Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/674dcc-2b5c-417a-8ef9-544c38317564/1/ph_nf7eOlJzUa5jca7nILIGKOtA.mft
File: ph_nf7eOlJzUa5jca7nILIGKOtA.mft (raw, json)
Hash identifier: z9FmoPaTbBKbIBWHTEoOKcEowx7n3VOKUDSo8N1sVo8=
Subject key identifier: CF:83:2B:FC:F3:6F:C1:80:AE:C5:B4:22:AD:2F:42:77:25:D9:E5:78
Authority key identifier: A6:1F:E7:7F:B7:8E:94:9C:D4:6B:98:DC:6B:B9:C8:2C:81:8A:3A:D0
Certificate issuer: /CN=a61fe77fb78e949cd46b98dc6bb9c82c818a3ad0
Certificate serial: 019D337638D5DBE3AD8E7CE78AAD9D7E8B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ph_nf7eOlJzUa5jca7nILIGKOtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/674dcc-2b5c-417a-8ef9-544c38317564/1/ph_nf7eOlJzUa5jca7nILIGKOtA.mft
Manifest number: 28
Signing time: Sat 28 Mar 2026 08:01:18 +0000
Manifest this update: Sat 28 Mar 2026 08:01:18 +0000
Manifest next update: Sun 29 Mar 2026 08:01:18 +0000
Files and hashes: 1: PrBQZObLRS8-7Om1E1-4U8i6lWo.roa (hash: JBCAfiaAJXri8pwh7MhRNEqe9ZCw5YBOEy5ZcQRbRYk=)
2: ph_nf7eOlJzUa5jca7nILIGKOtA.crl (hash: 5PZGQEKm9C+woWn9SRIoawgl9nvuQlgp9pU1O1rf3eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/674dcc-2b5c-417a-8ef9-544c38317564/1/ph_nf7eOlJzUa5jca7nILIGKOtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/674dcc-2b5c-417a-8ef9-544c38317564/1/ph_nf7eOlJzUa5jca7nILIGKOtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ph_nf7eOlJzUa5jca7nILIGKOtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:38:d5:db:e3:ad:8e:7c:e7:8a:ad:9d:7e:8b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61fe77fb78e949cd46b98dc6bb9c82c818a3ad0
Validity
Not Before: Mar 28 08:01:18 2026 GMT
Not After : Mar 29 08:01:18 2026 GMT
Subject: CN=cf832bfcf36fc180aec5b422ad2f427725d9e578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:1a:8b:e3:4f:b1:4f:95:57:aa:a4:10:b5:
ec:b9:e1:64:3a:24:f9:b7:ce:33:f4:e1:5a:d5:ab:
3b:52:f1:28:36:61:89:1e:5c:6b:66:07:f4:44:49:
1c:61:aa:f4:66:d9:46:6c:5f:2e:50:b3:ba:0a:f1:
c4:28:2c:8a:c8:29:68:2d:62:68:46:9e:23:6d:54:
47:66:63:60:b6:db:38:cb:8b:21:21:27:7b:6c:00:
ba:a5:34:82:48:e0:d8:85:a4:56:fa:bf:7f:47:30:
77:b2:f0:f5:5e:dd:a6:31:f2:eb:f8:8b:08:8a:6e:
ab:5b:15:12:14:46:8f:56:70:b6:5d:fb:a8:b9:d1:
6c:5e:f2:55:3e:c0:6a:e4:32:37:d8:21:00:a2:3a:
e9:50:03:41:d4:93:39:26:20:f1:3c:1f:03:6e:cc:
c7:46:75:c6:7f:19:1f:fd:a5:5c:78:91:8f:c3:cb:
09:79:26:ae:97:25:c3:e2:54:82:e7:16:10:93:5e:
3b:f4:e3:e5:09:0c:f1:0c:43:b8:26:eb:41:48:96:
4c:64:09:7c:a2:1a:31:2b:7b:74:87:dd:18:d8:78:
7e:24:d1:dc:1b:c6:64:ec:40:11:40:49:8b:a9:35:
b1:1d:42:2d:a0:43:08:6a:92:c4:11:9b:ab:81:ea:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:83:2B:FC:F3:6F:C1:80:AE:C5:B4:22:AD:2F:42:77:25:D9:E5:78
X509v3 Authority Key Identifier:
keyid:A6:1F:E7:7F:B7:8E:94:9C:D4:6B:98:DC:6B:B9:C8:2C:81:8A:3A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ph_nf7eOlJzUa5jca7nILIGKOtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/674dcc-2b5c-417a-8ef9-544c38317564/1/ph_nf7eOlJzUa5jca7nILIGKOtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/674dcc-2b5c-417a-8ef9-544c38317564/1/ph_nf7eOlJzUa5jca7nILIGKOtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f1:12:69:f5:ec:3b:ca:e3:02:ff:63:5c:4d:91:29:02:59:
93:67:e0:1e:e8:94:66:80:66:0d:b6:e4:8f:3b:c5:1a:18:18:
7e:df:d5:ce:c2:e7:c5:85:01:53:b7:98:fa:f8:78:aa:8a:00:
e5:76:f5:0a:51:74:04:b4:c3:ad:99:1d:1b:d5:93:1a:35:90:
93:cb:b7:45:89:a3:d0:dc:5a:0e:c1:5f:34:b1:2a:36:06:83:
21:25:b4:72:36:20:ad:53:af:61:68:db:a3:2c:e1:7f:86:a6:
23:16:64:63:64:f0:5f:c2:76:dd:c2:f4:43:1c:53:8a:3a:50:
32:68:15:5c:d7:18:5d:01:86:24:10:1b:6c:93:53:f3:ab:69:
0d:7a:e9:40:ff:dc:39:99:82:7d:89:e1:4d:0a:7a:f9:72:c5:
47:ed:81:ff:93:b0:f7:56:e1:98:c6:c6:cb:42:06:1e:8b:76:
27:61:79:12:ce:da:19:d4:2b:1d:6c:b4:da:ca:f7:b9:2e:fa:
e8:6f:75:e9:ae:df:9c:00:e6:eb:27:ce:ab:8c:67:63:30:66:
b5:9f:77:42:13:89:ae:62:be:34:de:4e:5b:cf:bf:a0:63:9e:
6e:57:5d:e3:91:64:d0:58:73:f7:40:72:89:29:aa:d5:86:ba:
76:e1:ff:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:24 2026 by rpki-client