Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
File: phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft (raw, json)
Hash identifier: 5BJNWyWc/qYovDcTPMWVT3FmuFgO4guA8IKPJRb2hMM=
Subject key identifier: 8C:0C:38:22:36:3C:64:CA:C7:3B:AA:C4:E0:03:C9:63:10:83:EB:26
Authority key identifier: A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
Certificate issuer: /CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Certificate serial: 019D3977980CE93E66C65470F0D7F0F4B2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
Manifest number: 03B7
Signing time: Sun 29 Mar 2026 12:00:32 +0000
Manifest this update: Sun 29 Mar 2026 12:00:32 +0000
Manifest next update: Mon 30 Mar 2026 12:00:32 +0000
Files and hashes: 1: O16DrZlJHzuhj0W8FexnAw3AIQg.roa (hash: PYeQyX0bnsioFO8KHOzkkDt+kDAaH5RtiV5DGLPlkLI=)
2: R9yuRT4SpbFRYXwtoqgd5_GlTyI.roa (hash: kxhnGSSaFDIC1z6NUEjoYtqaLZRHrO86ZgnVJODeRiU=)
3: phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl (hash: ddzb9cHed4ONjZpPpG1cy43ZfGoL8315xcXJK1V4zBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:98:0c:e9:3e:66:c6:54:70:f0:d7:f0:f4:b2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Validity
Not Before: Mar 29 12:00:32 2026 GMT
Not After : Mar 30 12:00:32 2026 GMT
Subject: CN=8c0c3822363c64cac73baac4e003c9631083eb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:75:9b:61:6d:15:1e:af:1f:83:12:40:28:
c2:37:4b:be:67:5a:4b:76:e7:c1:5b:6a:22:e0:47:
e0:10:4b:ce:a9:a5:db:fa:bc:d1:9e:93:cb:5b:4e:
85:db:bf:2b:bb:c2:ca:aa:11:fb:52:a6:a7:3e:08:
01:c2:01:62:f0:72:e6:3f:79:13:a2:8e:32:1a:b8:
01:98:a0:07:64:37:8d:dd:34:aa:fe:3f:75:a2:28:
84:45:28:c9:55:c0:e8:5c:ff:18:55:65:53:82:03:
8c:0a:9a:48:d8:60:aa:f0:5f:38:30:ce:7b:db:3c:
2b:f6:f1:b1:42:34:bc:d5:d4:b4:c7:10:dd:d1:c0:
c7:a3:74:fe:85:d1:f9:0b:a3:51:c6:dc:2f:8f:d2:
ed:3a:da:0d:e0:44:c6:71:75:ca:02:23:e4:b5:cf:
f7:bd:6e:94:37:d0:b5:4d:7e:9c:88:f3:66:47:de:
07:68:e7:50:d4:20:30:a1:10:cf:79:7c:a4:95:03:
fc:79:66:fd:b8:30:c2:5b:7b:6e:52:ac:7c:74:73:
20:3e:5f:f1:f9:e5:9a:6d:f7:11:36:2e:5d:79:29:
d2:29:97:9d:e9:7b:db:e4:f7:a0:2f:80:fc:b9:68:
59:56:6f:21:9e:23:41:c5:a4:56:7b:7c:8c:bc:1a:
e9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0C:38:22:36:3C:64:CA:C7:3B:AA:C4:E0:03:C9:63:10:83:EB:26
X509v3 Authority Key Identifier:
keyid:A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e3:ee:f4:91:88:6a:f6:34:c6:9f:f9:c4:db:05:18:11:d5:
63:9e:d8:ad:a7:75:6b:ab:b8:b3:34:76:92:94:4d:8f:51:de:
bf:e5:28:9a:d8:9a:ac:39:48:1f:06:84:b6:2a:41:6f:ae:54:
1c:51:d5:c5:3f:19:d9:ad:2f:1b:91:2d:9c:d4:44:43:48:df:
7c:da:1f:1d:1a:f0:c2:7d:c4:85:6c:4a:19:40:fc:f3:84:e4:
55:12:60:ad:ab:f3:9b:71:ee:a0:dd:e4:9a:cb:02:e4:6b:57:
f7:97:10:06:ac:c3:7c:1f:1e:48:16:4e:48:a6:5d:67:d8:a0:
f3:14:bb:a0:5e:6b:11:ab:a7:df:9d:a1:a4:dc:7c:38:14:0b:
f2:79:39:ae:b2:b3:f9:be:c0:55:07:0b:93:f8:82:93:2d:19:
3d:02:21:db:4c:28:f5:0e:97:ad:9e:e0:7f:3a:c1:e5:c6:05:
6a:12:b4:71:a6:f0:7f:f0:c9:3a:b7:31:43:41:64:1c:dc:24:
65:2a:3e:c0:07:af:2a:da:53:83:47:39:ff:67:d1:0f:16:5c:
bf:90:48:c7:ae:8c:41:b8:aa:6d:ce:55:75:0a:bb:15:ac:e6:
b6:39:1c:99:29:e5:28:a1:eb:bd:93:ff:88:3e:88:5d:d5:76:
b6:6c:9e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:09 2026 by rpki-client