Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
File: PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft (raw, json)
Hash identifier: kZmpSmseVpgq0MBbhG/2WHM/SC/FvhGXy70JcxiBM8M=
Subject key identifier: EB:B7:3B:6F:9F:46:AB:03:5E:98:46:AC:94:18:A1:63:D7:4B:0F:57
Authority key identifier: 3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
Certificate issuer: /CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Certificate serial: 01A16421A0E5CE746E80143303F3EC2E7263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
Manifest number: 1AB7
Signing time: Thu 22 Oct 2026 15:01:27 +0000
Manifest this update: Thu 22 Oct 2026 15:01:27 +0000
Manifest next update: Fri 23 Oct 2026 15:01:27 +0000
Files and hashes: 1: 1xqmHjBaKcMyTJZdSE2Mikxpy18.roa (hash: 6ArzK/gUzadt//cwGYXOOVpodg4RUZSaD7178EluHbg=)
2: PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl (hash: ROyPjfM2gpIZZj2u20+H9p3KKNtdhjudlRLQWyzkAeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 15:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:21:a0:e5:ce:74:6e:80:14:33:03:f3:ec:2e:72:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Validity
Not Before: Oct 22 15:01:27 2026 GMT
Not After : Oct 23 15:01:27 2026 GMT
Subject: CN=ebb73b6f9f46ab035e9846ac9418a163d74b0f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:d8:c3:42:22:fd:78:39:03:66:74:ba:d3:
93:aa:ae:a8:2e:68:65:c9:21:ac:82:a4:5b:ad:44:
d7:1d:a0:da:84:15:94:bb:f2:a8:d1:96:9e:e5:77:
b2:69:18:45:c8:da:04:7b:b3:59:6c:6d:7e:da:71:
0d:65:97:95:cf:82:5d:27:30:a0:12:ba:f0:dd:5c:
71:67:37:d8:fc:d8:0d:7e:68:8d:54:25:2f:77:57:
d4:f7:b9:a7:27:c1:fe:d4:b5:64:9f:73:e1:02:60:
ec:a2:56:0d:a2:fe:e3:44:48:d5:02:d6:95:c5:be:
07:d5:5d:6f:09:fb:f0:94:d0:32:9f:09:e9:cc:47:
09:08:32:3f:da:45:a3:e3:1f:9e:34:ac:06:9f:d1:
07:55:91:e3:a7:ef:ec:da:a3:12:7b:0d:2a:92:89:
32:04:2e:14:8d:9d:b4:45:39:5d:84:c8:5a:4b:eb:
6a:f6:6e:f9:23:2e:c8:b1:0e:9b:c9:24:c9:3a:97:
cd:a2:6d:2f:be:2e:ad:f2:ee:73:04:11:e2:ab:c6:
b1:09:3c:3f:48:cf:3e:0d:54:d1:04:a9:22:c2:0a:
54:b1:21:67:58:39:42:fa:02:99:2a:1b:1d:c3:6d:
23:af:a8:2f:5e:27:4c:d5:a9:ee:66:f8:78:ad:89:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B7:3B:6F:9F:46:AB:03:5E:98:46:AC:94:18:A1:63:D7:4B:0F:57
X509v3 Authority Key Identifier:
keyid:3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d8:0b:72:79:a4:4b:fe:5f:92:d0:62:2a:bb:cb:f5:0f:a0:
88:f9:29:8b:07:25:8c:b5:e4:3b:8d:8f:f7:15:6f:fc:ec:89:
6f:37:b9:74:87:e8:61:61:14:a8:0f:8e:59:90:d7:1e:0b:e2:
59:c6:bb:9d:36:88:1c:88:0a:05:fe:24:fc:3b:91:3e:02:6d:
a1:b0:6c:30:c7:00:18:c9:7e:ca:bc:0b:fa:f0:cd:7e:fa:57:
0f:d1:f4:58:f7:30:fc:09:c0:2d:b6:8e:5d:63:68:b8:f7:58:
d6:de:71:c3:ec:68:1f:6a:ce:95:07:d9:d4:ad:79:c6:2a:b0:
ae:77:b3:b4:c2:8e:f1:82:95:b3:91:7a:f6:7e:65:4d:fa:69:
8e:2d:1f:77:b6:eb:d4:28:01:69:71:e2:f0:43:f9:90:43:52:
8f:3d:26:e3:e3:00:2e:14:fe:a2:4b:bb:e0:ea:a8:bf:b7:d6:
2d:e5:bc:93:15:af:fa:e2:7a:8d:cd:c1:cd:98:47:e2:74:e8:
70:cf:ca:5a:49:b1:07:e0:05:bc:c7:97:06:1c:c7:4b:e8:08:
0f:55:16:ee:c0:93:77:ca:63:0e:71:d7:0d:bf:b2:36:29:d5:
69:6d:9d:17:13:de:b4:f2:41:46:fc:b6:e1:af:4d:ba:95:05:
fa:2c:d7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 23:01:33 2026 by rpki-client