Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
File: phFtBD5EtAQUTmpC0mqp2vU9BKc.mft (raw, json)
Hash identifier: uDDysxPd1Vd99lDpWmSBUbdjxYPMJ5owSE7kbwEIk7s=
Subject key identifier: 21:BF:06:8B:21:41:0B:F2:64:F3:20:28:55:6C:FD:16:45:F0:A6:D7
Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
Certificate issuer: /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Certificate serial: 01A1803DE1692B74EA2636A21D5B47D0948C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
Manifest number: 17E9
Signing time: Wed 28 Oct 2026 02:01:41 +0000
Manifest this update: Wed 28 Oct 2026 02:01:41 +0000
Manifest next update: Thu 29 Oct 2026 02:01:41 +0000
Files and hashes: 1: Vd994I8OewATsGGSa4zEfrPZRM0.roa (hash: XSJbo9Wc3kl6cNjQcZjvVqM+NHSEiIeknkFve8lu2PM=)
2: phFtBD5EtAQUTmpC0mqp2vU9BKc.crl (hash: JJgZN4Q+s0F1x8ukCHe4qf53uFkmjHP/w8IjBxzMOyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:e1:69:2b:74:ea:26:36:a2:1d:5b:47:d0:94:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Validity
Not Before: Oct 28 02:01:41 2026 GMT
Not After : Oct 29 02:01:41 2026 GMT
Subject: CN=21bf068b21410bf264f32028556cfd1645f0a6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:2f:24:d6:a1:41:77:7c:c6:37:65:ee:7c:
09:2e:d4:99:40:49:ec:be:f8:58:39:8f:82:a6:be:
db:62:c1:0e:5d:04:cb:e7:71:70:03:cd:e1:a7:65:
b0:c1:68:ba:01:a1:67:52:74:03:88:5d:7c:ab:6f:
14:d6:f9:6d:57:d2:df:c6:2e:48:e2:de:b0:ad:a1:
50:28:60:a4:44:76:b5:3c:8a:dd:91:3b:b5:57:46:
c5:57:5b:b5:5e:71:2b:50:2d:18:cd:66:4f:bc:58:
99:8e:3b:62:c9:55:fe:57:f6:8a:31:b2:b0:32:78:
fa:f8:73:b8:e5:9f:cb:70:07:a1:6b:eb:3c:cc:1d:
1c:0c:c7:96:22:75:31:9e:04:89:a1:f8:f2:87:d4:
41:66:91:d3:bb:85:e3:df:d8:24:67:02:0b:3b:59:
5a:35:49:78:ad:11:14:e4:61:3c:cc:ce:af:d8:07:
13:84:fc:99:da:de:6e:50:6a:31:52:75:8f:ed:50:
1a:c7:43:cf:a6:3f:64:5f:fc:f0:60:21:ff:9d:1b:
96:aa:29:c0:7a:d6:30:77:91:75:1c:f4:83:d1:97:
c7:a8:a2:53:a3:e9:14:07:9e:f7:ac:ed:21:83:ad:
fa:84:0c:dd:7a:f4:56:4b:36:59:ef:ab:e0:3f:7b:
4c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BF:06:8B:21:41:0B:F2:64:F3:20:28:55:6C:FD:16:45:F0:A6:D7
X509v3 Authority Key Identifier:
keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:96:62:48:70:6b:89:83:95:cd:6c:ee:47:dc:fb:4c:35:fd:
d7:1a:41:22:c5:ee:97:8b:6b:61:0f:63:d3:64:e1:fb:25:5c:
63:cf:a3:d5:2f:d8:af:b3:2e:0d:b1:41:c3:74:0c:e7:a0:11:
1d:3a:bc:cc:10:56:0f:65:c2:dd:70:d3:eb:1c:55:b7:d9:3d:
7a:f6:a9:cf:23:67:ad:48:e5:27:70:ab:ec:c8:4f:78:ac:c1:
af:7b:b8:6f:3f:e9:f5:19:59:33:1c:25:c0:20:c6:89:c7:fa:
1b:98:c3:85:82:d0:fb:5d:63:5d:58:83:11:2d:b3:eb:fc:b6:
8e:bf:58:66:c9:e6:c2:40:33:92:8d:08:60:41:d8:a0:af:40:
7d:47:f1:41:b5:2f:33:03:63:b2:4f:b9:36:7f:9b:d1:bb:b4:
ef:c8:4c:e6:c1:4b:6d:15:1a:0d:de:c1:25:3d:14:42:87:cd:
68:ba:de:4d:84:3c:2b:8d:a3:1f:ef:50:20:aa:65:c3:ca:35:
da:5d:30:e2:11:6e:b7:8a:b4:39:f0:d3:94:8a:e6:65:6b:09:
11:f4:f6:2e:f0:78:43:48:bc:5c:c9:5e:e1:1d:44:5a:5f:b2:
16:73:7b:43:72:85:33:ca:09:7e:b5:15:78:5a:d2:60:a0:60:
7f:6d:7f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:20:53 2026 by rpki-client