Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
File: phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft (raw, json)
Hash identifier: V/eFftXIzX+pF2DkhGQNiCu/wA9toUYC01Tkv9mS/y8=
Subject key identifier: 8B:48:36:59:5C:A0:82:42:42:6F:B0:EC:95:D8:47:B6:2A:C7:45:E8
Authority key identifier: A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
Certificate issuer: /CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Certificate serial: 019D26285F8B7C310BD24A39B6385F7B538E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
Manifest number: 03AD
Signing time: Wed 25 Mar 2026 18:01:13 +0000
Manifest this update: Wed 25 Mar 2026 18:01:13 +0000
Manifest next update: Thu 26 Mar 2026 18:01:13 +0000
Files and hashes: 1: O16DrZlJHzuhj0W8FexnAw3AIQg.roa (hash: PYeQyX0bnsioFO8KHOzkkDt+kDAaH5RtiV5DGLPlkLI=)
2: R9yuRT4SpbFRYXwtoqgd5_GlTyI.roa (hash: kxhnGSSaFDIC1z6NUEjoYtqaLZRHrO86ZgnVJODeRiU=)
3: phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl (hash: 29fDCSVRdKTqug6SkTY29dA9kadVrSgQM1z82XNbAPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:5f:8b:7c:31:0b:d2:4a:39:b6:38:5f:7b:53:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Validity
Not Before: Mar 25 18:01:13 2026 GMT
Not After : Mar 26 18:01:13 2026 GMT
Subject: CN=8b4836595ca08242426fb0ec95d847b62ac745e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:dc:0e:81:68:8d:5b:28:e9:b5:16:07:6d:
fd:09:35:d0:56:8a:d5:d6:2f:92:ec:83:a3:01:62:
9c:30:c1:70:44:57:28:c3:18:8d:65:41:e8:0f:af:
b2:4b:79:b1:c3:8f:a1:fc:e9:fe:34:e1:68:72:79:
1c:78:90:b8:05:ad:21:91:61:f8:b1:06:88:19:ca:
e9:60:e4:f2:8c:60:3c:3e:77:18:ba:f5:66:d7:b6:
7a:46:a8:f0:42:50:65:da:9a:d4:a6:fb:c9:da:e6:
96:67:bc:70:96:c0:11:8a:36:f7:b6:cf:f7:9c:b0:
79:cb:d0:31:4f:6a:be:d2:dd:f7:ec:2e:a0:7d:6e:
b7:6c:fa:bb:48:2d:f0:6b:1e:31:f3:9c:b5:14:e5:
d0:a9:0a:b6:09:7f:ee:f8:7b:19:0a:7a:29:c3:19:
c3:be:14:78:80:de:37:67:e8:9f:fe:95:c1:a9:33:
15:0a:d6:3d:9d:79:70:27:70:5d:7e:59:de:69:60:
ba:a3:eb:2f:ff:df:54:8b:62:f9:1d:6a:e7:8f:0d:
22:5a:07:1d:46:89:af:47:3d:b2:a2:a1:b1:51:1d:
16:72:67:d2:00:8d:91:5f:a6:6b:73:bb:41:61:8b:
92:a2:f4:4d:65:34:01:e6:9d:48:b0:b2:88:84:52:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:48:36:59:5C:A0:82:42:42:6F:B0:EC:95:D8:47:B6:2A:C7:45:E8
X509v3 Authority Key Identifier:
keyid:A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a4:12:29:9d:55:7d:4c:f1:13:8f:5e:0f:f4:5b:5a:26:72:
65:69:f8:db:2d:f4:50:a7:33:5e:a7:56:93:f1:5c:14:f0:02:
ba:48:70:77:7f:8e:73:d6:18:3e:b6:86:13:22:46:b8:5b:97:
c1:bb:36:d5:5f:4f:8f:96:00:73:a8:4a:de:a3:63:d2:7f:92:
39:40:97:d9:eb:b6:f5:4b:b4:0b:c7:e0:17:7e:2d:50:41:c7:
79:b5:c4:92:2f:fb:6b:ed:de:5f:6f:e6:77:a4:c9:fe:d5:ba:
c7:86:5d:4b:ef:b3:fa:87:c2:4d:42:b0:48:c5:6d:9c:fa:c1:
81:d1:81:e3:87:20:2b:55:6d:06:d2:da:4d:85:8b:06:d1:19:
85:f8:56:05:58:52:d7:6d:0a:e2:43:13:58:74:46:c6:84:b4:
3e:ed:b4:14:f0:36:dd:a6:a3:c7:c0:6a:0f:51:b0:51:2b:d9:
9b:6a:11:49:95:7e:7e:db:9f:ef:f1:d1:38:48:e0:f0:69:83:
d3:d8:59:ca:c1:ad:33:50:ee:5d:ec:00:e5:59:0f:ce:69:06:
bd:86:17:15:33:7f:d4:bc:eb:71:d8:5d:50:df:9c:b4:9e:68:
46:29:1a:45:35:78:b2:74:b5:04:a7:87:f0:dc:a2:ef:e6:2f:
fb:14:64:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKF+LfDEL0ko5tjhfe1OOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MTYyMTAyZTVhM2MwYWVlYWI2M2MyMWVkOTJhODA1ODI2
ZGI3YWEwHhcNMjYwMzI1MTgwMTEzWhcNMjYwMzI2MTgwMTEzWjAzMTEwLwYDVQQD
Eyg4YjQ4MzY1OTVjYTA4MjQyNDI2ZmIwZWM5NWQ4NDdiNjJhYzc0NWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMncDoFojVso6bUWB239CTXQVorV
1i+S7IOjAWKcMMFwRFcowxiNZUHoD6+yS3mxw4+h/On+NOFocnkceJC4Ba0hkWH4
sQaIGcrpYOTyjGA8PncYuvVm17Z6RqjwQlBl2prUpvvJ2uaWZ7xwlsARijb3ts/3
nLB5y9AxT2q+0t337C6gfW63bPq7SC3wax4x85y1FOXQqQq2CX/u+HsZCnopwxnD
vhR4gN43Z+if/pXBqTMVCtY9nXlwJ3BdflneaWC6o+sv/99Ui2L5HWrnjw0iWgcd
RomvRz2yoqGxUR0WcmfSAI2RX6Zrc7tBYYuSovRNZTQB5p1IsLKIhFJUgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItINllcoIJCQm+w7JXYR7Yqx0XoMB8GA1UdIwQY
MBaAFKYWIQLlo8Cu6rY8Ie2SqAWCbbeqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83ZGQyNWQtYTUyMS00NzljLTk4OGIt
OWNlZTc3YmM1MjIyLzEvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83ZGQyNWQtYTUyMS00NzljLTk4OGItOWNlZTc3YmM1MjIy
LzEvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKQSKZ1V
fUzxE49eD/RbWiZyZWn42y30UKczXqdWk/FcFPACukhwd3+Oc9YYPraGEyJGuFuX
wbs21V9Pj5YAc6hK3qNj0n+SOUCX2eu29Uu0C8fgF34tUEHHebXEki/7a+3eX2/m
d6TJ/tW6x4ZdS++z+ofCTUKwSMVtnPrBgdGB44cgK1VtBtLaTYWLBtEZhfhWBVhS
120K4kMTWHRGxoS0Pu20FPA23aajx8BqD1GwUSvZm2oRSZV+ftuf7/HROEjg8GmD
09hZysGtM1DuXewA5VkPzmkGvYYXFTN/1LzrcdhdUN+ctJ5oRikaRTV4snS1BKeH
8Nyi7+Yv+xRksg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:32 2026 by rpki-client