:4f:50:ac:a6:a6:
da:82:45:63:aa:06:f6:30:9e:23:3f:cd:08:4f:12:
fd:50:cb:47:18:44:9d:44:6c:58:e4:ba:53:55:bb:
de:84:a5:66:06:00:e0:2e:ed:29:9f:ad:be:1b:f6:
56:0f:f3:02:4e:35:8f:49:bf:9c:2e:94:11:34:5b:
90:7a:33:24:ae:1b:95:5a:5f:82:95:3c:cc:6f:f2:
f0:b6:16:e7:cd:8e:bf:4a:d6:d4:bf:2b:3a:45:2e:
ba:6b:5c:60:b3:50:c5:dc:dc:4a:db:0d:38:4a:14:
27:2e:06:fe:21:ad:cd:46:16:c6:81:d2:93:97:46:
4f:84:0b:b9:38:ee:80:e6:98:7c:8a:b7:28:89:ef:
d7:2d:31:7c:79:2b:39:60:20:31:cf:65:44:ec:96:
a2:26:5e:57:27:6f:9d:6f:9c:04:ad:49:e4:7a:c1:
6a:74:73:be:3e:05:b8:07:fb:49:5c:63:ff:a4:09:
da:6c:da:03:42:63:87:1e:aa:26:bf:f5:eb:40:97:
52:fc:b2:12:7a:20:38:f7:29:6e:f4:b2:cc:32:76:
95:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CC:92:A4:B8:F0:16:50:54:B4:D6:76:72:2C:37:AD:CC:B8:92:C3
X509v3 Authority Key Identifier:
keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d9:a3:97:6d:6d:dd:97:e8:3a:b5:3a:e9:cc:96:79:85:6f:
3d:df:9d:5b:95:b7:c8:d7:4f:f1:66:b5:3d:f0:a7:21:86:8d:
9b:f4:cf:c4:e6:5f:ff:3a:06:ec:e4:b4:e6:0e:cd:8d:16:a8:
af:03:65:ef:df:86:b2:83:a7:77:be:f2:a0:21:74:57:e8:7a:
e6:0c:5b:92:41:3d:c5:e2:1b:5b:0a:07:c9:0d:01:44:9b:76:
4f:da:0f:11:cd:5b:52:fc:c5:37:29:9c:fc:09:90:62:c5:ab:
95:24:c4:52:13:d4:dd:b2:0b:9d:4f:e6:53:f0:42:b5:89:82:
bc:2e:f8:eb:e6:59:85:64:13:c1:9d:a5:5b:1f:40:ef:9e:22:
79:61:91:43:5c:02:20:b0:bb:ca:bb:b8:e9:99:94:f9:85:9c:
84:e5:b8:d9:21:df:e9:1a:4f:bf:52:27:b2:27:d2:e9:a5:cb:
e7:68:56:db:7c:ef:50:7d:f7:b4:be:10:bd:c5:85:6e:ee:a5:
3d:b5:b1:62:85:9a:e6:4a:ba:c8:95:78:27:75:96:60:db:b3:
af:97:30:ef:43:0a:8e:74:ee:36:1b:a9:95:28:24:d5:bf:1e:
42:4a:00:4e:1e:cc:26:61:de:dd:a4:c6:73:9f:f0:2a:04:69:
91:5c:3c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:54:26 2026 by rpki-client