Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
File: phqPZno93b1KNSMY2PBgbEbp8GM.mft (raw, json)
Hash identifier: IBEONIU9woxX2/qewp5idEnsKk8yAJodknHWUhpGEik=
Subject key identifier: B0:57:AE:FD:E9:76:30:51:95:A1:7F:FF:42:D6:D2:0D:F3:A5:FA:D0
Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
Certificate issuer: /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Certificate serial: 019D988689D6CE3366DE4CFDFB710D1779B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 23:00:47 +0000
Manifest this update: Thu 16 Apr 2026 23:00:47 +0000
Manifest next update: Fri 17 Apr 2026 23:00:47 +0000
Files and hashes: 1: aL-SGiAffvqCZQ5o8Ubyi3Yxves.roa (hash: nBnleL6X+T/X/zfiX5N8ZkgEWSbhPXx+iLrLHdXNMnw=)
2: phqPZno93b1KNSMY2PBgbEbp8GM.crl (hash: vSP0D3ife/+oXdYKpdCuDCIyqomL39PjOErEhtOtgYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:89:d6:ce:33:66:de:4c:fd:fb:71:0d:17:79:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Validity
Not Before: Apr 16 23:00:47 2026 GMT
Not After : Apr 17 23:00:47 2026 GMT
Subject: CN=b057aefde976305195a17fff42d6d20df3a5fad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:de:ff:86:a9:1e:62:31:12:3d:20:66:e8:07:
b5:42:42:ed:21:91:ae:b2:35:c4:f8:ad:16:07:e1:
1f:fc:61:95:9f:a5:44:e0:e6:e1:be:85:e6:c8:80:
1e:8e:1c:1f:8e:c7:c4:01:e3:a0:bb:cc:5e:ef:44:
4c:5b:85:07:5a:79:bd:b9:26:b3:6c:bc:36:b6:14:
0a:97:b1:f7:62:ec:5a:63:c6:88:57:9b:e3:1a:7a:
99:11:79:7e:f7:79:93:45:0d:5a:5c:a4:f8:c3:01:
ff:57:a8:a2:92:1c:71:50:67:d6:dc:16:f1:03:83:
80:9f:02:19:fd:d3:6b:31:e0:f7:a9:50:4d:98:ff:
7d:4b:59:f4:03:7f:b7:13:b6:ea:70:5b:0e:01:bf:
24:78:89:01:c3:15:a7:2f:4a:c4:5b:d0:89:0c:19:
97:a2:93:52:c9:1d:03:94:18:da:bf:36:a6:91:b9:
c9:70:e6:83:f0:47:93:68:7b:f2:61:55:ce:37:a7:
53:8f:f1:a8:3d:19:da:6f:2a:b5:af:e8:7b:cf:0e:
58:05:46:11:27:4e:eb:d8:11:0b:9e:9c:d3:9a:7a:
2f:c8:b8:c1:a0:30:cf:49:f5:d5:9e:bc:49:25:22:
94:67:9d:16:9b:a8:19:2d:63:a7:dd:d2:0c:97:ea:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:57:AE:FD:E9:76:30:51:95:A1:7F:FF:42:D6:D2:0D:F3:A5:FA:D0
X509v3 Authority Key Identifier:
keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3a:f2:5c:38:5c:eb:a1:df:b3:5c:cf:8a:b3:c3:0d:22:25:
38:e1:d9:98:ef:a0:a4:c5:40:dd:32:93:34:e5:8a:45:17:98:
09:72:b9:0a:80:2c:5d:31:81:e4:44:1c:0f:f8:80:d8:f2:fc:
65:da:42:68:6f:28:72:13:f4:18:b7:e0:64:cc:88:4f:ec:ac:
61:b1:7a:82:4d:b5:52:d8:1b:95:17:69:6d:4c:e2:2c:b4:21:
06:e8:50:a2:a5:6f:ea:f8:f0:f3:47:7b:ff:55:4e:59:7a:86:
4c:32:cf:f2:67:00:66:ca:59:79:62:ad:8f:cf:de:51:76:9f:
9c:b3:c2:58:f3:2d:b3:5b:a6:dc:55:b5:41:9f:41:db:a0:6b:
94:87:77:fd:44:e2:e8:4b:44:bd:02:7d:4a:19:0e:48:eb:56:
0e:b1:0c:45:34:19:7d:4a:a8:ad:0a:fb:d6:cd:e9:02:dd:aa:
79:1f:63:2c:3a:80:2c:69:44:90:18:aa:84:8d:30:3a:6a:a0:
e7:01:5b:2d:41:0c:32:fa:b2:aa:8f:76:8d:73:c1:a0:ac:3b:
c3:47:58:6f:02:60:69:5b:de:f5:f0:00:97:eb:e8:2e:ed:37:
86:b9:f7:56:d4:ab:3f:85:63:d7:a0:43:92:b1:22:40:74:1c:
ea:3b:40:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:15 2026 by rpki-client