Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
File: phqPZno93b1KNSMY2PBgbEbp8GM.mft (raw, json)
Hash identifier: Bl4ZsV/JbUvhkURyVuKhn3obXxXcfZAIAS88OQY71f8=
Subject key identifier: CD:B1:2A:97:7E:2F:2D:E5:54:BF:E3:DE:C1:7E:BB:35:C3:5A:D7:B6
Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
Certificate issuer: /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Certificate serial: 019D37F7405B5CB61E14EA7CE39C09D2B7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:43 +0000
Manifest this update: Sun 29 Mar 2026 05:00:43 +0000
Manifest next update: Mon 30 Mar 2026 05:00:43 +0000
Files and hashes: 1: aL-SGiAffvqCZQ5o8Ubyi3Yxves.roa (hash: nBnleL6X+T/X/zfiX5N8ZkgEWSbhPXx+iLrLHdXNMnw=)
2: phqPZno93b1KNSMY2PBgbEbp8GM.crl (hash: nff3UFDABDlQsGCfbmP0VEXe1WD+UxEy6ehDwNU6h7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:40:5b:5c:b6:1e:14:ea:7c:e3:9c:09:d2:b7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Validity
Not Before: Mar 29 05:00:43 2026 GMT
Not After : Mar 30 05:00:43 2026 GMT
Subject: CN=cdb12a977e2f2de554bfe3dec17ebb35c35ad7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:a6:54:59:e8:b3:6b:b2:bf:db:fb:12:84:
8a:5c:c9:20:d1:f4:fb:d5:87:0a:7f:2d:d9:29:0b:
62:a6:0f:63:d3:99:38:b9:3c:8a:85:6b:2c:c6:ea:
a4:1f:17:cf:86:fe:d0:e2:84:54:aa:46:6f:f2:d3:
9f:3e:86:b8:4a:38:71:ab:3c:1d:f1:e1:21:f8:a1:
bb:22:ce:7a:b9:7d:ee:fc:d3:0c:3c:f1:19:67:2a:
73:79:ae:e7:9e:f1:4b:0b:73:8d:be:12:57:1e:79:
23:48:d5:33:08:80:12:b6:eb:8a:d8:b7:0e:4f:6a:
db:a5:09:5e:10:3f:9d:c0:84:71:1e:7d:8d:1a:ac:
ef:e3:ec:9c:a4:8d:dd:69:ae:ed:69:e5:76:02:b2:
0a:2d:03:d4:86:9d:fb:4d:54:dd:c0:08:d2:2e:a0:
a5:d6:59:8a:33:7b:46:a7:9e:09:e6:d0:76:cd:bb:
88:ca:b1:01:02:68:f1:a2:c0:4a:84:23:ff:17:d4:
e7:ab:e6:a1:a3:2e:6a:c4:18:ca:a9:a9:4b:7f:a0:
33:87:b6:31:7c:6d:fb:8d:d1:32:91:3d:c6:b0:37:
ba:3b:5b:b9:7f:9f:03:70:01:c4:85:55:9e:df:64:
95:f0:e8:b6:5e:9f:dc:c0:0a:6e:82:f4:67:26:d5:
21:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B1:2A:97:7E:2F:2D:E5:54:BF:E3:DE:C1:7E:BB:35:C3:5A:D7:B6
X509v3 Authority Key Identifier:
keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5e:6b:9f:bf:b2:79:33:ce:6e:16:37:67:be:1a:e6:eb:fd:
27:ff:66:ac:c3:24:8e:12:f2:d7:9b:8b:1b:3a:56:17:34:f5:
28:4d:60:56:5b:90:c6:b9:14:2d:e6:0c:b2:6d:4c:af:17:26:
4f:47:d7:50:9d:08:d0:88:0b:8b:c5:3a:fb:90:78:4d:93:ae:
4d:87:49:13:01:db:04:d9:68:f3:c9:88:49:88:08:0b:c5:f0:
20:f5:b3:fa:92:41:a2:a8:58:c9:d9:e6:b6:76:bd:97:62:d7:
0b:6c:91:01:6c:4c:ee:80:19:b5:58:5a:44:3f:4c:ec:cf:f8:
1e:5b:5c:bc:34:e4:04:7a:14:56:20:32:25:5f:b3:ee:b1:ba:
9e:dc:c0:2c:22:4a:2c:e3:a4:28:b1:f7:07:c3:c6:f1:7b:50:
af:05:41:b7:d8:ef:71:2a:5e:f7:1c:36:f6:89:3f:04:0b:f0:
00:3e:57:11:0c:e1:7d:d1:92:91:9e:f9:e0:7f:e1:71:60:3d:
67:52:95:9e:f2:d3:ec:ff:bf:79:6c:13:97:83:11:41:ca:7c:
a2:d6:6b:bd:44:e3:e4:e7:8e:86:58:59:54:00:be:18:06:44:
66:83:63:46:c1:9f:7b:00:f3:4a:22:0d:64:3b:76:3b:cf:f0:
78:42:15:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:40 2026 by rpki-client