Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
File: phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft (raw, json)
Hash identifier: /mxDYQw0L+ljV4BuJYswmGiN4oJa2r6Hk9K1uAPYErE=
Subject key identifier: 7C:FD:0F:B0:68:4B:5D:4B:A9:EB:7B:EA:36:B3:98:9C:88:04:82:9E
Authority key identifier: A6:10:37:10:70:66:77:30:AA:F5:90:2E:9F:8C:63:40:80:0E:EC:88
Certificate issuer: /CN=a610371070667730aaf5902e9f8c6340800eec88
Certificate serial: 01A1DE7024D82816637FD7E96890A47BEA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:00:53 +0000
Manifest this update: Sun 15 Nov 2026 09:00:53 +0000
Manifest next update: Mon 16 Nov 2026 09:00:53 +0000
Files and hashes: 1: dZDlbqsnapFIwj1HUHLInqN8JVw.roa (hash: bs/eDOvdIuJ1snvbff8tQ4iMRziNZ2Vwxnsh8r7rh+0=)
2: h087lucF2ivPyD3F1D3_NLkhOb8.roa (hash: deWexSQgKEOrc0A416IV+spDrpGZpTVS9EaD2+rgd3g=)
3: kdSBI_9pb4sru0XZjIhpyOoJDTA.roa (hash: AahhJx6gs1/aCr1ScQXRa/wo3nSdwYac1ZF6rIEWe98=)
4: phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl (hash: 4dbN/OyS0IJyTdn4qeymgoz5a3l24QeWAr6qW4eeUEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:24:d8:28:16:63:7f:d7:e9:68:90:a4:7b:ea:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a610371070667730aaf5902e9f8c6340800eec88
Validity
Not Before: Nov 15 09:00:53 2026 GMT
Not After : Nov 16 09:00:53 2026 GMT
Subject: CN=7cfd0fb0684b5d4ba9eb7bea36b3989c8804829e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e3:39:75:db:7c:fe:58:0a:5e:e4:13:5f:a1:
0a:ea:b8:30:34:5e:e1:70:81:e9:ce:b0:75:55:70:
4e:e0:16:37:f3:01:d1:a8:34:04:4f:4f:f8:94:9d:
b1:59:7f:0c:de:4b:1b:bf:57:9f:d5:56:60:3e:96:
74:06:d9:41:16:53:7f:2d:96:c5:84:85:e6:42:87:
f4:1c:ce:2f:8d:81:1c:4f:8b:9b:24:07:45:87:bb:
4c:95:28:4e:92:c6:4f:44:04:8c:a4:50:4f:c7:b8:
5b:73:ec:4c:46:b8:e0:65:de:df:45:0e:5a:c0:a5:
2a:4a:c7:7f:3c:bd:a3:7e:c9:2d:46:b8:54:96:71:
8d:c4:ae:1c:4b:7d:d1:02:ba:78:56:de:3e:19:f9:
84:ee:22:88:05:b3:d7:99:d7:fd:c4:22:66:1a:a2:
50:41:dc:f9:9d:f0:0f:ba:61:59:74:13:9b:a3:9e:
00:63:87:44:81:94:f6:6c:2b:81:75:ef:8d:4d:85:
0d:0f:d7:29:65:0e:7f:ea:f6:70:c4:b3:f0:dd:45:
8e:fb:c7:e8:e2:5d:42:1d:73:14:48:0a:3d:81:4d:
5c:52:75:c8:d9:f2:74:5b:0e:e4:fa:7e:51:33:e6:
2d:6f:82:71:0f:ad:ff:44:38:59:81:a3:08:68:6e:
4b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FD:0F:B0:68:4B:5D:4B:A9:EB:7B:EA:36:B3:98:9C:88:04:82:9E
X509v3 Authority Key Identifier:
keyid:A6:10:37:10:70:66:77:30:AA:F5:90:2E:9F:8C:63:40:80:0E:EC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phA3EHBmdzCq9ZAun4xjQIAO7Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/phA3EHBmdzCq9ZAun4xjQIAO7Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:67:53:ec:fb:bf:26:8e:19:77:6d:37:5e:41:bd:cd:4a:b1:
f5:4f:8d:1b:bc:e7:3e:23:8d:ff:e5:94:1d:d3:8b:e0:2f:3c:
e1:0d:31:9f:06:a6:b3:b1:35:7d:c0:7e:be:e9:f7:03:46:d7:
51:47:a0:fd:41:e4:34:92:c5:46:ec:49:3c:9d:c7:1f:7d:4a:
a6:04:43:88:5c:09:e6:03:c8:1b:18:66:d3:b8:12:7e:e8:4b:
53:67:cd:73:61:b2:0e:86:a1:22:db:37:45:ee:30:d4:3e:94:
f9:3c:3d:9a:1c:48:90:46:90:a3:60:aa:15:07:0d:0b:7f:59:
83:3f:ff:45:53:18:0a:24:5a:2e:ce:a4:d6:1c:06:3d:73:87:
ff:b3:29:9b:ab:ec:88:4c:98:f9:56:bb:d8:3d:43:25:ab:06:
d9:92:75:36:21:52:40:a8:d2:d2:7d:ea:58:4b:67:17:7e:bb:
ed:e6:ea:1d:18:7a:54:3b:54:ea:50:d8:f3:ce:d5:15:24:68:
10:83:d7:a7:bc:01:a2:ad:ed:12:d9:f2:c8:3c:b5:d6:83:35:
ef:de:91:e9:09:75:28:cb:c8:8c:51:33:07:ba:a7:4f:a9:ef:
dd:eb:15:73:cf:17:e9:ad:4d:d0:f5:02:02:07:c9:a7:94:82:
f2:89:b5:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecCTYKBZjf9fpaJCke+p4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MTAzNzEwNzA2Njc3MzBhYWY1OTAyZTlmOGM2MzQwODAw
ZWVjODgwHhcNMjYxMTE1MDkwMDUzWhcNMjYxMTE2MDkwMDUzWjAzMTEwLwYDVQQD
Eyg3Y2ZkMGZiMDY4NGI1ZDRiYTllYjdiZWEzNmIzOTg5Yzg4MDQ4MjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuM5ddt8/lgKXuQTX6EK6rgwNF7h
cIHpzrB1VXBO4BY38wHRqDQET0/4lJ2xWX8M3ksbv1ef1VZgPpZ0BtlBFlN/LZbF
hIXmQof0HM4vjYEcT4ubJAdFh7tMlShOksZPRASMpFBPx7hbc+xMRrjgZd7fRQ5a
wKUqSsd/PL2jfsktRrhUlnGNxK4cS33RArp4Vt4+GfmE7iKIBbPXmdf9xCJmGqJQ
Qdz5nfAPumFZdBObo54AY4dEgZT2bCuBde+NTYUND9cpZQ5/6vZwxLPw3UWO+8fo
4l1CHXMUSAo9gU1cUnXI2fJ0Ww7k+n5RM+Ytb4JxD63/RDhZgaMIaG5LqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHz9D7BoS11Lqet76jazmJyIBIKeMB8GA1UdIwQY
MBaAFKYQNxBwZncwqvWQLp+MY0CADuyIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGhBM0VIQm1kekNxOVpBdW40eGpRSUFPN0lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9iNzNhZGQtZWEwZi00YzIyLTk4MGUt
MDU5YmFiMDE1Y2MzLzEvcGhBM0VIQm1kekNxOVpBdW40eGpRSUFPN0lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9iNzNhZGQtZWEwZi00YzIyLTk4MGUtMDU5YmFiMDE1Y2Mz
LzEvcGhBM0VIQm1kekNxOVpBdW40eGpRSUFPN0lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmdT7Pu/
Jo4Zd203XkG9zUqx9U+NG7znPiON/+WUHdOL4C884Q0xnwams7E1fcB+vun3A0bX
UUeg/UHkNJLFRuxJPJ3HH31KpgRDiFwJ5gPIGxhm07gSfuhLU2fNc2GyDoahIts3
Re4w1D6U+Tw9mhxIkEaQo2CqFQcNC39Zgz//RVMYCiRaLs6k1hwGPXOH/7Mpm6vs
iEyY+Va72D1DJasG2ZJ1NiFSQKjS0n3qWEtnF3677ebqHRh6VDtU6lDY887VFSRo
EIPXp7wBoq3tEtnyyDy11oM1796R6Ql1KMvIjFEzB7qnT6nv3esVc88X6a1N0PUC
AgfJp5SC8om1fQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:31:17 2026 by rpki-client