Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
File: phFtBD5EtAQUTmpC0mqp2vU9BKc.mft (raw, json)
Hash identifier: NY6vcjLNjJKFhWrhbLyAypQg9ygEKo8zL4oCzdSrXSM=
Subject key identifier: 4C:2D:3D:3D:1C:B8:E0:67:F4:3E:E1:2B:D3:8E:8F:0E:76:95:0C:69
Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
Certificate issuer: /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Certificate serial: 019CE2597EEE789D98A411F991931CC1F4A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
Manifest number: 1585
Signing time: Thu 12 Mar 2026 14:00:41 +0000
Manifest this update: Thu 12 Mar 2026 14:00:41 +0000
Manifest next update: Fri 13 Mar 2026 14:00:41 +0000
Files and hashes: 1: Vd994I8OewATsGGSa4zEfrPZRM0.roa (hash: XSJbo9Wc3kl6cNjQcZjvVqM+NHSEiIeknkFve8lu2PM=)
2: phFtBD5EtAQUTmpC0mqp2vU9BKc.crl (hash: fjcbNkptGxBZvBHWl0gIKs1B5ZyRtvoLCXsEEXiX8YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:59:7e:ee:78:9d:98:a4:11:f9:91:93:1c:c1:f4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Validity
Not Before: Mar 12 14:00:41 2026 GMT
Not After : Mar 13 14:00:41 2026 GMT
Subject: CN=4c2d3d3d1cb8e067f43ee12bd38e8f0e76950c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:60:d1:01:af:31:3f:75:d1:a7:3b:d6:20:5a:
c0:41:8a:3a:05:12:fd:0f:11:c2:ac:f2:46:1d:96:
e8:ab:3e:d5:31:ce:c7:2c:5b:4b:86:79:64:da:cb:
3e:99:d3:ce:06:66:18:23:99:6a:8b:1b:2a:25:15:
1a:66:a6:04:90:92:2a:e1:e0:33:08:78:a6:48:74:
35:1b:c6:fd:fb:71:32:8a:3c:67:25:50:78:35:c2:
6f:99:5a:53:f7:9b:0a:4f:15:b6:d3:a9:be:0c:74:
26:e6:29:4a:5c:99:b6:fa:61:78:75:1d:08:93:61:
f1:c9:bd:32:3d:fe:4c:c4:bd:5b:43:7c:35:3d:53:
c7:4d:f9:0c:90:45:2c:2b:0d:e3:43:d2:eb:e0:fd:
5e:14:10:d9:ca:81:72:3c:7a:21:77:c2:a2:88:44:
bf:4f:f9:28:10:fe:de:55:b3:7c:4e:60:0f:10:e1:
c2:38:0a:25:dc:cb:b8:e3:99:c2:eb:b4:f3:17:07:
22:ce:78:8f:ce:b0:11:d4:8b:19:88:12:6e:00:db:
5a:03:95:f1:1a:e3:9f:50:06:58:71:6f:b1:ad:7f:
67:a1:8c:84:83:59:80:6a:23:5e:0b:71:f9:49:e7:
31:72:79:50:89:51:67:b6:a6:96:76:0f:5a:bf:0e:
cf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2D:3D:3D:1C:B8:E0:67:F4:3E:E1:2B:D3:8E:8F:0E:76:95:0C:69
X509v3 Authority Key Identifier:
keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:30:5f:27:0a:fe:98:fa:a8:9e:87:fb:03:02:69:d6:b6:06:
d6:f2:cd:96:0a:da:01:d1:2a:26:79:b1:42:d8:f9:08:94:dd:
03:d8:8e:1c:3c:f5:d1:ca:66:d6:9c:6d:a0:a2:30:8a:b9:e1:
f4:58:a4:19:c2:6f:4e:35:eb:18:10:9b:2c:aa:fc:02:4e:b9:
4f:b0:b9:1d:f8:ad:fb:f8:33:4b:2e:32:4e:fe:46:7f:a1:4c:
95:5f:84:07:ae:5d:83:5b:a4:50:fc:46:bf:7e:97:53:6d:6f:
e0:71:ea:88:60:77:5c:c4:7e:01:19:e9:6b:53:0f:1c:c9:ec:
63:c6:f5:c3:28:ce:cc:93:d8:21:f2:1d:1e:db:86:61:47:4c:
89:d3:42:a4:92:62:f5:5c:b0:c5:08:51:6b:10:fd:bb:34:b8:
65:7f:df:c6:49:f9:08:e3:0d:48:8d:05:27:5d:56:d4:43:12:
94:d6:44:00:b8:09:b9:b7:61:55:03:84:52:05:5b:74:6d:90:
da:3e:fe:bc:09:f8:59:3e:fd:98:5a:76:68:3d:37:63:a4:5b:
a1:88:12:51:2b:7d:5a:8e:73:30:f6:13:41:8d:9e:f3:02:a1:
09:21:46:4b:04:ff:12:ab:44:f3:a5:15:f8:b0:cb:30:8b:22:
e4:99:92:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:28:06 2026 by rpki-client