Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
File: phFtBD5EtAQUTmpC0mqp2vU9BKc.mft (raw, json)
Hash identifier: kKhWdCdLwmgBDCJvQeK3sqiv82WOLpZcB1s0wTMC9aU=
Subject key identifier: 7F:42:C8:B0:4E:21:25:BE:5C:6E:CD:08:FC:BC:BA:2B:8A:7A:12:F9
Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
Certificate issuer: /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Certificate serial: 019D25F1EDEE4D959504685AE4934EBF135C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
Manifest number: 15A8
Signing time: Wed 25 Mar 2026 17:01:45 +0000
Manifest this update: Wed 25 Mar 2026 17:01:45 +0000
Manifest next update: Thu 26 Mar 2026 17:01:45 +0000
Files and hashes: 1: Vd994I8OewATsGGSa4zEfrPZRM0.roa (hash: XSJbo9Wc3kl6cNjQcZjvVqM+NHSEiIeknkFve8lu2PM=)
2: phFtBD5EtAQUTmpC0mqp2vU9BKc.crl (hash: bD/0ye7f3K6q8NPWTW1kzr6SN7wQJiCrEsd18NRKAkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ed:ee:4d:95:95:04:68:5a:e4:93:4e:bf:13:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Validity
Not Before: Mar 25 17:01:45 2026 GMT
Not After : Mar 26 17:01:45 2026 GMT
Subject: CN=7f42c8b04e2125be5c6ecd08fcbcba2b8a7a12f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:c7:11:5c:bd:3e:51:4a:dc:d9:60:20:cf:
7f:4b:a3:f0:ba:d6:cf:66:f0:42:ef:7c:af:0b:58:
65:e6:07:18:f1:57:58:3d:a4:5a:12:b9:19:ee:49:
a2:cd:07:af:8d:ab:b6:aa:cd:b1:d4:09:e5:2d:fd:
39:a9:8a:6c:4d:ce:17:32:9c:10:d3:2f:3d:d0:02:
c4:7f:b3:5f:c4:9e:8f:40:2a:6d:30:ea:68:e0:82:
a0:a1:9a:0e:80:27:f3:ec:6b:78:74:08:f1:96:9d:
63:5f:60:8c:6b:ce:2a:06:22:3d:5b:49:68:e2:1c:
45:67:45:60:a7:1b:9a:da:be:f9:38:35:00:5e:c4:
a3:18:32:15:80:8c:ab:86:6a:29:d5:ac:3e:29:f8:
bd:5f:81:23:96:8a:c4:b5:20:a2:ea:c3:4d:7f:da:
7e:a7:7b:9a:61:8a:56:d2:1b:2d:a8:c1:3d:f7:a7:
75:d8:bb:27:e4:07:db:21:43:f9:b4:29:02:60:ba:
69:82:85:55:23:c3:5e:33:51:d7:ad:de:67:cc:33:
6b:ce:81:c7:64:58:b2:48:8a:ec:30:4a:41:d8:b0:
43:57:71:01:fe:70:62:a8:cf:c5:5a:2b:ff:ec:3a:
8b:22:eb:bf:8c:7d:28:a5:1f:34:48:15:1e:b2:7c:
29:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:42:C8:B0:4E:21:25:BE:5C:6E:CD:08:FC:BC:BA:2B:8A:7A:12:F9
X509v3 Authority Key Identifier:
keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9a:ae:c3:94:b7:69:0b:93:6a:36:08:d2:22:b9:a2:f1:4c:
fe:aa:f7:9c:b3:57:dd:09:14:7d:2a:70:8e:e8:1d:af:c0:53:
5b:41:e7:c6:c3:14:8d:4e:f7:4f:7a:05:fe:c2:98:70:4a:c5:
1a:23:90:1c:30:04:af:c1:12:79:55:82:6c:8a:ea:96:3f:cc:
21:df:61:73:0c:3a:24:26:b8:61:98:59:09:93:53:ee:df:a7:
e5:70:93:11:29:f6:53:c7:9b:f9:c4:00:e9:b0:1c:17:9e:bd:
28:bc:61:cc:bf:0e:2d:11:84:1b:c2:61:d0:97:45:42:19:f9:
23:59:df:af:a7:f6:a1:82:c6:38:12:9e:33:5a:53:27:51:62:
be:c1:6d:14:e0:00:89:87:75:17:6f:9e:3b:85:30:58:1e:55:
55:d0:42:aa:74:e5:65:94:5b:6f:c1:23:5e:e5:f6:77:c4:5a:
b5:50:b1:fe:70:50:fd:fb:93:aa:b4:65:62:04:a6:c1:b6:d7:
83:36:21:e7:3f:0d:ed:4b:52:8e:99:56:1b:83:c2:67:02:2b:
43:91:83:08:97:c3:10:45:1a:0f:cd:0b:25:5e:b2:d8:c3:e7:
f9:b9:8e:f4:9b:c0:e2:d5:d8:95:f1:eb:85:09:7d:c5:85:6d:
f3:52:35:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8e3uTZWVBGha5JNOvxNcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MTE2ZDA0M2U0NGI0MDQxNDRlNmE0MmQyNmFhOWRhZjUz
ZDA0YTcwHhcNMjYwMzI1MTcwMTQ1WhcNMjYwMzI2MTcwMTQ1WjAzMTEwLwYDVQQD
Eyg3ZjQyYzhiMDRlMjEyNWJlNWM2ZWNkMDhmY2JjYmEyYjhhN2ExMmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLrHEVy9PlFK3NlgIM9/S6PwutbP
ZvBC73yvC1hl5gcY8VdYPaRaErkZ7kmizQevjau2qs2x1AnlLf05qYpsTc4XMpwQ
0y890ALEf7NfxJ6PQCptMOpo4IKgoZoOgCfz7Gt4dAjxlp1jX2CMa84qBiI9W0lo
4hxFZ0Vgpxua2r75ODUAXsSjGDIVgIyrhmop1aw+Kfi9X4EjlorEtSCi6sNNf9p+
p3uaYYpW0hstqME996d12Lsn5AfbIUP5tCkCYLppgoVVI8NeM1HXrd5nzDNrzoHH
ZFiySIrsMEpB2LBDV3EB/nBiqM/FWiv/7DqLIuu/jH0opR80SBUesnwpbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9CyLBOISW+XG7NCPy8uiuKehL5MB8GA1UdIwQY
MBaAFKYRbQQ+RLQEFE5qQtJqqdr1PQSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yNTBkYzgtMDcwMS00MjdhLWE4OWQt
NDNmNWJjZjY3NzVkLzEvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8yNTBkYzgtMDcwMS00MjdhLWE4OWQtNDNmNWJjZjY3NzVk
LzEvcGhGdEJENUV0QVFVVG1wQzBtcXAydlU5QktjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5quw5S3
aQuTajYI0iK5ovFM/qr3nLNX3QkUfSpwjugdr8BTW0HnxsMUjU73T3oF/sKYcErF
GiOQHDAEr8ESeVWCbIrqlj/MId9hcww6JCa4YZhZCZNT7t+n5XCTESn2U8eb+cQA
6bAcF569KLxhzL8OLRGEG8Jh0JdFQhn5I1nfr6f2oYLGOBKeM1pTJ1FivsFtFOAA
iYd1F2+eO4UwWB5VVdBCqnTlZZRbb8EjXuX2d8RatVCx/nBQ/fuTqrRlYgSmwbbX
gzYh5z8N7UtSjplWG4PCZwIrQ5GDCJfDEEUaD80LJV6y2MPn+bmO9JvA4tXYlfHr
hQl9xYVt81I1NA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:20 2026 by rpki-client