Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
File: phvll6k-axrZQXjQPo6MFVcmeMc.mft (raw, json)
Hash identifier: itXe3+s4jx00qVLL/xsjH9POHynb0QRx9Kgx0Arg518=
Subject key identifier: 10:3F:5F:09:B1:F1:94:A4:DE:45:EB:1C:1A:A0:42:EC:54:2B:AA:EA
Authority key identifier: A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7
Certificate issuer: /CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
Certificate serial: 019D9C2D59C4D2F0000D511CBFEE5DBE187E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
Manifest number: 06A7
Signing time: Fri 17 Apr 2026 16:01:50 +0000
Manifest this update: Fri 17 Apr 2026 16:01:50 +0000
Manifest next update: Sat 18 Apr 2026 16:01:50 +0000
Files and hashes: 1: phvll6k-axrZQXjQPo6MFVcmeMc.crl (hash: ykzEJQ+YQNT41Dh48tSl9WGfF9jEK5hhRAlyLiGufxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:59:c4:d2:f0:00:0d:51:1c:bf:ee:5d:be:18:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
Validity
Not Before: Apr 17 16:01:50 2026 GMT
Not After : Apr 18 16:01:50 2026 GMT
Subject: CN=103f5f09b1f194a4de45eb1c1aa042ec542baaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:8f:1d:4f:b3:5b:fb:60:a8:0a:fa:ae:e8:
22:21:ba:49:36:a1:fd:90:49:69:ef:db:45:d1:bd:
0d:b0:6f:c2:10:53:ed:47:d9:4a:d8:6a:19:96:b3:
76:25:1e:74:8e:8b:b1:70:b8:50:bc:02:15:bc:2e:
a2:53:de:91:5b:12:a7:d3:9f:cc:41:78:ba:e0:df:
ff:e1:4f:a6:0c:44:af:85:ce:85:9a:b6:20:01:c9:
5f:97:6d:3b:5b:b7:af:c5:de:4a:ac:7f:60:86:e6:
1d:fe:04:dc:2e:4d:ed:7a:f8:c9:97:f9:6b:d1:e2:
0e:76:af:52:a7:fa:a2:3a:2a:94:33:df:fb:24:ae:
06:75:4c:fb:3b:ce:70:ce:f7:b7:e1:95:76:7e:77:
5d:1c:97:b1:a9:b6:0f:1c:c9:53:e8:40:29:a2:c8:
5d:0e:f2:e2:63:55:c0:8e:df:d1:ff:e1:c9:76:f7:
9d:5c:56:77:05:02:2b:ac:20:c0:da:38:eb:41:11:
74:d7:a1:01:3e:5d:65:45:d1:06:1f:e7:0e:9c:85:
24:9d:5d:6f:36:ec:3e:1c:2e:f7:9c:c4:fa:63:a8:
cc:cc:d2:06:c3:b2:e2:4a:92:48:f1:62:f7:12:71:
ba:3d:04:5e:4c:08:0f:6c:61:9e:65:02:8a:8b:78:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3F:5F:09:B1:F1:94:A4:DE:45:EB:1C:1A:A0:42:EC:54:2B:AA:EA
X509v3 Authority Key Identifier:
keyid:A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:97:69:39:83:5d:43:8d:65:ef:1f:d2:cd:9d:04:ea:19:39:
98:c7:b5:fb:f3:38:9a:3d:ec:88:e4:05:ed:27:6d:69:ae:3a:
71:0f:f9:8f:52:79:d7:20:21:b9:0b:35:c8:2a:d2:38:0e:6f:
34:ac:d3:29:14:bc:44:77:55:5a:4f:0a:cd:c5:d3:8c:6a:57:
4c:d3:da:8d:59:3b:ca:2b:c8:bc:c4:e8:1e:f1:d8:71:1c:e1:
72:7e:f7:80:ef:07:cb:ae:58:27:40:a8:ca:b0:81:db:a2:25:
f1:09:da:3f:ac:8b:b8:fd:04:c3:be:2d:4b:39:68:64:27:39:
bd:87:cc:e0:f9:be:c0:43:62:3f:b0:4d:d7:b0:3a:a1:6d:89:
92:e7:59:44:9e:93:54:3e:0e:c5:5e:a1:19:fa:1a:6a:c6:26:
60:81:37:3d:15:dd:fc:62:ac:60:71:1c:0e:aa:61:a8:2a:f1:
31:8d:19:e2:89:bf:83:bb:ef:81:0c:36:a3:4f:1e:56:bf:aa:
60:3a:36:e7:81:f2:3f:79:43:6a:9a:46:f7:66:e5:ea:95:2e:
5a:50:8e:7d:d5:10:e4:05:aa:d4:58:db:a1:3e:a8:0c:35:af:
d2:a3:fb:b1:81:03:b9:c3:69:57:58:0e:b5:c7:5f:06:22:72:
dc:03:f3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:41:37 2026 by rpki-client