Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
File: phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft (raw, json)
Hash identifier: Xc23eDdJTDYHJ35gAjzZdsihFN+LyvN2yjFDv3Txn6U=
Subject key identifier: D4:9C:3A:50:A8:EE:53:3A:49:AF:00:6B:8A:AE:31:ED:13:75:4E:5B
Authority key identifier: A6:10:37:10:70:66:77:30:AA:F5:90:2E:9F:8C:63:40:80:0E:EC:88
Certificate issuer: /CN=a610371070667730aaf5902e9f8c6340800eec88
Certificate serial: 019FA0E04B8D0DF1CEB968B83972798C3697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:21 +0000
Manifest this update: Mon 27 Jul 2026 00:01:21 +0000
Manifest next update: Tue 28 Jul 2026 00:01:21 +0000
Files and hashes: 1: dZDlbqsnapFIwj1HUHLInqN8JVw.roa (hash: bs/eDOvdIuJ1snvbff8tQ4iMRziNZ2Vwxnsh8r7rh+0=)
2: h087lucF2ivPyD3F1D3_NLkhOb8.roa (hash: deWexSQgKEOrc0A416IV+spDrpGZpTVS9EaD2+rgd3g=)
3: kdSBI_9pb4sru0XZjIhpyOoJDTA.roa (hash: AahhJx6gs1/aCr1ScQXRa/wo3nSdwYac1ZF6rIEWe98=)
4: phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl (hash: g5apJIOsvR+XxHDMI0puNWZFjzdyVTKtoHnYAmvwJYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:4b:8d:0d:f1:ce:b9:68:b8:39:72:79:8c:36:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a610371070667730aaf5902e9f8c6340800eec88
Validity
Not Before: Jul 27 00:01:21 2026 GMT
Not After : Jul 28 00:01:21 2026 GMT
Subject: CN=d49c3a50a8ee533a49af006b8aae31ed13754e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:11:83:30:4a:59:95:1c:d8:ce:a5:e5:2a:
5f:5b:ea:d5:6a:2b:72:71:4d:29:e8:f6:ad:40:14:
24:2c:5d:4c:14:f6:8e:ca:11:1c:25:52:4c:7a:57:
5b:ab:10:dc:63:0e:51:eb:b5:ab:ea:20:5a:18:f9:
38:21:f6:a3:b1:42:2a:5e:6b:84:3d:17:9b:bd:a7:
11:28:95:a5:83:94:b6:fd:cc:f5:98:42:be:50:6e:
0d:03:3b:ae:dd:e5:ec:bc:61:64:d8:ca:81:fb:fd:
20:13:72:15:21:f0:da:07:7f:1f:a0:21:2a:1c:84:
ba:74:03:86:14:c0:24:b5:b5:62:f7:59:06:3c:ef:
16:74:6d:fd:0b:03:9b:5c:94:86:12:da:be:d8:a1:
d6:7a:74:da:53:21:cb:25:da:e0:42:3e:92:e6:9b:
ba:60:29:f1:bc:32:12:56:53:1e:9f:47:73:ac:b1:
91:c3:07:d5:ef:a8:67:25:20:bf:0a:f5:4a:a6:f0:
6a:1c:b2:b5:ed:27:98:3a:21:1e:71:f6:be:60:68:
38:ac:d8:44:46:c5:8f:87:bc:2e:09:bc:e3:98:9a:
10:f5:73:1c:dd:44:be:1d:64:c1:34:c4:a5:a2:9a:
9b:e3:0c:41:83:c5:3b:3d:dd:d4:a5:f9:ea:8a:58:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9C:3A:50:A8:EE:53:3A:49:AF:00:6B:8A:AE:31:ED:13:75:4E:5B
X509v3 Authority Key Identifier:
keyid:A6:10:37:10:70:66:77:30:AA:F5:90:2E:9F:8C:63:40:80:0E:EC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:64:e4:dc:fc:94:ab:42:37:8f:fe:c8:8d:13:28:59:ef:db:
8d:4e:ee:f7:1b:10:6e:08:9d:f3:67:58:84:3a:3d:ec:de:cf:
8d:c0:17:c4:7e:49:66:de:4e:5a:24:74:f4:18:43:1f:50:98:
82:64:2c:3d:fd:d7:24:88:50:0a:14:32:ff:13:c8:c2:aa:cb:
0b:2d:ec:48:9b:07:0b:19:26:76:72:54:68:dd:be:7f:06:52:
48:de:f4:73:d1:60:1b:b2:ab:a4:73:37:ba:3c:e9:b5:23:9a:
3a:a0:c5:a7:b9:5f:3f:cf:34:44:ee:77:6d:e3:70:8a:bc:1c:
7e:d8:4c:64:fb:11:14:77:fd:71:d8:30:10:d2:84:e4:46:83:
3d:29:7e:e4:a1:05:fa:be:57:9f:b0:aa:20:b7:91:f6:47:c2:
b6:0c:d9:49:b2:f3:d8:22:95:a4:99:07:c6:36:67:6b:54:c9:
a4:3b:f1:9c:09:e6:ae:2c:ed:6a:da:58:d2:f5:72:ab:3a:e6:
3d:b8:46:08:23:bf:18:f7:00:f6:0b:ba:20:04:f8:64:eb:47:
32:af:e6:5f:b3:39:c7:8f:46:23:a4:f2:ca:dc:13:30:09:97:
76:72:fb:b4:f6:e0:d7:75:66:09:09:31:bf:b6:39:88:fe:d5:
89:81:7d:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4EuNDfHOuWi4OXJ5jDaXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MTAzNzEwNzA2Njc3MzBhYWY1OTAyZTlmOGM2MzQwODAw
ZWVjODgwHhcNMjYwNzI3MDAwMTIxWhcNMjYwNzI4MDAwMTIxWjAzMTEwLwYDVQQD
EyhkNDljM2E1MGE4ZWU1MzNhNDlhZjAwNmI4YWFlMzFlZDEzNzU0ZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriURgzBKWZUc2M6l5SpfW+rVaity
cU0p6PatQBQkLF1MFPaOyhEcJVJMeldbqxDcYw5R67Wr6iBaGPk4IfajsUIqXmuE
PRebvacRKJWlg5S2/cz1mEK+UG4NAzuu3eXsvGFk2MqB+/0gE3IVIfDaB38foCEq
HIS6dAOGFMAktbVi91kGPO8WdG39CwObXJSGEtq+2KHWenTaUyHLJdrgQj6S5pu6
YCnxvDISVlMen0dzrLGRwwfV76hnJSC/CvVKpvBqHLK17SeYOiEecfa+YGg4rNhE
RsWPh7wuCbzjmJoQ9XMc3US+HWTBNMSlopqb4wxBg8U7Pd3UpfnqilgpxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNScOlCo7lM6Sa8Aa4quMe0TdU5bMB8GA1UdIwQY
MBaAFKYQNxBwZncwqvWQLp+MY0CADuyIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGhBM0VIQm1kekNxOVpBdW40eGpRSUFPN0lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9iNzNhZGQtZWEwZi00YzIyLTk4MGUt
MDU5YmFiMDE1Y2MzLzEvcGhBM0VIQm1kekNxOVpBdW40eGpRSUFPN0lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9iNzNhZGQtZWEwZi00YzIyLTk4MGUtMDU5YmFiMDE1Y2Mz
LzEvcGhBM0VIQm1kekNxOVpBdW40eGpRSUFPN0lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWTk3PyU
q0I3j/7IjRMoWe/bjU7u9xsQbgid82dYhDo97N7PjcAXxH5JZt5OWiR09BhDH1CY
gmQsPf3XJIhQChQy/xPIwqrLCy3sSJsHCxkmdnJUaN2+fwZSSN70c9FgG7KrpHM3
ujzptSOaOqDFp7lfP880RO53beNwirwcfthMZPsRFHf9cdgwENKE5EaDPSl+5KEF
+r5Xn7CqILeR9kfCtgzZSbLz2CKVpJkHxjZna1TJpDvxnAnmriztatpY0vVyqzrm
PbhGCCO/GPcA9gu6IAT4ZOtHMq/mX7M5x49GI6TyytwTMAmXdnL7tPbg13VmCQkx
v7Y5iP7ViYF9pg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 06:32:09 2026 by rpki-client