Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
File: pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft (raw, json)
Hash identifier: XsisFwaYIYoLoKnGfBlGlCjkR2NzcgbbBxEyntWq/s0=
Subject key identifier: 5B:C5:B9:6F:C9:D8:B6:5E:CB:85:9F:30:3C:E6:61:A0:B5:1B:19:B5
Authority key identifier: A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0
Certificate issuer: /CN=a475e651f81aab603392f25521b7c9ab5bd281c0
Certificate serial: 01A1773A4E8CD036E6639320308CFE3C49D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
Manifest number: 08EE
Signing time: Mon 26 Oct 2026 08:01:12 +0000
Manifest this update: Mon 26 Oct 2026 08:01:12 +0000
Manifest next update: Tue 27 Oct 2026 08:01:12 +0000
Files and hashes: 1: pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl (hash: 4z5Xbo1dG5ARKVJIRg/XX1M9X2KfQP81rkK08a7SSsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:3a:4e:8c:d0:36:e6:63:93:20:30:8c:fe:3c:49:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a475e651f81aab603392f25521b7c9ab5bd281c0
Validity
Not Before: Oct 26 08:01:12 2026 GMT
Not After : Oct 27 08:01:12 2026 GMT
Subject: CN=5bc5b96fc9d8b65ecb859f303ce661a0b51b19b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:00:cf:27:76:d5:a3:48:2e:44:15:a9:47:
de:13:35:a5:91:32:c8:4d:d8:7b:2a:b9:11:c0:94:
37:f2:9d:82:5b:5d:04:58:27:9e:56:1a:99:5b:f5:
0d:ad:c5:62:1c:bd:73:13:cb:40:e3:e0:c2:e1:9a:
cd:dd:d7:a8:13:19:c1:48:90:0c:b9:19:51:c8:47:
c3:79:08:e6:84:08:a5:c0:fd:8f:b0:87:dc:13:cd:
5a:97:18:f3:98:96:f0:eb:64:5a:e0:0e:4f:1a:e6:
8f:36:5d:3f:af:db:34:51:60:4b:57:e3:cb:9b:33:
ea:39:92:35:9a:dc:3d:cc:1d:61:08:f5:7d:c5:4a:
1d:f6:6c:27:f9:ac:72:dd:c5:d5:60:59:2c:6e:b8:
d4:33:fe:9a:8c:8a:29:c6:10:ee:77:bf:e6:66:a0:
d5:85:01:8f:5c:6d:20:c8:89:23:4e:a2:41:1d:b6:
62:79:a6:de:71:35:a6:19:f9:8f:30:20:c3:a2:2e:
4d:6c:1c:33:91:c0:4b:d4:eb:fe:9a:50:8b:bb:4c:
86:64:06:53:56:d1:6c:21:f9:04:73:b5:20:e5:c8:
6e:65:25:88:89:ba:7b:23:ea:3e:8d:f8:5a:be:d3:
ef:c7:aa:d8:07:41:8b:ed:7b:7e:1b:c0:c1:ba:76:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C5:B9:6F:C9:D8:B6:5E:CB:85:9F:30:3C:E6:61:A0:B5:1B:19:B5
X509v3 Authority Key Identifier:
keyid:A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:57:28:61:4d:63:ce:80:e7:0e:7b:4d:54:f4:5d:07:28:16:
f4:a0:32:65:7e:c3:c8:f9:61:e5:bb:78:d0:4d:87:1b:53:2f:
c9:d8:64:3d:8c:15:44:96:80:00:b9:a1:0c:d6:61:40:4b:00:
03:ec:ae:7f:02:2d:03:30:81:cc:a8:89:38:54:6d:31:42:e9:
4f:2d:eb:19:00:31:3b:78:72:cb:e5:86:f8:51:f5:43:a6:0f:
7f:96:60:29:97:ab:08:2e:c2:00:16:9e:1d:66:b4:e2:69:91:
1a:62:90:95:3e:25:68:e1:3e:58:88:a8:e2:d0:d0:25:b5:b2:
04:3d:2e:d9:18:c7:6c:54:14:50:92:a5:1c:e7:f1:03:6d:3a:
b0:1b:d7:3b:80:dc:c4:1c:e3:b0:ab:94:b5:53:8c:5c:65:2c:
cc:e9:d0:32:ee:16:81:3d:9d:0c:7a:34:be:6c:8f:b0:cf:75:
27:f9:9f:03:21:b0:9e:ad:58:30:51:a4:b6:77:3a:be:4a:5c:
c3:ad:77:87:57:24:b7:f5:5d:1d:c8:96:ed:c0:c0:c1:f6:7a:
f0:9a:e6:39:d6:3b:44:5c:49:b2:3c:04:f9:e7:c7:47:b5:c7:
03:df:ff:35:f2:50:12:af:21:30:00:58:37:88:bf:6f:1b:f2:
ed:ed:a3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:35:52 2026 by rpki-client