Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
File: phqPZno93b1KNSMY2PBgbEbp8GM.mft (raw, json)
Hash identifier: p7ekvcoCq8Nf5U42RZTryoRisEQjovFYW0kGXnozpZU=
Subject key identifier: 70:8B:1E:8B:00:61:56:55:29:E5:9B:75:77:65:12:29:3B:8E:6F:C3
Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
Certificate issuer: /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Certificate serial: 019D2884212B8AB843D05D7EC07C2D5CF7C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:00:41 +0000
Manifest this update: Thu 26 Mar 2026 05:00:41 +0000
Manifest next update: Fri 27 Mar 2026 05:00:41 +0000
Files and hashes: 1: aL-SGiAffvqCZQ5o8Ubyi3Yxves.roa (hash: nBnleL6X+T/X/zfiX5N8ZkgEWSbhPXx+iLrLHdXNMnw=)
2: phqPZno93b1KNSMY2PBgbEbp8GM.crl (hash: VtJZgWSFGAQecB/pwSZxi3BUtaWWszs/oCXdaqMKSq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:21:2b:8a:b8:43:d0:5d:7e:c0:7c:2d:5c:f7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Validity
Not Before: Mar 26 05:00:41 2026 GMT
Not After : Mar 27 05:00:41 2026 GMT
Subject: CN=708b1e8b0061565529e59b75776512293b8e6fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:45:30:fd:5a:2b:cf:e9:a9:85:19:2d:d1:
14:e7:e6:8e:34:05:50:90:7c:17:04:1f:e7:75:aa:
3c:e5:f0:a9:d2:09:be:21:c9:9d:f2:ca:d5:fb:40:
73:ef:f1:7c:10:9e:d8:70:be:34:d0:02:8e:c2:b9:
61:77:39:35:7a:f2:9c:47:c2:fd:c0:72:af:9b:4a:
00:3f:ad:aa:7d:67:6b:15:4e:d7:2e:3d:34:01:d2:
1e:bb:67:fa:70:63:b0:ac:80:15:36:f1:f2:eb:ca:
fc:2e:20:1b:70:6e:4b:32:75:df:ce:74:2f:7d:d0:
2d:d8:83:ce:ea:79:de:15:41:52:1a:1a:5f:8d:f8:
fa:b2:97:90:a2:cb:a3:7d:1d:21:5a:40:b1:b7:b2:
a2:c6:d3:44:d1:f0:78:44:52:1b:2e:2a:74:56:60:
2a:d9:a9:d9:bb:7b:f5:0d:0f:64:46:68:b5:8e:66:
9d:78:c8:b9:10:44:c1:f7:6a:7d:ff:0c:ae:3e:27:
a8:f4:52:ab:9c:05:f3:0e:5b:eb:13:17:a6:37:7c:
14:51:14:ae:f1:54:86:f4:01:ea:bd:af:c8:2b:c5:
09:03:e7:d8:38:d3:f5:54:d4:5f:de:16:93:c1:b7:
6f:02:0a:84:9e:8c:a8:63:3e:9d:d8:78:5b:da:30:
ac:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8B:1E:8B:00:61:56:55:29:E5:9B:75:77:65:12:29:3B:8E:6F:C3
X509v3 Authority Key Identifier:
keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:09:09:ae:16:30:2e:cd:5b:31:3b:a9:37:7d:09:7e:84:65:
fd:eb:a2:20:20:57:79:0b:c5:e9:76:d4:3b:c0:05:8a:5b:7d:
f1:c1:15:9e:2e:d6:d1:3a:37:ed:06:fe:34:60:5f:60:e3:a9:
c8:e8:49:c1:ca:a7:51:0d:37:d1:77:59:a3:6d:a4:72:20:89:
60:23:43:33:d1:82:18:25:ab:4b:a7:ff:e5:6c:20:25:11:44:
b6:2a:5e:6e:e6:57:95:30:c3:75:c9:b5:a9:63:c2:a2:f6:9d:
e3:c5:e6:9f:f8:56:9b:53:c6:6f:2d:00:af:4b:40:aa:a6:62:
e0:78:a0:a4:bd:a1:5b:7c:5b:76:d3:af:e3:9b:80:61:8a:ac:
48:59:7c:a0:b5:5e:e3:4c:4c:29:21:56:6b:9d:46:2b:66:93:
07:4f:ec:7a:79:c0:80:de:1e:1a:d3:14:83:93:2b:e0:29:fc:
49:b4:4a:74:fa:1c:73:00:36:7a:e1:e6:fa:95:9c:1e:29:b5:
1d:95:34:7d:33:cc:d0:d2:7b:d6:d7:6f:47:53:a9:80:f5:ee:
f7:db:f0:a3:8e:21:15:fd:bd:00:31:d3:ad:1a:6a:42:7b:5c:
fd:7a:5f:4e:4f:4f:cc:30:d0:69:6d:37:9f:3d:d7:7f:e9:67:
52:c0:6e:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohCErirhD0F1+wHwtXPfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MWE4ZjY2N2EzZGRkYmQ0YTM1MjMxOGQ4ZjA2MDZjNDZl
OWYwNjMwHhcNMjYwMzI2MDUwMDQxWhcNMjYwMzI3MDUwMDQxWjAzMTEwLwYDVQQD
Eyg3MDhiMWU4YjAwNjE1NjU1MjllNTliNzU3NzY1MTIyOTNiOGU2ZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1NFMP1aK8/pqYUZLdEU5+aONAVQ
kHwXBB/ndao85fCp0gm+Icmd8srV+0Bz7/F8EJ7YcL400AKOwrlhdzk1evKcR8L9
wHKvm0oAP62qfWdrFU7XLj00AdIeu2f6cGOwrIAVNvHy68r8LiAbcG5LMnXfznQv
fdAt2IPO6nneFUFSGhpfjfj6speQosujfR0hWkCxt7KixtNE0fB4RFIbLip0VmAq
2anZu3v1DQ9kRmi1jmadeMi5EETB92p9/wyuPieo9FKrnAXzDlvrExemN3wUURSu
8VSG9AHqva/IK8UJA+fYONP1VNRf3haTwbdvAgqEnoyoYz6d2Hhb2jCssQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCLHosAYVZVKeWbdXdlEik7jm/DMB8GA1UdIwQY
MBaAFKYaj2Z6Pd29SjUjGNjwYGxG6fBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jZTg4YTItZWI4Ny00MmE1LTkxNmQt
YjU2YmIwNjQ3ODY4LzEvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jZTg4YTItZWI4Ny00MmE1LTkxNmQtYjU2YmIwNjQ3ODY4
LzEvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAkJrhYw
Ls1bMTupN30JfoRl/euiICBXeQvF6XbUO8AFilt98cEVni7W0To37Qb+NGBfYOOp
yOhJwcqnUQ030XdZo22kciCJYCNDM9GCGCWrS6f/5WwgJRFEtipebuZXlTDDdcm1
qWPCovad48Xmn/hWm1PGby0Ar0tAqqZi4HigpL2hW3xbdtOv45uAYYqsSFl8oLVe
40xMKSFWa51GK2aTB0/sennAgN4eGtMUg5Mr4Cn8SbRKdPoccwA2euHm+pWcHim1
HZU0fTPM0NJ71tdvR1OpgPXu99vwo44hFf29ADHTrRpqQntc/XpfTk9PzDDQaW03
nz3Xf+lnUsBuWQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:37 2026 by rpki-client