Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
File: pHwKyKnV9ixJHUsXyyErUsDnVgc.mft (raw, json)
Hash identifier: L241J5OFM8M3MjSVyEIRHW1PPJtGG3MYtnACXfBXPrM=
Subject key identifier: 50:FD:BC:4F:65:75:DF:A5:E2:54:7D:14:A7:0C:AF:49:DB:6E:AD:0F
Authority key identifier: A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07
Certificate issuer: /CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607
Certificate serial: 019CAC4722EA9A31622B9A2BE89049E81EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
Manifest number: 148A
Signing time: Mon 02 Mar 2026 02:01:08 +0000
Manifest this update: Mon 02 Mar 2026 02:01:08 +0000
Manifest next update: Tue 03 Mar 2026 02:01:08 +0000
Files and hashes: 1: mSRNwBt4HyvxOKDrOMFnswIgda4.roa (hash: 7d61GNgLmLVgIgZ3h9dpanvVUYVfZYRsvyeUkivWWd4=)
2: pHwKyKnV9ixJHUsXyyErUsDnVgc.crl (hash: yl/FleN2yjI1VurABDkvqMprLjmftuIRdq0WWYNU7ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:22:ea:9a:31:62:2b:9a:2b:e8:90:49:e8:1e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607
Validity
Not Before: Mar 2 02:01:08 2026 GMT
Not After : Mar 3 02:01:08 2026 GMT
Subject: CN=50fdbc4f6575dfa5e2547d14a70caf49db6ead0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:99:df:a7:41:78:35:5b:66:84:bb:1c:b4:
ca:fe:5f:e1:fc:93:5c:70:18:d6:e0:9d:d9:81:72:
4a:da:95:0e:14:3f:78:1e:47:1f:9a:4e:b9:0f:8b:
56:10:7e:2d:e7:3d:b8:00:b5:b1:7a:7a:d8:25:ac:
76:dd:0c:22:3a:0d:8a:c6:32:2a:8e:f0:57:8c:6b:
0d:f1:72:e8:b5:37:18:8b:6a:86:d2:8c:d4:17:fe:
b6:63:99:17:d4:23:2d:b9:01:5a:98:d0:6f:25:84:
08:63:31:ee:b9:00:a2:9c:62:97:26:79:be:fb:66:
d9:42:0c:23:1c:98:67:4a:94:5b:fe:0a:3e:c9:bc:
35:9a:13:dd:2e:ea:db:22:18:34:de:c1:a9:6d:ff:
c4:39:05:ac:7a:19:94:ab:bb:29:1f:01:dd:52:23:
8b:b1:00:7b:36:9b:59:d5:2d:a2:98:a4:65:3c:4e:
fc:ae:0c:73:62:8f:c6:8f:f8:20:5f:c8:8a:a9:0f:
50:34:d9:5c:18:e0:c2:72:53:aa:bc:10:64:54:78:
6f:39:08:05:83:cc:1e:58:ae:f9:54:9e:b7:22:2f:
09:7f:1e:34:4a:f7:66:2b:92:35:7c:02:56:69:60:
fd:be:a4:a4:fb:ed:98:40:80:78:e9:52:0b:e5:e2:
b2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FD:BC:4F:65:75:DF:A5:E2:54:7D:14:A7:0C:AF:49:DB:6E:AD:0F
X509v3 Authority Key Identifier:
keyid:A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9b:05:6c:12:d4:86:bf:14:c2:36:49:fb:aa:86:9f:4b:d1:
2c:30:89:f6:7b:bc:07:d1:6c:b1:c8:4d:b1:4f:7a:af:ac:fb:
9d:a1:e1:99:1e:ff:b5:7d:b0:d0:fb:bb:ec:24:c6:91:fb:14:
d6:df:92:ce:53:28:e8:2a:c7:bc:1c:25:63:b7:5b:1f:5b:83:
05:20:af:a1:c7:b2:31:63:c7:8f:cf:aa:ca:41:dd:2b:6a:ea:
77:fb:c9:4c:02:c9:56:c1:74:26:04:8c:40:43:c3:5e:0e:f0:
39:b8:83:d7:4a:a5:cb:b6:54:fd:97:a7:68:e6:22:1a:de:f7:
2b:9c:27:2a:40:77:98:51:18:74:e0:c8:e3:7c:9b:a4:e6:6a:
fc:4a:38:c7:f8:95:08:bc:48:a3:5f:5b:17:4c:c3:5f:73:63:
37:ba:fb:04:81:86:57:77:dc:f9:63:4e:6d:fb:08:44:0d:23:
6e:f5:c4:23:6e:80:2c:2d:42:89:d9:59:67:d6:1b:92:05:9d:
26:48:3f:7a:e0:e3:20:1e:7f:aa:6b:a9:e6:93:53:96:4d:0d:
73:53:4a:7a:df:1c:4e:ed:bc:55:65:43:3a:bc:64:68:60:d0:
64:66:7b:3f:7a:47:8b:19:ba:c4:08:7a:39:86:d0:7b:fb:d7:
82:eb:f1:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRyLqmjFiK5or6JBJ6B7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0N2MwYWM4YTlkNWY2MmM0OTFkNGIxN2NiMjEyYjUyYzBl
NzU2MDcwHhcNMjYwMzAyMDIwMTA4WhcNMjYwMzAzMDIwMTA4WjAzMTEwLwYDVQQD
Eyg1MGZkYmM0ZjY1NzVkZmE1ZTI1NDdkMTRhNzBjYWY0OWRiNmVhZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtmZ36dBeDVbZoS7HLTK/l/h/JNc
cBjW4J3ZgXJK2pUOFD94Hkcfmk65D4tWEH4t5z24ALWxenrYJax23QwiOg2KxjIq
jvBXjGsN8XLotTcYi2qG0ozUF/62Y5kX1CMtuQFamNBvJYQIYzHuuQCinGKXJnm+
+2bZQgwjHJhnSpRb/go+ybw1mhPdLurbIhg03sGpbf/EOQWsehmUq7spHwHdUiOL
sQB7NptZ1S2imKRlPE78rgxzYo/Gj/ggX8iKqQ9QNNlcGODCclOqvBBkVHhvOQgF
g8weWK75VJ63Ii8Jfx40SvdmK5I1fAJWaWD9vqSk++2YQIB46VIL5eKy7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFD9vE9ldd+l4lR9FKcMr0nbbq0PMB8GA1UdIwQY
MBaAFKR8Csip1fYsSR1LF8shK1LA51YHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yNWM5MWQtNWEwNS00NmEyLTlhNzkt
NDIwY2MyNTFlNWViLzEvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8yNWM5MWQtNWEwNS00NmEyLTlhNzktNDIwY2MyNTFlNWVi
LzEvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5sFbBLU
hr8UwjZJ+6qGn0vRLDCJ9nu8B9FsschNsU96r6z7naHhmR7/tX2w0Pu77CTGkfsU
1t+SzlMo6CrHvBwlY7dbH1uDBSCvoceyMWPHj8+qykHdK2rqd/vJTALJVsF0JgSM
QEPDXg7wObiD10qly7ZU/ZenaOYiGt73K5wnKkB3mFEYdODI43ybpOZq/Eo4x/iV
CLxIo19bF0zDX3NjN7r7BIGGV3fc+WNObfsIRA0jbvXEI26ALC1CidlZZ9YbkgWd
Jkg/euDjIB5/qmup5pNTlk0Nc1NKet8cTu28VWVDOrxkaGDQZGZ7P3pHixm6xAh6
OYbQe/vXguvxow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:55 2026 by rpki-client