Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
File: pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft (raw, json)
Hash identifier: t8ZADzg8nqIMzQPzMssUMF0G0bhdDjsd9G4I2F4MCiY=
Subject key identifier: 81:23:07:7A:F8:97:DD:57:E5:BA:01:42:CE:5D:66:D3:E8:1B:F2:3C
Authority key identifier: A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0
Certificate issuer: /CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
Certificate serial: 019F12D34CE36FC9C16E3D775BEF59273514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 10:01:05 +0000
Manifest this update: Mon 29 Jun 2026 10:01:05 +0000
Manifest next update: Tue 30 Jun 2026 10:01:05 +0000
Files and hashes: 1: 6OdumX9U3TNQ_BDfNTi9HAvC11E.roa (hash: 479EKbeun2aU00GF/z6lmnGk3H57D4kV5EAf3nlCMns=)
2: DlfCFhfqG3PINgL1jVCPcztdoAU.roa (hash: Lc7oVL7OUAbKr2SuVV49BF7ImGTSykw2iB7rEU3+4QU=)
3: fGSwmaJ6zM1DpnuBUiGrnAtIJmI.roa (hash: hb+BTTHKLxaTOIRsq5LjyfLTjd9bL73/5kVitKWagAI=)
4: pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl (hash: z5+FT+SUSbgn0/epkOwGy8NzOMJckaH3AN3GwfYZYMs=)
5: vVdF_OjODbTzABBMrZJNL6HATG0.roa (hash: 6Xi4Si5ACt8P945uIvxhtizp837m5PqkOcKHPhoyDt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:4c:e3:6f:c9:c1:6e:3d:77:5b:ef:59:27:35:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
Validity
Not Before: Jun 29 10:01:05 2026 GMT
Not After : Jun 30 10:01:05 2026 GMT
Subject: CN=8123077af897dd57e5ba0142ce5d66d3e81bf23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:4b:74:95:6b:69:12:8b:47:0d:4a:e8:e5:
f7:c3:4c:3e:dc:4f:53:65:9a:af:ba:ac:fc:fb:97:
34:5b:8f:1d:c4:c6:2f:a7:d1:86:ca:d4:1e:a7:7a:
4e:22:37:12:ed:64:6b:50:c6:19:9f:69:00:f0:12:
31:46:e1:13:8b:c7:98:64:2b:3d:58:f7:31:0e:01:
03:45:ee:18:7c:ad:90:a5:18:ce:a9:b3:e9:ab:a8:
6d:a5:8d:24:f3:48:ff:36:99:1e:81:34:20:16:38:
07:15:0d:ee:f5:ab:ad:5d:d6:6d:7e:16:b3:c9:62:
ce:87:5a:b4:1e:19:53:dd:8b:99:f0:c5:88:94:e2:
4c:f8:f6:8a:38:0c:00:44:8f:cc:96:52:bd:32:de:
29:72:61:b1:79:20:6a:a1:46:51:a7:f8:52:03:ab:
ea:51:88:51:62:d5:b1:f2:3c:19:b0:ec:a7:fe:d5:
ca:62:6c:69:a1:61:1c:ef:58:13:43:84:a7:fe:e4:
6d:0f:bc:b5:67:69:df:bc:94:b8:70:fd:a0:13:99:
d9:dc:b6:12:58:e8:85:27:39:55:c3:33:4a:5f:31:
56:e6:90:e3:78:64:99:8d:75:4a:a6:d9:65:d7:57:
a2:f1:ff:64:3f:99:51:c0:61:67:64:dd:92:51:34:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:23:07:7A:F8:97:DD:57:E5:BA:01:42:CE:5D:66:D3:E8:1B:F2:3C
X509v3 Authority Key Identifier:
keyid:A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:91:74:b9:b2:72:f1:c0:1f:b5:f6:5d:ec:24:0d:23:17:11:
5f:9d:ac:17:80:8c:d5:bd:41:e4:a9:2d:2d:a7:e6:f8:b0:e2:
7e:8d:69:33:fa:9e:5f:43:9a:b1:0a:f0:a8:e2:32:d7:e7:90:
c2:10:71:1d:14:8c:c6:62:79:ba:eb:89:7c:e3:cd:2e:e4:b7:
a3:99:70:21:3d:04:c9:7b:b0:8a:9f:de:21:1c:04:82:01:2c:
a8:32:c3:44:e7:95:fa:09:a6:1c:a0:1a:eb:3b:ff:d7:4d:fa:
42:45:dd:f0:2d:4d:d3:11:27:75:07:3f:46:f2:45:4e:5c:3c:
fb:c4:55:6c:e5:2f:c7:c6:20:37:02:cc:b8:20:0d:b9:06:5a:
98:b9:1f:22:2e:13:66:bf:f5:49:81:53:1f:a5:fa:a4:3b:51:
8e:23:03:36:3c:e8:c4:72:bf:4f:5b:5d:99:94:6f:48:ed:f7:
55:be:33:de:8f:47:95:9d:aa:c0:a1:66:ff:fa:7d:2d:ab:ff:
b9:a9:c2:a1:b9:1e:b2:a2:2e:d3:d1:27:b6:bc:5c:83:c2:18:
00:45:37:34:9f:04:1f:24:dd:d2:1d:10:e9:d2:56:ad:23:2c:
2a:1f:85:ab:6c:ba:ec:b7:b1:13:4b:1a:65:20:1f:c7:d6:c9:
f0:48:78:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:29:38 2026 by rpki-client