Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
File: phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft (raw, json)
Hash identifier: 2+XQhUgWpJtUIRbDtOHJ0WqENrooWS5sXTRoTof8g0M=
Subject key identifier: C3:E6:74:7D:32:66:84:20:34:60:89:E1:C2:86:69:22:0C:61:84:E1
Authority key identifier: A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
Certificate issuer: /CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Certificate serial: 019CADC7F2A5CC37F02078CE70202B7E0B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
Manifest number: 036E
Signing time: Mon 02 Mar 2026 09:01:27 +0000
Manifest this update: Mon 02 Mar 2026 09:01:27 +0000
Manifest next update: Tue 03 Mar 2026 09:01:27 +0000
Files and hashes: 1: R9yuRT4SpbFRYXwtoqgd5_GlTyI.roa (hash: kxhnGSSaFDIC1z6NUEjoYtqaLZRHrO86ZgnVJODeRiU=)
2: ZCmPNfqIdlxAM9m53SDv9GQZfCc.roa (hash: pdrlFcu3fc1loHOmCUjjHjU4v0K6/wgDY+DGkNkZZzc=)
3: phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl (hash: ngkG/Cmol6rF5DeA1kxYT4N5iFHBdRDqO8srX9OWv2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:f2:a5:cc:37:f0:20:78:ce:70:20:2b:7e:0b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Validity
Not Before: Mar 2 09:01:27 2026 GMT
Not After : Mar 3 09:01:27 2026 GMT
Subject: CN=c3e6747d32668420346089e1c28669220c6184e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:c0:98:bc:ce:a6:07:68:ee:c2:c3:85:a8:
ea:7d:0f:54:7a:6f:e1:5f:f4:7c:80:c4:0a:2c:a3:
b1:2c:b8:94:c5:b2:c2:d4:b3:02:1c:04:b3:d3:d6:
b5:55:2e:34:4f:ef:25:a5:32:8b:b8:94:99:f2:c6:
d1:5d:03:d3:d4:7f:7e:72:ef:81:91:ed:c3:b9:53:
d0:66:fb:b4:9d:fb:9f:a6:3b:39:c6:18:60:4a:45:
18:3f:76:93:ac:97:84:39:8e:28:9b:40:eb:cc:3e:
dd:44:94:34:30:24:e2:c3:f7:c5:bd:11:2f:cf:ac:
85:84:bc:74:ee:0b:5f:ee:29:99:7c:76:0e:57:40:
ca:45:15:16:df:e0:5d:86:8c:ea:02:8a:6a:37:dd:
e4:16:ec:79:03:42:6e:65:d0:ea:68:cd:a2:37:b4:
f1:07:73:95:fc:38:cb:c5:57:d0:34:77:2b:3e:8f:
5b:4b:04:65:57:f2:9a:25:95:38:54:f6:cb:25:96:
41:a8:c3:eb:be:a9:04:d5:1d:f2:da:9a:c6:39:ae:
f6:c2:e3:ec:43:fe:a9:33:7a:40:89:fe:6c:e5:5b:
9c:48:98:b7:72:4b:72:e2:7c:32:41:1a:fe:43:70:
f9:7e:df:31:c9:1a:bc:99:5e:31:0c:92:c8:18:26:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E6:74:7D:32:66:84:20:34:60:89:E1:C2:86:69:22:0C:61:84:E1
X509v3 Authority Key Identifier:
keyid:A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:01:ad:89:1b:9f:f4:2c:dd:e2:1b:75:62:a9:28:a2:73:3d:
f9:88:27:b1:73:61:35:65:3a:61:cc:8c:10:31:87:a7:fa:33:
99:2e:1e:77:4f:39:f2:ac:85:e9:0f:d2:d8:b8:44:af:a1:67:
61:15:3e:e1:51:4f:25:09:17:ad:d8:b0:ae:bf:fc:a6:6f:1d:
70:14:d6:f6:a8:e1:25:02:ab:59:33:b3:4d:96:0d:fc:12:00:
96:a9:85:dd:76:47:20:33:20:0a:bc:f0:f5:c3:c7:62:dc:d8:
fd:99:b8:88:b4:76:df:f6:a3:09:84:d0:75:80:66:e0:52:1b:
e0:10:ec:83:80:6b:27:f8:ce:c6:41:16:df:20:3e:ff:7d:15:
bc:8f:08:ba:39:6f:a3:8b:f7:60:28:d0:2b:19:a2:4f:d9:09:
3c:ac:a2:e4:e3:55:41:df:5e:54:f9:54:e2:ff:6c:4a:02:77:
3b:c4:f3:51:fa:68:f5:e7:22:56:98:d7:5d:41:b8:43:31:c3:
f9:8c:25:fe:f4:83:66:03:f2:15:5a:71:9e:ab:48:f9:21:3f:
6c:4c:f0:9f:58:91:31:80:c8:6b:dc:eb:5b:0c:cb:8a:de:27:
d7:8b:91:c6:33:ee:12:8e:de:4a:78:94:da:8d:a4:26:be:88:
7e:70:e3:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx/KlzDfwIHjOcCArfgt4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MTYyMTAyZTVhM2MwYWVlYWI2M2MyMWVkOTJhODA1ODI2
ZGI3YWEwHhcNMjYwMzAyMDkwMTI3WhcNMjYwMzAzMDkwMTI3WjAzMTEwLwYDVQQD
EyhjM2U2NzQ3ZDMyNjY4NDIwMzQ2MDg5ZTFjMjg2NjkyMjBjNjE4NGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyefAmLzOpgdo7sLDhajqfQ9Uem/h
X/R8gMQKLKOxLLiUxbLC1LMCHASz09a1VS40T+8lpTKLuJSZ8sbRXQPT1H9+cu+B
ke3DuVPQZvu0nfufpjs5xhhgSkUYP3aTrJeEOY4om0DrzD7dRJQ0MCTiw/fFvREv
z6yFhLx07gtf7imZfHYOV0DKRRUW3+BdhozqAopqN93kFux5A0JuZdDqaM2iN7Tx
B3OV/DjLxVfQNHcrPo9bSwRlV/KaJZU4VPbLJZZBqMPrvqkE1R3y2prGOa72wuPs
Q/6pM3pAif5s5VucSJi3ckty4nwyQRr+Q3D5ft8xyRq8mV4xDJLIGCbKFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPmdH0yZoQgNGCJ4cKGaSIMYYThMB8GA1UdIwQY
MBaAFKYWIQLlo8Cu6rY8Ie2SqAWCbbeqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83ZGQyNWQtYTUyMS00NzljLTk4OGIt
OWNlZTc3YmM1MjIyLzEvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83ZGQyNWQtYTUyMS00NzljLTk4OGItOWNlZTc3YmM1MjIy
LzEvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQGtiRuf
9Czd4ht1YqkoonM9+YgnsXNhNWU6YcyMEDGHp/ozmS4ed0858qyF6Q/S2LhEr6Fn
YRU+4VFPJQkXrdiwrr/8pm8dcBTW9qjhJQKrWTOzTZYN/BIAlqmF3XZHIDMgCrzw
9cPHYtzY/Zm4iLR23/ajCYTQdYBm4FIb4BDsg4BrJ/jOxkEW3yA+/30VvI8Iujlv
o4v3YCjQKxmiT9kJPKyi5ONVQd9eVPlU4v9sSgJ3O8TzUfpo9eciVpjXXUG4QzHD
+Ywl/vSDZgPyFVpxnqtI+SE/bEzwn1iRMYDIa9zrWwzLit4n14uRxjPuEo7eSniU
2o2kJr6IfnDjoQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:03:33 2026 by rpki-client