Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
File: pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft (raw, json)
Hash identifier: vKCkgFakxUggGdVNETTHV3nBdokZSbmS9F04BBFJh3k=
Subject key identifier: 9D:78:8B:1B:2C:71:0B:DE:E7:9A:51:EB:66:DC:7F:5C:80:40:D6:98
Authority key identifier: A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0
Certificate issuer: /CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
Certificate serial: 01A17ADF3CF1B4674230DB936D0BA1AD9C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 01:00:12 +0000
Manifest this update: Tue 27 Oct 2026 01:00:12 +0000
Manifest next update: Wed 28 Oct 2026 01:00:12 +0000
Files and hashes: 1: 6OdumX9U3TNQ_BDfNTi9HAvC11E.roa (hash: 479EKbeun2aU00GF/z6lmnGk3H57D4kV5EAf3nlCMns=)
2: DlfCFhfqG3PINgL1jVCPcztdoAU.roa (hash: Lc7oVL7OUAbKr2SuVV49BF7ImGTSykw2iB7rEU3+4QU=)
3: fGSwmaJ6zM1DpnuBUiGrnAtIJmI.roa (hash: hb+BTTHKLxaTOIRsq5LjyfLTjd9bL73/5kVitKWagAI=)
4: pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl (hash: wqCCwr1jOVpu9x8O5CjY1bjaLDCaBdwQF2GYvn0jsjY=)
5: vVdF_OjODbTzABBMrZJNL6HATG0.roa (hash: 6Xi4Si5ACt8P945uIvxhtizp837m5PqkOcKHPhoyDt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:3c:f1:b4:67:42:30:db:93:6d:0b:a1:ad:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
Validity
Not Before: Oct 27 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=9d788b1b2c710bdee79a51eb66dc7f5c8040d698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:36:78:e6:e7:23:6b:d0:34:55:33:80:01:77:
90:a6:5c:63:0c:62:a5:6e:d8:80:e7:0f:f1:8e:eb:
0f:3c:7d:02:d2:53:16:9d:3b:dc:0a:1a:af:39:5f:
b6:95:4d:a5:81:81:ad:6a:24:4e:95:85:87:fb:ec:
dd:34:62:a1:4f:c2:94:60:dd:e7:e9:b6:54:33:f0:
c8:e0:e7:57:31:06:f7:b5:2e:96:3f:a1:2e:e3:ea:
bb:a4:68:4d:f8:0d:e6:7e:67:1c:06:dc:9d:a1:f8:
1f:e8:82:3a:72:b1:cb:bb:c2:3f:84:7a:e6:e9:d9:
0f:9c:30:2d:d1:e4:62:b3:92:ef:6e:9f:75:b5:2e:
5d:ce:90:7e:af:ce:76:75:d2:37:32:41:0f:31:4a:
3b:4c:13:50:9c:d5:65:bc:de:2f:f4:b6:b2:8e:4b:
56:66:eb:d3:7d:10:a4:e0:ae:1c:9e:89:d1:d8:9f:
31:51:fc:31:de:86:d7:bd:30:a9:e5:01:a5:f4:96:
3d:97:27:82:a0:cd:f3:dd:58:a3:e9:b9:fd:32:57:
a8:47:2d:e7:c0:c7:86:62:b1:34:88:8c:ac:ce:e4:
85:de:e6:c8:81:05:21:70:77:5c:73:8b:40:f0:76:
f7:e4:15:f4:a6:f0:2a:67:3c:86:58:44:1d:67:70:
45:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:78:8B:1B:2C:71:0B:DE:E7:9A:51:EB:66:DC:7F:5C:80:40:D6:98
X509v3 Authority Key Identifier:
keyid:A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1c:ce:72:bb:e5:d3:eb:9f:fa:b3:72:b6:f5:90:6a:d1:48:
0f:ee:45:65:11:7e:eb:0a:fe:9d:d0:e9:a8:92:08:fe:78:29:
27:f2:01:95:27:06:4a:ed:3c:4e:ae:ad:52:dd:15:18:a2:cd:
da:e6:dc:42:d7:f4:4f:40:77:27:ee:2d:8b:2d:5c:21:5b:96:
a3:6b:ad:44:0b:d8:04:c2:fd:8d:bc:92:67:f9:0f:55:f7:95:
e5:0f:09:94:18:69:55:fc:e3:aa:bc:7c:7f:ca:be:63:d6:03:
a7:61:8f:ab:c6:9a:58:4b:9e:fb:4f:92:65:2a:84:05:8c:47:
7b:da:0a:60:69:0f:1a:df:84:38:7d:a0:bc:9c:1f:2e:ba:f0:
53:0c:d5:4d:3a:65:44:65:58:ca:57:d1:99:62:0f:76:33:3c:
56:14:ae:b6:c0:4f:72:04:8a:3d:56:59:44:37:f3:da:38:54:
d5:a0:bf:64:57:e7:0b:fc:20:90:d8:30:ba:5a:61:46:fa:04:
2a:cb:ca:37:51:7d:d7:b0:6a:d2:a9:6d:db:94:57:13:e7:4a:
e9:06:c2:18:82:7d:7e:6c:8f:ae:4d:63:fe:12:c9:4d:83:59:
c0:8f:72:54:62:38:8a:82:fb:c7:88:a2:80:61:84:9e:e2:b4:
2a:5c:5e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:41:45 2026 by rpki-client