Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
File: phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft (raw, json)
Hash identifier: Ewd+tsGU+eFr4Ro8xvTvupPgArDRqNyPsFK7XwNHX2E=
Subject key identifier: C5:0E:A8:F9:CB:79:B1:8F:6B:C5:5F:38:91:D0:1C:EE:3A:E0:9D:0D
Authority key identifier: A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
Certificate issuer: /CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Certificate serial: 01A0D4940F66F8C620B6BD5FEC2ADD48BE6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
Manifest number: 0595
Signing time: Thu 24 Sep 2026 18:01:08 +0000
Manifest this update: Thu 24 Sep 2026 18:01:08 +0000
Manifest next update: Fri 25 Sep 2026 18:01:08 +0000
Files and hashes: 1: O16DrZlJHzuhj0W8FexnAw3AIQg.roa (hash: PYeQyX0bnsioFO8KHOzkkDt+kDAaH5RtiV5DGLPlkLI=)
2: R9yuRT4SpbFRYXwtoqgd5_GlTyI.roa (hash: kxhnGSSaFDIC1z6NUEjoYtqaLZRHrO86ZgnVJODeRiU=)
3: phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl (hash: NenGfG+DvrdH6PC81yk0OVaMZUO/rF+QbCuB+ou/lMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:0f:66:f8:c6:20:b6:bd:5f:ec:2a:dd:48:be:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Validity
Not Before: Sep 24 18:01:08 2026 GMT
Not After : Sep 25 18:01:08 2026 GMT
Subject: CN=c50ea8f9cb79b18f6bc55f3891d01cee3ae09d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f0:28:ca:1d:7b:df:fe:83:ce:48:9c:a5:9a:
4c:14:45:e7:a9:3f:bf:59:84:4f:89:64:1c:25:c4:
eb:69:ab:8d:44:0c:75:a5:1f:05:a0:22:a4:f1:6c:
9d:79:90:e9:50:cb:18:0b:0b:c2:23:3c:5f:f0:49:
1d:a2:a7:87:18:bd:36:33:49:a2:fd:90:15:6c:99:
a6:9f:ba:60:b2:9b:82:02:51:c4:65:05:f7:9c:79:
e0:01:cb:22:17:36:14:41:54:4f:52:fb:f0:4d:2d:
e3:1c:0f:6b:a7:20:cb:2d:49:24:1e:f6:d9:e9:c1:
e6:ac:cf:da:a6:3b:fb:81:40:53:07:70:1f:21:94:
7d:5d:60:aa:cd:f6:77:5e:8e:95:ce:15:28:a1:03:
6a:99:25:a8:18:8c:16:35:60:cb:6e:43:cc:71:ae:
f8:04:28:3e:06:5a:88:f7:53:cc:51:8f:35:5a:fc:
53:c0:65:88:c4:97:f5:1a:d6:48:1b:4b:72:94:58:
bd:d6:49:53:39:8d:44:75:8d:0f:97:92:c0:58:c2:
9e:92:99:01:d5:3f:f4:fb:e7:86:16:5f:d9:2a:96:
0f:ed:d9:73:b4:46:2b:a8:c4:0e:39:a0:5c:dd:c8:
60:62:a5:83:47:b8:06:48:c3:30:15:5e:0c:c1:15:
ab:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0E:A8:F9:CB:79:B1:8F:6B:C5:5F:38:91:D0:1C:EE:3A:E0:9D:0D
X509v3 Authority Key Identifier:
keyid:A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d6:57:c6:1f:6e:70:ea:b3:86:2f:6f:33:db:7a:4c:50:b7:
e0:9c:e8:1f:10:bf:2d:3d:e0:ef:db:02:0b:c1:af:e0:69:f4:
e7:f6:d7:52:86:8b:26:0c:87:19:e4:2d:15:eb:61:08:02:1f:
55:b0:55:27:9c:67:00:47:a4:63:ce:7f:72:30:d1:b2:09:97:
8c:4a:65:4e:a4:e4:4a:29:cc:25:da:50:0a:a2:0f:ff:12:3d:
cb:00:02:89:a8:4e:02:94:1c:f1:5f:fc:b5:f0:54:39:f4:cb:
59:45:45:6e:2f:08:76:a2:77:32:f0:1f:05:10:11:cc:93:d3:
05:8f:a7:6b:ef:9c:4b:05:ce:51:d5:02:64:cf:bc:5a:27:2c:
da:bf:fb:cb:ea:23:b0:5b:e0:55:17:9b:19:78:9b:54:47:5a:
18:b6:03:40:b1:d9:6c:4d:57:40:31:cb:03:cc:e3:df:65:1e:
d9:c3:e1:45:3c:82:8a:0c:67:c6:2d:e4:2b:ce:ca:98:26:8a:
9c:9f:ea:a4:d6:4f:37:d8:ef:5c:2f:d4:de:e2:b5:9a:d7:c5:
a6:80:ca:45:ef:65:f5:c2:a2:64:18:dd:82:d1:01:f1:42:5b:
ab:1b:a9:22:22:3a:c8:98:49:e2:46:15:d2:f7:59:6c:60:2a:
e9:6a:08:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:35:07 2026 by rpki-client