Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File: PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier: +Ng4Ia41PYrUi1VgKv/C/+DQDaIs17TSvf3ydI7ikew=
Subject key identifier: 76:D5:A1:09:80:15:BC:5F:9B:5C:C4:76:0E:8D:84:C2:44:44:32:BC
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial: 019FABD0EC6F9DD572C277203A7E50DF6C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number: 11CB
Signing time: Wed 29 Jul 2026 03:00:23 +0000
Manifest this update: Wed 29 Jul 2026 03:00:23 +0000
Manifest next update: Thu 30 Jul 2026 03:00:23 +0000
Files and hashes: 1: 8kiAQtkav2NHfFCJtiBA0ERhqIA.roa (hash: F/EijD7R25vjZwA9wYF9LplNamhupuIHanpPILz4ls0=)
2: M_79XQ2SXAKWIFy3HNmBFX2YRgI.roa (hash: PQS0FU2tcc2qRmlqMUo4a/MCLdHlPpwQ5M9eqNDwavA=)
3: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: vyzcfFWs6A6b+/LferSpjpyibHyoIRCvw7m/09hNM34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:ec:6f:9d:d5:72:c2:77:20:3a:7e:50:df:6c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Validity
Not Before: Jul 29 03:00:23 2026 GMT
Not After : Jul 30 03:00:23 2026 GMT
Subject: CN=76d5a1098015bc5f9b5cc4760e8d84c2444432bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e8:bb:ce:b1:81:89:ae:4c:21:0d:fb:de:92:
82:71:3c:7f:68:ac:1d:01:2e:e3:1f:70:7b:06:69:
7b:d0:c9:20:b0:08:b9:59:b9:34:80:c6:f8:5a:97:
02:ff:e4:79:1f:ca:8a:4d:87:31:b5:e3:1b:ae:e8:
d0:72:a3:d8:f4:d4:62:47:62:36:7e:df:2b:7f:12:
89:74:ec:b6:38:87:3b:41:16:61:1c:c8:06:69:f6:
39:22:df:96:6a:5d:48:cc:90:21:e5:d2:70:b8:53:
f1:31:b2:5b:97:8c:16:08:fa:dd:43:b2:64:6b:e5:
b8:c0:44:2b:a0:2c:de:0c:a1:7a:54:6c:2f:ac:f3:
76:01:b4:7e:45:94:f2:5d:32:18:b2:19:56:5b:fc:
67:0c:14:56:02:10:31:d3:a9:33:c9:24:2a:90:39:
b0:8b:36:57:29:60:50:f8:3f:1d:6e:f0:50:3b:15:
0e:10:1e:be:ad:f2:ba:17:4a:61:78:c1:99:1f:b0:
30:fb:35:c7:36:85:ba:ab:99:ab:b5:b2:4c:36:0f:
c1:61:b6:ea:7f:d0:16:96:d7:f3:ad:68:25:36:f9:
10:22:82:ee:1f:5b:ab:5f:89:2c:8e:c3:61:2f:05:
b4:86:0e:8b:75:5a:a2:cf:c4:b4:32:66:75:00:1a:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D5:A1:09:80:15:BC:5F:9B:5C:C4:76:0E:8D:84:C2:44:44:32:BC
X509v3 Authority Key Identifier:
keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:9e:bd:30:87:c0:df:00:0e:93:41:57:3a:00:0d:ec:ce:61:
6b:ba:27:7d:9a:53:61:fa:8c:1b:38:39:c7:cf:f6:c7:d0:7d:
48:74:14:3b:55:49:ec:95:5b:66:22:da:b4:35:cb:5f:80:cb:
12:55:60:f8:04:1f:7c:ac:7d:fc:d4:65:15:81:8c:f0:53:ed:
a5:2d:68:4c:2c:e6:e5:cf:83:89:ca:3e:80:f8:c2:8b:fd:35:
43:26:2c:3d:05:7f:1c:7d:69:54:c7:43:9c:f7:f4:a5:a6:85:
47:4e:ee:95:e6:05:b0:43:3d:c3:6d:dd:5a:26:3b:48:62:ef:
5e:65:a3:cf:0f:1d:74:fe:2c:6e:20:49:63:a3:bd:95:88:f6:
fa:7b:ba:1f:bb:be:bb:48:48:d3:35:3d:3a:5a:74:55:15:75:
56:be:89:23:f6:24:60:28:3c:d7:c8:5e:5d:0d:f9:20:b2:1b:
89:e6:30:e5:2b:51:82:3f:7d:23:1a:26:90:37:81:af:3d:90:
10:86:76:c2:80:04:fa:04:7e:b7:35:f6:b5:9f:91:f8:bf:b7:
b8:32:c3:77:7d:ab:aa:a5:bc:4c:45:07:52:7c:0a:3b:47:1e:
2e:ff:42:64:52:71:83:b7:4b:79:e3:80:a1:aa:d5:8e:70:93:
ac:c0:c9:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0OxvndVywncgOn5Q32wWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMWFlMTViZTg2ZWIwYzRkOWE3NjRjYzdhOGY2NTk5NWJm
OGM5MGUwHhcNMjYwNzI5MDMwMDIzWhcNMjYwNzMwMDMwMDIzWjAzMTEwLwYDVQQD
Eyg3NmQ1YTEwOTgwMTViYzVmOWI1Y2M0NzYwZThkODRjMjQ0NDQzMmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnui7zrGBia5MIQ373pKCcTx/aKwd
AS7jH3B7Bml70MkgsAi5Wbk0gMb4WpcC/+R5H8qKTYcxteMbrujQcqPY9NRiR2I2
ft8rfxKJdOy2OIc7QRZhHMgGafY5It+Wal1IzJAh5dJwuFPxMbJbl4wWCPrdQ7Jk
a+W4wEQroCzeDKF6VGwvrPN2AbR+RZTyXTIYshlWW/xnDBRWAhAx06kzySQqkDmw
izZXKWBQ+D8dbvBQOxUOEB6+rfK6F0pheMGZH7Aw+zXHNoW6q5mrtbJMNg/BYbbq
f9AWltfzrWglNvkQIoLuH1urX4ksjsNhLwW0hg6LdVqiz8S0MmZ1ABpVGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbVoQmAFbxfm1zEdg6NhMJERDK8MB8GA1UdIwQY
MBaAFD4a4VvobrDE2adkzHqPZZlb+MkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGhyaFctaHVzTVRacDJUTWVvOWxtVnY0eVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83M2YyM2EtZTk3Ny00MWMzLTkyMmQt
YjI3YzM0MTI0MjZhLzEvUGhyaFctaHVzTVRacDJUTWVvOWxtVnY0eVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC83M2YyM2EtZTk3Ny00MWMzLTkyMmQtYjI3YzM0MTI0MjZh
LzEvUGhyaFctaHVzTVRacDJUTWVvOWxtVnY0eVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZ69MIfA
3wAOk0FXOgAN7M5ha7onfZpTYfqMGzg5x8/2x9B9SHQUO1VJ7JVbZiLatDXLX4DL
ElVg+AQffKx9/NRlFYGM8FPtpS1oTCzm5c+Dico+gPjCi/01QyYsPQV/HH1pVMdD
nPf0paaFR07uleYFsEM9w23dWiY7SGLvXmWjzw8ddP4sbiBJY6O9lYj2+nu6H7u+
u0hI0zU9Olp0VRV1Vr6JI/YkYCg818heXQ35ILIbieYw5StRgj99IxomkDeBrz2Q
EIZ2woAE+gR+tzX2tZ+R+L+3uDLDd32rqqW8TEUHUnwKO0ceLv9CZFJxg7dLeeOA
oarVjnCTrMDJQA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:50:26 2026 by rpki-client