Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File: PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier: X9vmdnzYOlxIlBUQOGv4mJgF+h3l9/u5F6R0IpEvfUc=
Subject key identifier: 70:61:DA:F5:A9:BE:2E:6C:D5:A3:53:E7:0A:BA:03:D0:99:74:AA:9C
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial: 01A12278342A04E9C685A2B09EC2AA5781A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number: 128D
Signing time: Fri 09 Oct 2026 21:01:05 +0000
Manifest this update: Fri 09 Oct 2026 21:01:05 +0000
Manifest next update: Sat 10 Oct 2026 21:01:05 +0000
Files and hashes: 1: 8kiAQtkav2NHfFCJtiBA0ERhqIA.roa (hash: F/EijD7R25vjZwA9wYF9LplNamhupuIHanpPILz4ls0=)
2: M_79XQ2SXAKWIFy3HNmBFX2YRgI.roa (hash: PQS0FU2tcc2qRmlqMUo4a/MCLdHlPpwQ5M9eqNDwavA=)
3: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: aHu0iSGFORf2XdDkWvHAI06vuENEhdS7fAYICO20LhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:78:34:2a:04:e9:c6:85:a2:b0:9e:c2:aa:57:81:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Validity
Not Before: Oct 9 21:01:05 2026 GMT
Not After : Oct 10 21:01:05 2026 GMT
Subject: CN=7061daf5a9be2e6cd5a353e70aba03d09974aa9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:e4:15:7d:6c:c2:6b:9d:8d:cc:0e:a7:4b:
59:8b:f6:75:35:7d:22:0c:03:3b:81:19:2c:c9:67:
91:05:8c:6e:d9:8c:bb:f6:1c:c0:63:b9:e6:f7:8c:
09:cc:11:e8:73:c8:0b:f3:0c:54:c2:b4:a1:c4:bd:
be:2c:95:7e:32:f2:ec:4c:20:70:bd:af:95:8b:74:
0c:8c:c1:a1:2f:1f:16:07:36:3c:38:1b:a6:0a:ac:
22:98:8f:fe:7b:30:4b:9b:09:8c:85:eb:33:70:a4:
84:72:e7:46:ce:ea:33:35:c7:76:25:ef:52:ee:03:
b4:a3:85:b2:fa:d0:55:54:61:99:8d:b1:51:4c:33:
1b:65:ae:43:85:9d:73:2a:a2:e7:64:88:e3:ef:62:
9b:c8:61:38:43:a7:05:e2:59:fe:38:eb:bc:58:dc:
77:bc:df:98:cd:2c:ae:4e:ac:ce:bf:7a:bd:c2:9f:
f6:a2:64:21:6c:f1:ad:2f:79:f2:f4:cc:26:d2:c1:
f0:61:a1:db:80:a0:f9:61:c3:55:7c:1c:57:64:9c:
a7:32:51:f1:1d:c8:96:a6:71:d8:1b:5c:8d:d7:21:
c6:19:e2:4e:e0:3d:4d:f3:65:ce:3b:35:39:02:ea:
3f:6e:29:cd:6a:5d:48:4b:69:06:29:cc:57:61:d1:
e9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:61:DA:F5:A9:BE:2E:6C:D5:A3:53:E7:0A:BA:03:D0:99:74:AA:9C
X509v3 Authority Key Identifier:
keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:76:85:d3:66:bc:a3:b1:27:2a:74:ea:fb:a1:9c:eb:be:7f:
c6:2e:4f:38:20:03:f4:2f:e1:88:38:5d:c0:50:cd:0a:50:45:
af:52:61:da:ec:f1:42:34:d1:28:61:16:72:f3:57:e8:93:08:
b1:9f:f2:ed:21:bb:2e:6c:96:b5:39:9e:04:53:25:f7:85:fd:
19:c1:9a:f6:51:f8:13:c8:cd:1a:1c:31:ba:d2:c1:b4:c4:73:
7a:b6:62:e6:22:eb:6b:ea:e2:c0:f8:f7:7e:32:90:9e:71:05:
41:4b:7c:51:7e:a3:6e:da:af:4c:ad:5c:5a:70:4d:7d:c2:8e:
93:48:4b:ff:c0:c3:1e:3c:2d:95:cc:f1:86:6c:64:c5:a0:65:
3a:d9:77:6f:a1:62:a3:7e:0c:0d:48:45:26:7d:0c:07:f5:71:
ad:4c:71:19:6d:e8:eb:8e:c5:c0:d1:d3:49:da:00:1e:05:4c:
43:70:78:de:0c:54:6c:59:44:b5:7a:fd:bf:43:98:f3:93:07:
68:aa:11:90:0a:67:2a:dc:1c:7b:19:c2:7c:8e:56:85:e2:ee:
26:63:0d:d5:86:7f:72:bf:30:fc:8a:fc:2f:fb:7b:76:66:09:
56:e6:c8:15:a4:c3:c6:7a:87:29:08:93:06:9f:b6:16:c3:29:
04:6c:59:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:37:43 2026 by rpki-client