Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File: PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier: h7R/BkSC1lJiVnG7P1w3NKCDbvT09XCFo9wUpZmikd4=
Subject key identifier: 15:77:4F:2A:34:0F:44:EA:33:2F:E7:84:5B:13:A2:ED:0D:2E:5A:72
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial: 019D26CCEA02E6B76AE3CBAB6309368A6A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number: 107D
Signing time: Wed 25 Mar 2026 21:00:56 +0000
Manifest this update: Wed 25 Mar 2026 21:00:56 +0000
Manifest next update: Thu 26 Mar 2026 21:00:56 +0000
Files and hashes: 1: 8kiAQtkav2NHfFCJtiBA0ERhqIA.roa (hash: F/EijD7R25vjZwA9wYF9LplNamhupuIHanpPILz4ls0=)
2: M_79XQ2SXAKWIFy3HNmBFX2YRgI.roa (hash: PQS0FU2tcc2qRmlqMUo4a/MCLdHlPpwQ5M9eqNDwavA=)
3: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: oEJ8Q/x5trqfxcP3gR6DD6uT+3fO01ukU5l7FPwfpNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ea:02:e6:b7:6a:e3:cb:ab:63:09:36:8a:6a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Validity
Not Before: Mar 25 21:00:56 2026 GMT
Not After : Mar 26 21:00:56 2026 GMT
Subject: CN=15774f2a340f44ea332fe7845b13a2ed0d2e5a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:e8:d1:0d:1c:7e:77:06:63:e5:21:21:03:
87:c8:85:94:69:a1:56:15:da:ff:95:41:d2:f4:da:
4f:f0:f0:2c:82:fe:15:be:eb:08:67:98:fa:ae:49:
56:36:64:d8:7f:f0:67:dc:96:e0:cf:0b:82:82:ed:
e5:33:eb:ac:f7:94:42:b2:d6:25:f0:81:95:bf:c3:
d9:42:6f:c9:ce:37:d5:a7:4f:62:0d:dd:00:4a:cd:
d9:56:ca:c3:00:a3:11:aa:0f:bc:10:27:7a:6e:bf:
8c:7f:b6:5a:05:44:26:83:db:a9:85:14:61:85:05:
66:3e:d3:9f:5d:e1:a2:a5:86:65:97:65:71:36:57:
97:32:fe:39:ae:3f:39:8a:fc:6d:23:1a:83:0d:1d:
f7:29:38:50:2a:43:80:88:e0:e3:77:07:3f:b1:e4:
51:3e:e0:6c:90:9a:6e:46:29:b0:bb:ba:83:13:0b:
67:4c:05:0f:f5:ac:81:92:e8:22:21:38:ba:85:bd:
eb:40:19:6a:54:80:a5:79:83:60:e6:d1:fc:ac:6d:
33:1b:9b:25:7b:7f:a1:9d:ee:9c:69:49:b2:52:64:
1c:d3:f0:fd:25:80:56:fc:eb:8e:c4:48:c7:08:27:
18:4a:86:28:fd:57:39:c0:d2:10:3f:90:3b:a5:2a:
8d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:77:4F:2A:34:0F:44:EA:33:2F:E7:84:5B:13:A2:ED:0D:2E:5A:72
X509v3 Authority Key Identifier:
keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:09:58:fa:90:80:9e:58:aa:fc:e8:8e:ca:57:63:05:14:74:
a9:9b:86:32:20:11:d7:ef:88:b1:7a:db:c1:ec:e7:9f:cc:77:
ef:be:bb:76:41:ee:62:cd:20:46:38:a1:5c:b3:ba:fd:b2:58:
da:a0:39:80:a1:3f:e8:a5:05:cb:c8:7d:04:40:70:ce:17:6b:
6d:14:44:46:fb:4c:36:c4:98:03:10:7e:0e:80:10:e9:bd:a6:
91:75:c9:a4:a9:68:bc:53:6d:60:a8:9c:ae:7c:32:37:fa:f0:
84:fd:d0:01:ba:fc:a5:f4:0c:a5:ac:c3:50:ea:c9:a5:73:ff:
b5:4b:5b:da:47:a6:9c:68:16:cf:90:05:19:80:5d:70:61:b4:
5a:5d:eb:37:4f:06:65:5c:cb:e1:ca:96:7a:8f:46:a1:d6:62:
3d:83:e5:90:37:fa:00:cc:84:96:da:59:6e:04:16:76:ea:04:
94:d5:ae:0a:54:bd:1d:dc:41:14:5a:ae:fa:2b:31:17:d6:28:
69:85:93:21:e2:7e:0d:9a:d4:e7:a4:29:a4:14:9b:1a:47:07:
08:78:59:80:a9:c4:be:4b:59:93:e2:c0:a5:51:de:c0:07:a4:
4d:85:3d:71:99:74:18:9a:31:44:77:32:b6:8c:b9:39:b5:6c:
24:2a:42:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzOoC5rdq48urYwk2impCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMWFlMTViZTg2ZWIwYzRkOWE3NjRjYzdhOGY2NTk5NWJm
OGM5MGUwHhcNMjYwMzI1MjEwMDU2WhcNMjYwMzI2MjEwMDU2WjAzMTEwLwYDVQQD
EygxNTc3NGYyYTM0MGY0NGVhMzMyZmU3ODQ1YjEzYTJlZDBkMmU1YTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnLo0Q0cfncGY+UhIQOHyIWUaaFW
Fdr/lUHS9NpP8PAsgv4VvusIZ5j6rklWNmTYf/Bn3JbgzwuCgu3lM+us95RCstYl
8IGVv8PZQm/JzjfVp09iDd0ASs3ZVsrDAKMRqg+8ECd6br+Mf7ZaBUQmg9uphRRh
hQVmPtOfXeGipYZll2VxNleXMv45rj85ivxtIxqDDR33KThQKkOAiODjdwc/seRR
PuBskJpuRimwu7qDEwtnTAUP9ayBkugiITi6hb3rQBlqVICleYNg5tH8rG0zG5sl
e3+hne6caUmyUmQc0/D9JYBW/OuOxEjHCCcYSoYo/Vc5wNIQP5A7pSqNXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBV3Tyo0D0TqMy/nhFsTou0NLlpyMB8GA1UdIwQY
MBaAFD4a4VvobrDE2adkzHqPZZlb+MkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGhyaFctaHVzTVRacDJUTWVvOWxtVnY0eVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83M2YyM2EtZTk3Ny00MWMzLTkyMmQt
YjI3YzM0MTI0MjZhLzEvUGhyaFctaHVzTVRacDJUTWVvOWxtVnY0eVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC83M2YyM2EtZTk3Ny00MWMzLTkyMmQtYjI3YzM0MTI0MjZh
LzEvUGhyaFctaHVzTVRacDJUTWVvOWxtVnY0eVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAlY+pCA
nliq/OiOyldjBRR0qZuGMiAR1++IsXrbweznn8x37767dkHuYs0gRjihXLO6/bJY
2qA5gKE/6KUFy8h9BEBwzhdrbRRERvtMNsSYAxB+DoAQ6b2mkXXJpKlovFNtYKic
rnwyN/rwhP3QAbr8pfQMpazDUOrJpXP/tUtb2kemnGgWz5AFGYBdcGG0Wl3rN08G
ZVzL4cqWeo9GodZiPYPlkDf6AMyEltpZbgQWduoElNWuClS9HdxBFFqu+isxF9Yo
aYWTIeJ+DZrU56QppBSbGkcHCHhZgKnEvktZk+LApVHewAekTYU9cZl0GJoxRHcy
toy5ObVsJCpCEw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:37 2026 by rpki-client