Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
File: phqPZno93b1KNSMY2PBgbEbp8GM.mft (raw, json)
Hash identifier: x+8m5ENOnSd9IhI7MQcKK2pirQxN0wZ0oXg/WuK6G30=
Subject key identifier: 28:FB:74:A4:51:15:52:B2:FB:54:73:28:71:FE:3C:C7:1C:FA:CC:A1
Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
Certificate issuer: /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Certificate serial: 019CACEBB2DBF24833805CF9EAAEAD7137B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 05:00:53 +0000
Manifest this update: Mon 02 Mar 2026 05:00:53 +0000
Manifest next update: Tue 03 Mar 2026 05:00:53 +0000
Files and hashes: 1: aL-SGiAffvqCZQ5o8Ubyi3Yxves.roa (hash: nBnleL6X+T/X/zfiX5N8ZkgEWSbhPXx+iLrLHdXNMnw=)
2: phqPZno93b1KNSMY2PBgbEbp8GM.crl (hash: UqgWHceKku+Av6zB8j51R8Cgz1hskUGB6XN9XN2dsj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b2:db:f2:48:33:80:5c:f9:ea:ae:ad:71:37:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Validity
Not Before: Mar 2 05:00:53 2026 GMT
Not After : Mar 3 05:00:53 2026 GMT
Subject: CN=28fb74a4511552b2fb54732871fe3cc71cfacca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4d:f3:89:eb:77:85:d0:d8:43:08:98:aa:7c:
83:06:6b:d2:bc:3c:19:f0:89:82:3c:56:12:a8:2b:
62:f1:98:8a:7c:5a:6a:15:5e:c7:37:e3:fb:fa:8b:
6d:6d:d9:fc:70:f5:00:2f:c9:c3:5a:1b:ca:e2:9e:
41:56:88:48:2b:60:6e:48:1d:ba:c7:e0:43:ee:92:
0c:79:5c:3b:a2:03:b3:14:fe:91:89:b1:b4:ce:55:
96:12:58:8b:96:1c:69:c3:d5:0b:91:b1:0e:64:a0:
9d:f0:1a:bd:82:d3:ef:f7:49:2b:10:a3:03:d2:d0:
e6:1d:8c:99:cb:19:19:14:24:f6:cb:0d:d5:f7:15:
34:06:7c:5d:eb:97:3c:55:09:bd:dc:94:23:e4:4e:
ec:e6:bf:f5:eb:ee:fb:9e:91:13:5c:36:f0:76:41:
49:cf:06:66:f6:2f:ca:c2:e8:f3:6e:b1:90:b5:e3:
88:de:78:5d:5e:b9:ee:7c:fe:3b:83:ad:b6:58:16:
47:5e:6b:e4:52:b4:fd:8a:12:91:57:8d:a4:e3:60:
6b:69:97:9c:5e:9a:61:11:a2:34:ce:b9:52:2e:ad:
f7:e2:01:3f:fd:50:4e:bc:c9:e4:e9:88:20:d1:1f:
30:d3:e3:02:cb:11:cc:08:f6:f8:5e:a4:57:df:ef:
c9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FB:74:A4:51:15:52:B2:FB:54:73:28:71:FE:3C:C7:1C:FA:CC:A1
X509v3 Authority Key Identifier:
keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:37:d7:27:70:98:91:65:4b:ad:3a:f1:51:24:5d:5f:c7:2c:
19:f2:a8:ba:3f:9c:37:30:14:62:cc:f4:03:95:8b:82:fa:77:
2b:e4:40:e8:51:00:d1:d8:8c:a1:92:1e:57:54:4d:79:5a:a2:
65:c9:83:a7:c2:06:2d:8e:0d:4d:c7:ac:12:ec:15:31:9f:8f:
22:02:e8:14:7c:4f:df:b8:bb:3b:a0:bc:82:01:1a:99:9b:2b:
8b:6c:e7:72:24:ce:1f:74:f2:0f:3b:b8:7e:8b:5e:42:b8:de:
c2:06:4f:98:0a:67:c8:be:a6:a1:9c:12:ce:c7:fd:70:b3:73:
7d:0a:d9:d5:d8:b5:6e:0c:cf:e2:88:c5:82:23:63:e9:41:60:
3d:41:88:83:95:20:fa:8d:93:91:ca:ba:ee:9d:ff:85:de:40:
96:fc:9f:af:51:7a:ac:57:cb:e7:08:55:8f:a6:37:fa:bc:ac:
cd:2f:f2:50:5a:32:49:4b:06:56:61:b2:2a:ba:00:08:55:c5:
fd:e8:21:51:fa:fd:c1:8e:f2:35:bc:7d:32:1d:03:8b:89:15:
f9:e1:fd:ab:c3:1c:8b:8c:9e:2d:84:50:7b:ad:d6:45:77:fb:
c3:5d:c9:53:8d:42:91:c7:14:90:24:7b:00:15:7e:e9:8c:44:
58:b5:93:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:35 2026 by rpki-client