Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft
File: 1PhqmjxCnBvCbsBqOuTkF8p0394.mft (raw, json)
Hash identifier: slTJ9HdXobO7c/myut1cc2iPJluQYmE0z6/GM4DkRCk=
Subject key identifier: 76:87:17:E2:50:02:97:89:3C:CB:24:8C:CE:4C:B7:54:C2:81:CD:49
Authority key identifier: D4:F8:6A:9A:3C:42:9C:1B:C2:6E:C0:6A:3A:E4:E4:17:CA:74:DF:DE
Certificate issuer: /CN=d4f86a9a3c429c1bc26ec06a3ae4e417ca74dfde
Certificate serial: 01A111F27822D9A7C987EB13D8B7327315EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft
Manifest number: 0D18
Signing time: Tue 06 Oct 2026 16:01:05 +0000
Manifest this update: Tue 06 Oct 2026 16:01:05 +0000
Manifest next update: Wed 07 Oct 2026 16:01:05 +0000
Files and hashes: 1: 1PhqmjxCnBvCbsBqOuTkF8p0394.crl (hash: QCfZsd6iKUMeTa9R0Rnw6jN2d0vqvvxzqQ4cVuqC6Yk=)
2: EIZvs3LlyOATA74fkfrX-SPXX8s.asa (hash: Bo3VyldvJrbwB3Q3/d9GSyN+MI2yMpO4vcDWG8UZ6iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:f2:78:22:d9:a7:c9:87:eb:13:d8:b7:32:73:15:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f86a9a3c429c1bc26ec06a3ae4e417ca74dfde
Validity
Not Before: Oct 6 16:01:05 2026 GMT
Not After : Oct 7 16:01:05 2026 GMT
Subject: CN=768717e2500297893ccb248cce4cb754c281cd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:ee:5c:3a:63:1b:1f:64:c7:af:66:69:f8:
c6:d9:91:cc:18:ee:dd:d6:61:cf:77:3b:cd:c9:00:
1c:c4:fe:56:9a:33:d7:81:18:32:22:96:99:4c:9a:
68:59:9d:51:9a:33:4c:98:9a:ea:d9:27:59:9a:6f:
99:00:99:8a:f6:56:3b:1d:e0:9b:30:76:ee:69:84:
31:bd:bc:6d:a2:13:93:af:28:1f:94:6d:c2:62:da:
95:9d:31:51:d0:5a:0a:c7:d4:33:a1:32:6f:3a:02:
89:40:93:68:b4:ec:11:82:7e:f9:f5:fc:b6:88:0c:
3a:10:f1:7a:2a:be:17:ac:3a:19:8c:e7:99:89:31:
83:0a:30:a5:66:07:cf:15:89:cf:6e:b3:1b:8e:99:
14:18:8c:80:70:87:b5:31:7d:b2:62:ed:b6:68:1b:
d7:f9:35:ea:3d:27:f7:64:39:cc:c5:e1:0a:3a:5d:
50:73:41:90:05:ae:14:64:c8:17:4e:2a:de:9e:e8:
5d:3b:b8:a5:dd:35:e7:57:40:2d:3e:eb:41:52:1f:
df:e6:5f:69:38:1c:e5:fd:ff:46:7f:65:7d:ac:33:
bb:24:91:1d:41:54:9f:d5:73:18:8e:08:b2:83:7d:
e4:ef:00:68:f2:b7:37:a5:7b:45:40:ff:cd:f0:67:
aa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:87:17:E2:50:02:97:89:3C:CB:24:8C:CE:4C:B7:54:C2:81:CD:49
X509v3 Authority Key Identifier:
keyid:D4:F8:6A:9A:3C:42:9C:1B:C2:6E:C0:6A:3A:E4:E4:17:CA:74:DF:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:80:78:cb:4d:d5:4b:ea:35:83:2d:67:b8:f0:56:8c:2d:b8:
24:96:12:a9:79:17:f2:21:1f:94:6f:be:e0:1d:8a:79:d9:e9:
2b:0a:41:02:66:80:c0:09:49:b0:d3:f5:27:2d:e9:61:77:27:
b5:87:0c:c4:67:63:28:84:d7:89:66:06:d8:9c:0f:c4:1b:fa:
88:3c:07:da:91:fe:52:dc:15:84:f3:48:1c:70:3e:0d:c2:4f:
d6:cd:10:74:4c:de:c9:18:f1:eb:c7:ba:2c:d3:64:66:be:9e:
27:d1:cd:2e:8c:4c:39:71:be:a8:dd:80:2f:07:75:97:d6:b1:
98:69:38:d7:76:49:e3:7d:c2:e0:64:f6:db:f7:cf:d5:92:0a:
70:18:98:3e:83:f9:37:3f:1f:ed:df:cc:9c:dd:f9:14:bb:ad:
09:07:c9:2e:85:fe:a1:19:4b:69:64:02:3c:24:0b:81:06:34:
63:55:b2:74:b8:d0:01:35:e3:68:8e:e6:22:8a:30:88:4e:d1:
d0:14:2e:a9:60:21:b6:b9:41:d3:aa:6f:e5:e3:8b:b5:e1:49:
b7:e7:07:66:55:1e:76:46:27:9c:8c:3f:67:f3:a3:48:1f:66:
d6:3e:bb:86:d1:a1:57:21:fa:73:2a:38:1d:2d:5c:d8:38:e9:
92:1c:37:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:28:07 2026 by rpki-client