Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
File: Ph_ROPEC19yxWDtElBAvD-WH5F0.mft (raw, json)
Hash identifier: XHUj3DXMFvj8SDlx+wVF29m5pastO8Dy2RknRl5OOzY=
Subject key identifier: BE:49:F8:4D:7D:9C:A9:64:E9:FC:0A:A3:C3:AA:7E:2A:16:90:3C:88
Authority key identifier: 3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D
Certificate issuer: /CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
Certificate serial: 019D38657C7316D7E247BD6785554084E018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 07:01:08 +0000
Manifest this update: Sun 29 Mar 2026 07:01:08 +0000
Manifest next update: Mon 30 Mar 2026 07:01:08 +0000
Files and hashes: 1: 5WlkBW9jzB02ilWwcESnZBhBZcw.roa (hash: BeHCp8no7SRXOueP/j4ph7p2OgVkylIBkA/kOhEkKPk=)
2: Ph_ROPEC19yxWDtElBAvD-WH5F0.crl (hash: KPRMBA2aFZ9v44EVDXvUAiEoMMyqJCt11GdN5Frc0D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7c:73:16:d7:e2:47:bd:67:85:55:40:84:e0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
Validity
Not Before: Mar 29 07:01:08 2026 GMT
Not After : Mar 30 07:01:08 2026 GMT
Subject: CN=be49f84d7d9ca964e9fc0aa3c3aa7e2a16903c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:2d:dc:b9:30:67:6e:c1:86:48:d9:70:b2:
ca:dc:04:4c:9d:9d:9f:a0:6e:fe:44:65:53:d2:5a:
bf:70:97:a8:0b:ea:81:8f:89:5e:01:12:d4:36:b4:
44:5c:60:57:c5:95:2a:b8:51:8e:f0:af:6b:4b:80:
3b:92:1d:c3:b7:a6:7b:61:fc:a6:8f:40:27:fd:d1:
3e:43:fb:0f:bf:9c:88:75:0a:ad:af:dd:8b:c1:c0:
a4:3e:ec:45:d2:87:73:fb:fb:e6:fe:ed:55:77:9e:
b6:31:8e:97:3e:d3:01:7f:a3:05:85:94:2d:b1:be:
b4:f4:76:30:24:9f:35:7b:8a:74:16:14:4a:90:bf:
7f:49:38:d5:01:d7:63:e6:9e:26:18:d8:53:e8:8b:
b2:f0:37:52:85:df:d2:6c:5b:91:7b:7b:33:ad:a1:
a9:11:32:dc:2a:49:d5:21:45:4b:72:54:ff:79:44:
26:8a:33:33:d3:f2:60:4c:f4:65:4c:6b:7a:15:87:
8c:20:b7:c7:4f:58:b3:b0:c8:64:ec:a9:d2:e6:ab:
72:6e:76:05:25:7e:8c:6f:82:ed:39:f5:98:9f:b8:
a5:de:b8:43:ea:3b:3c:f9:25:6a:26:a7:0a:70:e4:
65:98:0b:d3:9e:70:b4:69:2d:87:27:48:a3:f8:da:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:49:F8:4D:7D:9C:A9:64:E9:FC:0A:A3:C3:AA:7E:2A:16:90:3C:88
X509v3 Authority Key Identifier:
keyid:3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e7:1b:c3:d7:3d:33:95:2f:5a:ed:b7:bb:4f:29:50:b4:51:
3f:d2:bc:88:8d:81:e5:46:59:d6:25:1e:a2:59:08:a3:5d:f7:
e5:f2:66:ca:80:c6:9a:8d:fa:a4:e6:ae:4f:23:36:5b:af:c1:
38:3b:1c:d0:5c:d1:6f:9d:cd:b2:aa:ae:db:41:49:bf:60:37:
5d:d8:62:93:ee:9b:ce:75:72:b3:3f:3e:96:50:b2:94:83:e1:
f9:19:05:9c:3e:0b:75:3e:c0:89:5d:93:f7:0c:55:c2:7e:44:
37:58:36:69:f0:c3:03:27:f0:56:c6:f1:74:fd:44:67:e0:f5:
3b:f9:5c:88:ed:b9:2b:58:51:27:74:f0:90:37:86:9f:bc:4b:
70:04:0b:5c:0f:20:4b:fb:57:88:1a:d7:72:27:3a:a9:93:98:
5e:fd:54:be:e1:2a:d7:0c:de:83:55:2d:01:2a:8f:a4:ee:1a:
5b:b7:c7:38:cd:5f:e0:ec:f9:fb:89:d2:20:b7:97:3b:cb:45:
c0:e1:54:56:24:b5:d2:bf:fa:46:09:3c:d2:60:d4:92:bc:d3:
fb:df:64:5c:b2:12:a1:e7:82:0d:21:b5:59:57:18:b3:85:51:
15:97:83:ff:ca:fd:6a:97:9a:7e:6a:ea:fd:69:3e:f5:77:50:
d9:1e:34:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZXxzFtfiR71nhVVAhOAYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMWZkMTM4ZjEwMmQ3ZGNiMTU4M2I0NDk0MTAyZjBmZTU4
N2U0NWQwHhcNMjYwMzI5MDcwMTA4WhcNMjYwMzMwMDcwMTA4WjAzMTEwLwYDVQQD
EyhiZTQ5Zjg0ZDdkOWNhOTY0ZTlmYzBhYTNjM2FhN2UyYTE2OTAzYzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdQt3LkwZ27BhkjZcLLK3ARMnZ2f
oG7+RGVT0lq/cJeoC+qBj4leARLUNrREXGBXxZUquFGO8K9rS4A7kh3Dt6Z7Yfym
j0An/dE+Q/sPv5yIdQqtr92LwcCkPuxF0odz+/vm/u1Vd562MY6XPtMBf6MFhZQt
sb609HYwJJ81e4p0FhRKkL9/STjVAddj5p4mGNhT6Iuy8DdShd/SbFuRe3szraGp
ETLcKknVIUVLclT/eUQmijMz0/JgTPRlTGt6FYeMILfHT1izsMhk7KnS5qtybnYF
JX6Mb4LtOfWYn7il3rhD6js8+SVqJqcKcORlmAvTnnC0aS2HJ0ij+NrDHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5J+E19nKlk6fwKo8OqfioWkDyIMB8GA1UdIwQY
MBaAFD4f0TjxAtfcsVg7RJQQLw/lh+RdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGhfUk9QRUMxOXl4V0R0RWxCQXZELVdINUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9kMGMzZTUtOTljNS00ZjEyLTlkYTIt
YzU5ZTk0YmZmNzQzLzEvUGhfUk9QRUMxOXl4V0R0RWxCQXZELVdINUYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9kMGMzZTUtOTljNS00ZjEyLTlkYTItYzU5ZTk0YmZmNzQz
LzEvUGhfUk9QRUMxOXl4V0R0RWxCQXZELVdINUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+cbw9c9
M5UvWu23u08pULRRP9K8iI2B5UZZ1iUeolkIo1335fJmyoDGmo36pOauTyM2W6/B
ODsc0FzRb53Nsqqu20FJv2A3Xdhik+6bznVysz8+llCylIPh+RkFnD4LdT7AiV2T
9wxVwn5EN1g2afDDAyfwVsbxdP1EZ+D1O/lciO25K1hRJ3TwkDeGn7xLcAQLXA8g
S/tXiBrXcic6qZOYXv1UvuEq1wzeg1UtASqPpO4aW7fHOM1f4Oz5+4nSILeXO8tF
wOFUViS10r/6Rgk80mDUkrzT+99kXLISoeeCDSG1WVcYs4VRFZeD/8r9apeafmrq
/Wk+9XdQ2R40gQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:04 2026 by rpki-client