Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
File: pHwKyKnV9ixJHUsXyyErUsDnVgc.mft (raw, json)
Hash identifier: kLQoHLtFWLkn7XC+2JGSW+ugsxB63MSmDo4oBYdJ3U8=
Subject key identifier: 6D:0D:4A:8A:A5:FD:11:0A:EA:24:6D:94:70:BB:32:CD:D1:C5:99:DB
Authority key identifier: A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07
Certificate issuer: /CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607
Certificate serial: 019D27E02EAE982255792EDD2B7B9D7D6633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
Manifest number: 14CA
Signing time: Thu 26 Mar 2026 02:01:36 +0000
Manifest this update: Thu 26 Mar 2026 02:01:36 +0000
Manifest next update: Fri 27 Mar 2026 02:01:36 +0000
Files and hashes: 1: mSRNwBt4HyvxOKDrOMFnswIgda4.roa (hash: 7d61GNgLmLVgIgZ3h9dpanvVUYVfZYRsvyeUkivWWd4=)
2: pHwKyKnV9ixJHUsXyyErUsDnVgc.crl (hash: 0ES1vz2E9rnaTydb3wWJomHJgs+PH4w6FmjqCuwdOlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:2e:ae:98:22:55:79:2e:dd:2b:7b:9d:7d:66:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607
Validity
Not Before: Mar 26 02:01:36 2026 GMT
Not After : Mar 27 02:01:36 2026 GMT
Subject: CN=6d0d4a8aa5fd110aea246d9470bb32cdd1c599db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:c6:98:e6:7a:c9:04:a6:62:ba:31:14:bf:
a5:54:02:bd:05:1d:6f:10:7e:bf:2b:8b:c4:b6:08:
d9:e2:0e:de:20:e3:bc:92:94:4b:82:3c:90:86:b3:
a9:21:57:88:05:b7:fa:ca:e9:de:68:1e:ad:1a:00:
f2:25:f2:83:89:2d:1d:e5:ab:a7:de:ea:17:75:c3:
d1:de:19:8e:43:8a:81:55:c6:d6:f8:d6:ac:9b:b2:
57:ad:41:cb:a8:ad:f2:c4:20:61:ad:de:91:85:ac:
76:f9:0b:96:47:58:ea:66:46:34:93:78:14:81:70:
93:1e:cb:9a:87:5b:aa:90:bf:4d:3b:08:fb:84:fa:
c7:eb:2d:e5:8a:c1:db:77:c3:23:7e:21:2b:6d:6e:
a6:dc:0c:4b:9e:d7:e2:64:e6:d6:6d:59:80:3b:91:
4f:aa:a2:92:60:1d:1b:c8:ea:c5:da:cb:26:c5:b0:
e0:03:93:b4:f0:78:22:2c:2e:34:64:fe:0a:b9:be:
e4:3a:d5:a8:8a:bf:4d:a6:3d:07:57:dd:70:5e:71:
1c:be:46:8f:f8:f6:ba:bf:20:22:60:c1:26:f5:7f:
90:93:b0:b4:d0:28:8c:d5:e3:a9:69:57:c9:a2:66:
57:8e:a8:2b:03:f0:9d:94:70:4d:1c:4e:2d:a6:5e:
4a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0D:4A:8A:A5:FD:11:0A:EA:24:6D:94:70:BB:32:CD:D1:C5:99:DB
X509v3 Authority Key Identifier:
keyid:A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5a:1f:82:80:53:a0:ec:4d:86:da:6f:82:fb:d8:0f:c6:4a:
82:51:86:fd:69:a1:dc:ef:2e:c6:b1:58:d4:1b:c4:01:9e:91:
e3:8f:74:7c:15:1f:c3:d7:a1:13:25:e8:55:fa:28:48:22:5d:
71:5f:3b:8c:5d:dc:be:47:ad:15:3a:01:f3:47:f0:7a:fa:07:
64:57:ec:65:a4:30:10:c9:09:9a:1a:67:f0:f2:ad:66:18:40:
c2:b6:12:87:b6:43:77:35:af:d4:5f:b0:f6:10:e6:03:0c:eb:
bc:07:ab:f8:11:be:7e:25:98:1a:5b:b2:cf:0f:64:b8:f0:33:
be:d0:4c:23:5b:01:f6:7f:e9:3a:34:be:3f:40:3d:82:17:e4:
02:95:58:41:62:0a:d5:53:ce:c4:9f:47:77:e9:7f:ad:44:ec:
c2:5b:03:3b:e6:c8:48:c6:6d:e3:38:4f:14:fd:f2:ac:e9:a7:
63:23:bb:96:6d:46:69:fe:8a:22:26:4e:16:5d:04:76:02:d3:
63:f5:18:49:b2:79:a4:cf:3e:68:fc:a8:35:76:b7:25:65:e2:
8a:b4:17:ae:c6:a5:02:9d:16:4c:c0:c3:5f:16:4b:44:9e:b4:
0b:15:ca:4a:36:d0:42:3a:79:e8:cf:d8:ce:6d:8c:ed:6a:4f:
dd:2a:fd:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4C6umCJVeS7dK3udfWYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0N2MwYWM4YTlkNWY2MmM0OTFkNGIxN2NiMjEyYjUyYzBl
NzU2MDcwHhcNMjYwMzI2MDIwMTM2WhcNMjYwMzI3MDIwMTM2WjAzMTEwLwYDVQQD
Eyg2ZDBkNGE4YWE1ZmQxMTBhZWEyNDZkOTQ3MGJiMzJjZGQxYzU5OWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv17GmOZ6yQSmYroxFL+lVAK9BR1v
EH6/K4vEtgjZ4g7eIOO8kpRLgjyQhrOpIVeIBbf6yuneaB6tGgDyJfKDiS0d5aun
3uoXdcPR3hmOQ4qBVcbW+Nasm7JXrUHLqK3yxCBhrd6Rhax2+QuWR1jqZkY0k3gU
gXCTHsuah1uqkL9NOwj7hPrH6y3lisHbd8MjfiErbW6m3AxLntfiZObWbVmAO5FP
qqKSYB0byOrF2ssmxbDgA5O08HgiLC40ZP4Kub7kOtWoir9Npj0HV91wXnEcvkaP
+Pa6vyAiYMEm9X+Qk7C00CiM1eOpaVfJomZXjqgrA/CdlHBNHE4tpl5KSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0NSoql/REK6iRtlHC7Ms3RxZnbMB8GA1UdIwQY
MBaAFKR8Csip1fYsSR1LF8shK1LA51YHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yNWM5MWQtNWEwNS00NmEyLTlhNzkt
NDIwY2MyNTFlNWViLzEvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8yNWM5MWQtNWEwNS00NmEyLTlhNzktNDIwY2MyNTFlNWVi
LzEvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVofgoBT
oOxNhtpvgvvYD8ZKglGG/Wmh3O8uxrFY1BvEAZ6R4490fBUfw9ehEyXoVfooSCJd
cV87jF3cvketFToB80fwevoHZFfsZaQwEMkJmhpn8PKtZhhAwrYSh7ZDdzWv1F+w
9hDmAwzrvAer+BG+fiWYGluyzw9kuPAzvtBMI1sB9n/pOjS+P0A9ghfkApVYQWIK
1VPOxJ9Hd+l/rUTswlsDO+bISMZt4zhPFP3yrOmnYyO7lm1Gaf6KIiZOFl0EdgLT
Y/UYSbJ5pM8+aPyoNXa3JWXiirQXrsalAp0WTMDDXxZLRJ60CxXKSjbQQjp56M/Y
zm2M7WpP3Sr92A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:29 2026 by rpki-client