
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
File: PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft (raw, json)
Hash identifier: RVV7sMIo4Nkq3mC3BK+lEgsxnktIjP49OJkD+SjyAWk=
Subject key identifier: DA:35:C5:3E:7F:F4:C1:51:31:53:52:8C:B6:4F:2C:5B:BE:2B:83:1D
Authority key identifier: 3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
Certificate issuer: /CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Certificate serial: 01A12277DD6ACCB95EBB740E23E29FC7F4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
Manifest number: 1A95
Signing time: Fri 09 Oct 2026 21:00:43 +0000
Manifest this update: Fri 09 Oct 2026 21:00:43 +0000
Manifest next update: Sat 10 Oct 2026 21:00:43 +0000
Files and hashes: 1: 1xqmHjBaKcMyTJZdSE2Mikxpy18.roa (hash: 6ArzK/gUzadt//cwGYXOOVpodg4RUZSaD7178EluHbg=)
2: PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl (hash: Cp5jWmROrsgjwbLsO8AWx3+WFEt2oDdaycd3Pm6dGC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:77:dd:6a:cc:b9:5e:bb:74:0e:23:e2:9f:c7:f4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Validity
Not Before: Oct 9 21:00:43 2026 GMT
Not After : Oct 10 21:00:43 2026 GMT
Subject: CN=da35c53e7ff4c1513153528cb64f2c5bbe2b831d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:b3:44:d6:d3:f1:cc:b3:5d:fb:39:a6:e9:
df:22:a7:a6:08:1b:fa:23:4d:84:fb:da:db:1d:ea:
a1:82:be:b0:cf:31:60:46:2b:9e:c6:69:e3:21:dc:
0b:21:15:a0:2d:f5:fc:69:bf:a1:3c:64:9e:6d:47:
de:02:ca:3e:cc:00:47:9a:cd:da:2f:4f:ed:1d:95:
d3:08:2c:79:ec:be:04:05:0a:2c:a4:07:61:5f:34:
e3:b4:07:3e:f7:b9:4b:ae:b3:e0:cc:7c:68:1f:44:
29:f1:9d:cd:b0:47:89:47:7e:d8:2b:6d:59:c8:03:
aa:18:87:2f:8d:52:4b:b8:cb:31:9b:39:68:f6:67:
28:bf:c0:cc:a0:17:fb:3d:31:b8:9b:20:2d:3a:dd:
64:29:38:2b:cb:77:0b:ba:6c:a3:75:d3:1f:3c:61:
81:c9:79:60:fa:15:96:80:e8:f6:04:47:9f:07:db:
8f:de:28:ae:57:4e:e2:bf:50:ff:2d:27:c8:38:6f:
40:a5:f0:88:b5:c7:7f:58:3d:be:8e:fa:3c:31:c4:
8d:18:77:36:37:56:8f:f1:71:88:0a:36:ee:13:e3:
a9:12:04:87:36:c5:12:1a:24:80:93:fe:51:d3:40:
cf:98:08:11:5f:95:b4:c7:56:76:ee:fe:2c:02:ec:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:35:C5:3E:7F:F4:C1:51:31:53:52:8C:B6:4F:2C:5B:BE:2B:83:1D
X509v3 Authority Key Identifier:
keyid:3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c7:d9:af:8b:4b:f2:13:21:80:32:17:f4:95:4b:f4:b1:ca:
38:3d:95:a2:a0:7d:95:5a:2c:b0:04:f5:ff:26:74:bb:d5:79:
15:6a:60:c0:fd:2d:9e:58:99:82:d4:08:e2:ed:96:e3:c0:8b:
50:d5:ba:f3:db:2b:9a:68:b4:98:c5:7b:37:13:d9:e9:19:07:
7a:c9:00:89:24:27:22:78:e8:2e:8f:5c:6c:38:d2:05:ea:06:
a5:79:28:0a:b2:7f:14:c5:98:ac:a6:c1:be:fc:85:89:c2:81:
7e:5b:8f:cf:16:94:c2:3f:b8:d5:6e:92:3d:52:2a:20:6b:4f:
bd:b0:47:9a:72:8e:bb:9d:c9:5c:ce:71:19:17:a1:7e:c4:0d:
89:e5:7c:d3:3e:2f:e4:9f:17:c1:ca:0f:19:31:29:66:be:89:
e1:84:f5:d3:e1:96:88:53:70:7e:b5:02:5f:80:85:81:1d:24:
fd:a4:b7:4f:5c:27:5c:62:56:7d:a4:5e:81:e0:09:3a:2b:03:
5e:a7:f4:16:13:f4:9c:75:e5:a8:53:32:3d:f8:2e:38:aa:e7:
3e:9f:80:7a:b7:a2:84:d2:9f:8e:99:35:df:95:35:ae:89:94:
9d:08:a6:a1:c8:c2:c2:8e:23:dc:e1:8d:07:7e:7b:7a:b0:af:
73:26:e2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:26:23 2026 by rpki-client