Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
File: phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft (raw, json)
Hash identifier: d6q8Rh8cBflozJiG7tGEcgB+RPg00fLfn74SbxFCreM=
Subject key identifier: 62:3D:A2:AA:01:21:EA:37:BF:62:F5:7D:BF:B2:1D:78:65:72:90:6F
Authority key identifier: A6:10:37:10:70:66:77:30:AA:F5:90:2E:9F:8C:63:40:80:0E:EC:88
Certificate issuer: /CN=a610371070667730aaf5902e9f8c6340800eec88
Certificate serial: 01A08A8CC3556CB628BA7A262B68DC00CE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:15 +0000
Manifest this update: Thu 10 Sep 2026 09:01:15 +0000
Manifest next update: Fri 11 Sep 2026 09:01:15 +0000
Files and hashes: 1: dZDlbqsnapFIwj1HUHLInqN8JVw.roa (hash: bs/eDOvdIuJ1snvbff8tQ4iMRziNZ2Vwxnsh8r7rh+0=)
2: h087lucF2ivPyD3F1D3_NLkhOb8.roa (hash: deWexSQgKEOrc0A416IV+spDrpGZpTVS9EaD2+rgd3g=)
3: kdSBI_9pb4sru0XZjIhpyOoJDTA.roa (hash: AahhJx6gs1/aCr1ScQXRa/wo3nSdwYac1ZF6rIEWe98=)
4: phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl (hash: rqejd4wRuaL5dWf1RbAcYxusntveYiSRftAslDIdpjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:c3:55:6c:b6:28:ba:7a:26:2b:68:dc:00:ce:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a610371070667730aaf5902e9f8c6340800eec88
Validity
Not Before: Sep 10 09:01:15 2026 GMT
Not After : Sep 11 09:01:15 2026 GMT
Subject: CN=623da2aa0121ea37bf62f57dbfb21d786572906f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:8b:13:c1:e7:a5:c4:74:87:e7:f8:84:9a:
8e:ce:0c:32:0a:f0:bd:8a:9e:a7:f9:89:a9:f5:7e:
3e:eb:d5:33:39:04:60:a1:85:8b:4d:52:de:0b:fb:
3c:76:34:96:22:aa:7b:e5:de:ee:2b:5c:43:de:63:
4e:b2:cf:06:a8:cd:9d:8a:25:99:c2:0c:2d:e6:3d:
c8:74:b0:58:2c:72:3c:93:f2:56:4f:0e:7c:46:b4:
58:05:56:e3:ff:ba:51:5c:0a:20:65:da:55:3f:b0:
ba:42:e0:9f:82:0f:81:81:aa:82:73:6e:81:b0:3e:
b8:fc:d2:aa:00:ef:8f:e0:f5:5a:fd:2f:8f:7a:d6:
27:c7:e5:34:b9:7e:71:bf:2e:72:cb:01:7d:21:21:
3c:b2:3f:b5:ab:28:d3:28:71:da:e1:7e:8b:4d:cf:
38:c2:34:a7:84:64:30:3a:1a:cd:1c:91:80:fb:c6:
6e:3a:89:37:18:1d:5b:fd:19:ce:3c:81:fc:93:0d:
28:a8:34:5e:db:0a:15:b6:37:44:58:39:93:b4:57:
e3:03:07:26:06:98:4a:40:85:34:ed:86:bf:73:de:
98:31:5a:43:fd:38:7f:68:b2:36:a8:a3:18:3f:f2:
95:69:e5:2c:3d:63:4b:62:de:7d:a9:20:8a:1d:42:
30:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3D:A2:AA:01:21:EA:37:BF:62:F5:7D:BF:B2:1D:78:65:72:90:6F
X509v3 Authority Key Identifier:
keyid:A6:10:37:10:70:66:77:30:AA:F5:90:2E:9F:8C:63:40:80:0E:EC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:09:24:93:58:be:4d:c9:31:ce:c1:5b:85:8d:bf:a8:8a:1d:
c4:a7:1f:c9:bd:d5:3b:af:31:41:71:e2:26:18:7d:b2:0c:03:
cc:5c:73:b5:62:1a:ea:80:b8:ef:63:64:fb:03:2c:48:13:ee:
cf:f3:a1:ac:97:d1:97:09:c3:d9:05:6b:38:1c:22:41:26:0b:
04:a5:9a:31:c7:36:19:c9:c2:7e:01:8f:f3:02:73:5e:76:30:
3b:b5:cb:9b:0f:0c:b0:d2:9a:7f:c8:68:4d:3e:33:d7:54:92:
b2:a8:c8:f6:23:bf:15:a3:9c:72:1f:00:e5:7d:75:09:5d:38:
24:40:d2:15:7f:e9:e8:f8:8b:d3:68:55:17:86:ea:ec:45:a2:
0d:11:be:68:3f:60:8a:96:3d:ba:d3:6b:6f:bd:1e:4e:62:09:
f7:e2:9b:85:12:8d:1b:30:7d:c2:e8:45:55:2e:46:ae:e8:da:
96:1a:68:ea:fb:e5:38:a9:a7:f0:d2:b5:c0:b1:ff:f6:f0:b3:
ef:0b:71:a5:ed:9e:7f:33:5d:d3:75:aa:a0:e8:f5:55:8c:47:
d7:ba:2b:19:0f:99:b5:99:85:dc:8b:76:06:96:d3:52:d5:75:
d1:e9:c3:5c:2a:33:ac:02:20:ab:c5:1d:88:f6:10:b8:db:34:
54:4d:3c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:29:37 2026 by rpki-client